Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa
File:                     DEF977A6E53611EB81682769C4F9AE02.roa (raw, json)
Hash identifier:          9Sja777+/DI9LrVjRVVanRSsluaWikKPhk3fpx+cYC8=
Subject key identifier:   18:0A:27:C3:9C:0E:3D:B0:25:FF:6B:84:70:ED:01:31:2B:54:11:71
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       13C9
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:20:51 +0000
ROA not before:           Wed 06 Aug 2025 17:26:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141886
IP address blocks:        203.12.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5065 (0x13c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Aug  6 17:26:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48383-555f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:e4:73:6f:bb:06:c5:65:24:f1:0d:88:7f:
                    d4:0a:3d:df:fd:b7:75:1a:e9:36:36:2c:12:1e:d3:
                    46:1b:bb:30:b8:37:eb:27:84:53:ee:b7:72:2c:15:
                    f8:d7:e9:20:c6:15:5c:45:8c:31:27:dc:51:d0:fb:
                    83:cc:54:a5:a1:af:3c:c1:57:74:20:7a:dd:6e:27:
                    57:d5:1e:06:d3:98:4b:8a:c2:b1:9c:48:c1:03:f1:
                    b4:f8:a2:75:2f:aa:1a:5b:21:65:88:66:fe:5f:56:
                    85:ff:bd:30:e2:0c:4e:97:cf:a6:02:02:18:b3:0d:
                    86:0f:f1:77:7e:a4:b4:7c:66:b3:70:ed:ae:2e:d9:
                    e1:01:da:81:27:3b:79:6c:89:51:bd:dc:9c:82:08:
                    8f:43:3c:78:e4:27:22:dc:c2:45:1f:9f:47:fa:ae:
                    63:53:1e:b6:04:a5:68:24:45:ef:89:cb:32:4e:16:
                    b4:2b:2b:df:e0:c3:c0:8e:3b:2b:39:97:01:b3:3e:
                    23:50:a1:34:5c:a7:d1:85:16:0d:f1:11:e1:7d:c0:
                    3b:b0:0a:e6:ed:ee:9e:bf:b7:16:6e:83:02:16:07:
                    1c:c2:0c:70:c6:fa:4b:ca:f7:a2:81:e7:9a:56:0e:
                    9c:41:ab:2f:c3:6c:5e:8c:27:6c:db:05:c3:76:89:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0A:27:C3:9C:0E:3D:B0:25:FF:6B:84:70:ED:01:31:2B:54:11:71
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9d:23:ad:79:00:1a:e0:6d:ed:21:4b:c4:f3:b7:9a:f5:b6:
         fe:eb:14:6f:41:bc:19:d3:74:59:d1:26:ca:a4:20:dc:85:23:
         a9:69:8f:eb:f8:95:79:ee:d1:a8:0e:16:b1:ef:14:40:27:d4:
         d8:7a:14:a7:75:2e:09:b7:bf:ca:a1:6f:a0:6d:e8:aa:51:d7:
         59:b9:03:29:83:55:18:ea:65:57:5c:44:b5:d1:0b:77:df:25:
         60:f7:61:7a:cc:87:2e:e8:18:5b:fe:5d:28:da:c4:05:8a:bb:
         a1:2e:d9:8c:b2:77:9f:d6:4d:b6:31:77:9e:00:ba:44:8f:9c:
         87:b2:0c:c5:90:97:75:12:fe:48:02:ca:91:1c:6c:03:a9:d7:
         de:1c:13:9b:a3:bb:64:45:3e:55:0e:6f:9b:9a:ce:89:96:8b:
         83:8e:e9:02:ce:1a:7d:ce:76:1d:98:10:6c:4d:1b:34:56:a2:
         95:a8:c3:e9:ce:53:f1:bf:cd:d9:41:e6:a5:30:7a:7d:e0:19:
         de:b1:cd:cc:41:37:bc:15:b8:68:59:ae:ae:b9:df:2c:80:cd:
         e8:6a:44:e4:c1:a5:51:e0:12:e2:e8:aa:9f:59:2d:fa:0f:fb:
         6f:2f:ef:2f:1d:b6:ed:ce:7c:8f:cb:f7:53:d1:3a:6c:8f:d1:
         08:81:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:40 2026 by rpki-client