Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa
File:                     12F0D72E7BC111EA8503D815C4F9AE02.roa (raw, json)
Hash identifier:          B2aPwnCTxCtKmkTz0kgNmn1+iaO+XM4B+/YtNmN756U=
Subject key identifier:   9E:0A:FC:85:57:B4:17:C3:AF:AB:53:BC:05:B3:2E:39:41:8E:14:44
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0F23
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:34 +0000
ROA not before:           Tue 02 Sep 2025 18:38:00 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        103.142.140.0/23 maxlen: 23
                          103.142.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3875 (0xf23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Sep  2 18:38:00 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a487aa-aa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:29:95:4c:17:15:7a:0b:31:3e:70:8f:61:
                    18:33:5e:05:08:a9:46:c4:f9:25:37:b2:05:71:e3:
                    10:14:67:e3:cb:9b:d5:2b:48:d2:f9:c4:bc:92:d2:
                    90:a8:d3:63:ba:df:36:b4:c7:db:ec:bb:f7:b3:7a:
                    ed:5c:c2:cb:3d:7c:9c:55:0b:cc:5d:a3:e3:ee:91:
                    5e:73:a0:ed:32:39:81:ec:2c:0c:5b:2b:3b:60:51:
                    4e:02:59:5a:61:e2:ca:69:09:e6:c1:fe:62:30:f5:
                    f4:3a:5c:2f:6e:45:a4:73:0f:77:8b:4b:f1:5e:55:
                    f9:3c:43:ce:05:e5:5d:6f:bf:1b:36:bf:f4:78:20:
                    d4:fe:ef:19:4f:c6:a0:13:60:68:99:1b:43:ea:0f:
                    5c:61:15:b4:cd:0e:a9:77:49:4c:b2:a2:dc:01:50:
                    35:9c:f3:43:7c:54:83:fc:40:d9:fb:0e:dd:ad:a6:
                    54:c7:57:c8:ca:39:79:86:89:06:9a:ab:41:5e:51:
                    db:db:1c:60:23:ca:8a:87:2e:ce:ff:9b:eb:91:07:
                    3b:61:d6:7a:8a:44:81:5e:39:0f:8b:77:49:b3:7c:
                    00:fc:5f:f4:62:7e:ba:3a:96:dc:99:53:95:d8:a8:
                    41:7e:a5:03:61:62:2e:5d:b3:1e:11:f1:9d:16:bd:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0A:FC:85:57:B4:17:C3:AF:AB:53:BC:05:B3:2E:39:41:8E:14:44
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:9f:6b:c0:b7:dd:f2:0c:c6:a7:b6:b6:c4:65:95:a0:38:db:
         02:ce:79:84:7a:d4:3e:09:a5:ca:c5:4d:e9:65:37:a6:c6:e3:
         16:1b:61:a6:2d:48:9a:cc:38:50:f0:d4:5b:d5:36:5a:d0:0f:
         f8:8c:9c:0a:49:1c:fa:31:35:27:64:31:da:d1:d9:a8:04:93:
         f2:ce:b9:d6:a9:17:59:b9:f2:74:d5:04:cb:14:d4:24:f6:b0:
         63:af:9e:32:20:3b:94:6d:e5:4d:e8:c9:36:a9:b0:73:1c:c3:
         14:bb:34:7a:44:34:bd:80:0e:aa:f2:8a:fc:f0:59:2b:4b:9d:
         37:e9:84:04:cf:dc:33:34:27:7d:8a:38:f7:b5:40:ea:71:b2:
         48:20:4b:d8:99:43:24:1a:e3:c7:26:0c:34:f3:14:0d:82:20:
         f3:5f:4d:a8:a5:c6:a9:cb:d6:ae:23:f9:75:7b:c9:9b:e2:5d:
         93:50:3b:d8:ce:be:55:c4:be:85:4b:fd:d9:06:f1:e3:ea:ec:
         54:e2:74:ad:4b:a0:ec:7d:55:b0:39:ac:94:e6:e6:da:26:01:
         ab:0f:a9:b1:94:78:99:81:20:07:c4:a2:40:fe:87:5d:bd:1a:
         c2:70:73:79:f0:60:b5:db:53:1a:8b:6c:0a:8c:86:29:50:77:
         43:55:88:6d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC
NzBBRjgwOTkwHhcNMjUwOTAyMTgzODAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODdhYS1hYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoIplUwXFXoLMT5wj2EYM14FCKlGxPklN7IFceMQFGfjy5vVK0jS+cS8ktKQ
qNNjut82tMfb7Lv3s3rtXMLLPXycVQvMXaPj7pFec6DtMjmB7CwMWys7YFFOAlla
YeLKaQnmwf5iMPX0OlwvbkWkcw93i0vxXlX5PEPOBeVdb78bNr/0eCDU/u8ZT8ag
E2BomRtD6g9cYRW0zQ6pd0lMsqLcAVA1nPNDfFSD/EDZ+w7draZUx1fIyjl5hokG
mqtBXlHb2xxgI8qKhy7O/5vrkQc7YdZ6ikSBXjkPi3dJs3wA/F/0Yn66OpbcmVOV
2KhBfqUDYWIuXbMeEfGdFr2rMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ4K/IVX
tBfDr6tTvAWzLjlBjhREMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4
NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvMTJGMEQ3MkU3
QkMxMTFFQTg1MDNEODE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ46MMA0GCSqGSIb3DQEBCwUAA4IBAQAmn2vAt93yDMantrbEZZWg
ONsCznmEetQ+CaXKxU3pZTemxuMWG2GmLUiazDhQ8NRb1TZa0A/4jJwKSRz6MTUn
ZDHa0dmoBJPyzrnWqRdZufJ01QTLFNQk9rBjr54yIDuUbeVN6Mk2qbBzHMMUuzR6
RDS9gA6q8or88FkrS5036YQEz9wzNCd9ijj3tUDqcbJIIEvYmUMkGuPHJgw08xQN
giDzX02opcapy9auI/l1e8mb4l2TUDvYzr5VxL6FS/3ZBvHj6uxU4nStS6DsfVWw
OayU5ubaJgGrD6mxlHiZgSAHxKJA/oddvRrCcHN58GC121Mai2wKjIYpUHdDVYht
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:13 2026 by rpki-client