Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/755581D40D7E11EDA9F2CA4AC4F9AE02.roa
File:                     755581D40D7E11EDA9F2CA4AC4F9AE02.roa (raw, json)
Hash identifier:          jM0G7ziCXGN0yBKegeTXjtb5tVVNc/LLgfpJOUYXKqY=
Subject key identifier:   7F:EA:7E:24:87:ED:D5:89:B6:35:C5:64:D3:AE:4E:E0:37:B1:A5:04
Certificate issuer:       /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B
Certificate serial:       0311
Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/755581D40D7E11EDA9F2CA4AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:05:23 +0000
ROA not before:           Wed 27 Aug 2025 02:07:10 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     62184
IP address blocks:        103.12.0.0/24 maxlen: 24
                          2001:df1:f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl
                          rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162914, serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B
        Validity
            Not Before: Aug 27 02:07:10 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40153-1532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:c9:c6:62:0f:e6:50:31:07:08:2f:8a:34:
                    45:fd:c1:e5:22:1b:40:06:e7:30:45:9c:ef:62:d7:
                    45:8e:8c:17:3a:57:91:d0:0b:ce:36:5b:61:7c:ef:
                    5c:09:ef:8c:0e:49:71:46:99:92:c5:00:f5:23:82:
                    2d:2c:2b:62:41:c3:72:98:b6:3c:16:59:6b:b4:3b:
                    4c:4e:a5:e3:ab:bf:8b:99:26:5f:90:63:35:17:87:
                    51:50:29:ea:8e:8a:63:3d:f6:18:c8:6e:9e:1a:92:
                    50:2f:cf:6d:9a:33:0b:de:4e:53:a6:b4:a0:94:e9:
                    e1:e3:55:33:d0:10:f7:8a:16:22:8e:43:05:3d:ba:
                    1c:3a:5e:b1:e3:ed:1b:3c:34:72:99:61:0a:a1:32:
                    71:07:62:1e:ae:df:04:c7:c4:26:65:40:4a:7a:a6:
                    81:71:24:af:7e:43:21:15:a0:9e:c5:6b:56:f8:47:
                    8d:8a:d5:9c:64:be:19:fb:2e:1c:9a:e2:c7:da:04:
                    db:a1:d6:28:b8:de:46:ee:f7:97:54:06:7d:4f:b0:
                    dd:7a:ae:43:c8:f0:9e:9c:38:42:1a:c9:b0:44:9e:
                    86:3f:ee:4e:85:44:14:02:de:13:5a:ee:4a:56:37:
                    79:c1:54:1d:b2:ca:70:7b:dc:f2:59:d8:3a:b9:14:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EA:7E:24:87:ED:D5:89:B6:35:C5:64:D3:AE:4E:E0:37:B1:A5:04
            X509v3 Authority Key Identifier:
                keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/755581D40D7E11EDA9F2CA4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.0.0/24
                IPv6:
                  2001:df1:f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:88:29:3a:22:6b:67:a9:bb:4b:e0:ee:82:09:a8:c8:96:28:
         8e:d8:42:d6:3b:dc:03:5c:5e:74:bf:dc:ba:63:bd:a9:f9:92:
         6a:e3:e1:ae:77:f1:79:91:fb:d5:39:a8:ba:c2:53:41:43:27:
         64:15:b6:c0:67:8e:4e:02:20:77:18:97:32:83:e7:00:da:84:
         ce:56:1e:eb:50:0d:d3:36:5b:a2:e7:7a:88:52:6b:7f:6f:9d:
         8a:c7:79:64:b5:6d:2d:a7:e1:df:54:ee:d4:fa:21:f5:4e:c7:
         98:e6:5c:20:aa:3b:e0:8d:0c:2d:2b:1d:11:e9:94:b4:57:f2:
         94:e9:5f:3e:7e:c8:69:61:01:21:46:e8:0d:07:fe:57:5a:69:
         46:7f:e0:e0:61:b7:47:23:c7:64:70:ee:20:4a:bf:21:a7:66:
         62:a5:b6:1c:e7:94:dc:24:c3:25:10:07:9c:26:dc:cb:34:f6:
         05:53:3b:b6:ab:b3:c8:f4:b7:38:b9:eb:9a:8c:b9:2b:b5:ae:
         86:9f:1e:97:05:c1:86:8c:45:59:50:2b:fc:88:c7:0d:13:c5:
         de:cf:e1:e8:37:b1:af:25:e9:26:eb:e8:ae:49:36:e2:7c:4a:
         93:e7:93:a0:04:4f:7d:e0:1c:8e:ca:c5:8c:f4:3d:8e:00:f6:
         fe:da:d3:ec
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5
Qzc3Qjk2M0IwHhcNMjUwODI3MDIwNzEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDE1My0xNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHrJxmIP5lAxBwgvijRF/cHlIhtABucwRZzvYtdFjowXOleR0AvONlthfO9c
Ce+MDklxRpmSxQD1I4ItLCtiQcNymLY8FllrtDtMTqXjq7+LmSZfkGM1F4dRUCnq
jopjPfYYyG6eGpJQL89tmjML3k5TprSglOnh41Uz0BD3ihYijkMFPbocOl6x4+0b
PDRymWEKoTJxB2Iert8Ex8QmZUBKeqaBcSSvfkMhFaCexWtW+EeNitWcZL4Z+y4c
muLH2gTbodYouN5G7veXVAZ9T7Ddeq5DyPCenDhCGsmwRJ6GP+5OhUQUAt4TWu5K
Vjd5wVQdsspwe9zyWdg6uRTjQwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFH/qfiSH
7dWJtjXFZNOuTuA3saUEMB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE
NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjI5MTQvRDY2QzkzRkMwRDc2MTFFRDgyQUJFMjRDQzRGOUFFMDIvNzU1NTgxRDQw
RDdFMTFFREE5RjJDQTRBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZwwAMA8EAgACMAkDBwAgAQ3xD0AwDQYJKoZIhvcNAQELBQADggEB
ACWIKToia2epu0vg7oIJqMiWKI7YQtY73ANcXnS/3Lpjvan5kmrj4a538XmR+9U5
qLrCU0FDJ2QVtsBnjk4CIHcYlzKD5wDahM5WHutQDdM2W6LneohSa39vnYrHeWS1
bS2n4d9U7tT6IfVOx5jmXCCqO+CNDC0rHRHplLRX8pTpXz5+yGlhASFG6A0H/lda
aUZ/4OBht0cjx2Rw7iBKvyGnZmKlthznlNwkwyUQB5wm3Ms09gVTO7ars8j0tzi5
65qMuSu1roafHpcFwYaMRVlQK/yIxw0Txd7P4eg3sa8l6Sbr6K5JNuJ8SpPnk6AE
T33gHI7KxYz0PY4A9v7a0+w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:33 2026 by rpki-client