Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
File:                     12482BA205A211ED81E44F6DC4F9AE02.roa (raw, json)
Hash identifier:          yqhsBt682KKwLhxl4RtOnvTjyiqpotLVrtETrsjB+xc=
Subject key identifier:   68:64:DA:60:71:23:27:2A:C0:20:D2:F8:4A:AC:E7:39:83:F8:8C:5B
Certificate issuer:       /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
Certificate serial:       091D
Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:52:47 +0000
ROA not before:           Mon 30 Jun 2025 21:16:40 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38493
IP address blocks:        103.151.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl
                          rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
        Validity
            Not Before: Jun 30 21:16:40 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4288f-cea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:4c:60:60:2e:ed:2f:ed:1f:54:a5:18:91:
                    62:4b:a4:81:be:47:43:8d:04:67:74:3c:67:54:31:
                    e1:5f:aa:7c:24:54:00:1f:d3:d5:6e:73:5c:f1:47:
                    3c:24:52:14:5f:a7:eb:36:9c:d9:d6:d5:df:51:71:
                    75:cc:70:1d:ec:73:6d:31:84:4b:fb:18:d2:19:9c:
                    2b:2a:aa:09:fc:1d:e4:09:79:be:aa:43:1d:f1:e3:
                    ed:0e:99:4e:7c:34:bf:ae:51:1d:4d:e0:7b:6b:88:
                    ee:73:e2:85:a4:39:e9:a8:c2:6b:49:1d:14:30:0f:
                    22:f3:b0:2b:69:95:b4:d3:9e:7c:44:9d:e3:10:9e:
                    2f:0e:35:9c:13:58:cf:f7:fa:bb:bb:c0:e3:a2:28:
                    61:16:de:59:20:1c:cb:f3:4f:c8:07:49:41:2c:09:
                    e8:81:d0:ba:64:e4:73:82:cf:e1:1e:69:df:ec:4b:
                    3f:0d:d6:93:dc:16:6c:51:61:de:78:c5:8e:cb:cf:
                    49:c1:af:90:c9:6e:0d:4c:7a:e2:2b:4e:13:2e:eb:
                    d3:63:06:7f:ca:54:42:d8:db:82:4b:f7:29:12:b5:
                    e0:ad:6b:67:4a:39:ac:13:87:ea:6f:15:86:1c:2e:
                    78:96:fe:f3:11:af:54:04:87:33:31:97:ec:43:89:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:64:DA:60:71:23:27:2A:C0:20:D2:F8:4A:AC:E7:39:83:F8:8C:5B
            X509v3 Authority Key Identifier:
                keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:3a:6a:26:ae:ab:31:a5:7c:53:80:80:21:74:92:78:3d:a8:
         72:18:52:8b:cf:55:6d:7f:01:8e:d2:89:0a:a9:1a:30:9c:f8:
         f3:a4:d9:96:e0:e8:67:5b:27:99:54:a2:5d:8f:ac:75:b6:72:
         ee:65:ee:e2:13:9c:cf:27:10:1e:d9:10:5f:62:6c:23:f3:8f:
         da:95:68:02:3f:1f:59:aa:30:88:26:0f:ab:c5:a4:92:41:4b:
         a5:8f:60:ee:a2:85:e4:e5:b4:a9:73:59:31:60:be:07:b0:ea:
         32:0d:e8:04:4a:95:9f:77:59:98:89:98:07:e6:31:0e:ec:1d:
         a0:8b:13:32:78:92:7f:b7:dc:a7:bb:55:b9:2c:d0:b7:19:a7:
         49:20:db:f1:cd:2d:fb:60:93:b6:24:b8:67:52:32:d4:3a:a6:
         de:5c:fa:52:ea:cd:01:32:0c:ef:3b:53:19:70:43:c9:9a:98:
         4f:5b:e5:43:cf:cc:9e:e1:eb:86:b5:d9:d5:01:1f:e5:01:27:
         2e:c5:c4:05:95:1d:d1:19:d8:9c:13:36:e3:99:cb:cb:15:4b:
         d9:ae:37:9a:93:6f:7a:05:33:21:c8:6e:b4:1d:6d:5f:e7:81:
         3b:f6:ce:2e:c5:b0:fc:1c:84:5b:ef:f8:c6:de:3d:00:0d:ed:
         82:e2:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:57 2026 by rpki-client