Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/12EDB8D284C711EFA075A16AC4F9AE02.roa
File:                     12EDB8D284C711EFA075A16AC4F9AE02.roa (raw, json)
Hash identifier:          KV24/bEBcylNLG4cs1n5VfE+kOmO6T6A1cs3Vw5jHfo=
Subject key identifier:   E9:C2:54:C8:1E:4E:A8:B5:4F:C2:18:F0:7A:62:19:E5:F1:77:B1:BF
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       063E
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/12EDB8D284C711EFA075A16AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:24:21 +0000
ROA not before:           Thu 12 Jun 2025 23:03:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     6134
IP address blocks:        103.214.172.0/22 maxlen: 24
                          182.255.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jun 12 23:03:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47645-e3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:b0:a9:85:2b:03:76:3c:a6:df:9f:71:79:
                    cd:43:32:d7:50:c8:29:57:6d:20:b0:44:c7:89:fc:
                    41:1f:2b:e1:30:22:11:a8:3d:ce:fc:6d:c9:9a:5a:
                    72:ef:9a:8f:10:a7:06:d9:93:b5:8b:f4:31:ae:d3:
                    4d:28:b9:1c:25:9b:ec:2d:57:cf:58:f6:c0:02:9a:
                    5c:72:66:1a:32:46:c8:60:4c:5f:18:01:47:26:ca:
                    2e:30:5d:3b:3a:de:48:c6:ef:30:dc:ec:18:34:c8:
                    b5:a2:75:3a:e7:1d:75:b1:70:3d:ac:e8:45:8d:cc:
                    5b:c7:70:3a:ab:5a:0b:e6:db:3e:46:e8:b2:fc:6f:
                    cf:a1:6c:3c:58:9c:63:ca:e9:ca:52:fa:68:b7:fe:
                    b4:a0:dc:3f:da:f9:d8:93:5f:9b:c7:3c:0b:31:2c:
                    26:f7:bf:db:bb:dc:9e:82:21:64:97:f1:4d:4f:31:
                    14:63:5e:43:26:a6:f9:a1:dd:81:05:3b:f9:c9:bf:
                    ac:27:e5:87:a1:61:f0:77:c0:7c:f6:01:3f:00:29:
                    d9:0a:f9:5a:82:21:e7:44:a4:1e:0d:0a:10:88:96:
                    c4:ea:60:56:5c:4c:80:65:08:48:1e:93:31:c7:c5:
                    f0:d6:fa:43:b0:16:d4:55:0d:16:c5:fb:a4:0e:14:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:54:C8:1E:4E:A8:B5:4F:C2:18:F0:7A:62:19:E5:F1:77:B1:BF
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/12EDB8D284C711EFA075A16AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.172.0/22
                  182.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:4b:7f:9f:74:e2:bb:3e:5c:56:20:99:c5:c5:27:84:d8:b4:
         6d:97:a2:c0:75:1f:2a:0c:99:87:1a:70:76:5a:4f:11:e7:c0:
         ca:52:5e:b1:c8:fc:b7:4d:57:e9:44:3d:5c:a7:be:99:92:6c:
         ce:bf:f0:03:03:63:89:d7:29:16:0b:55:0f:50:93:9f:eb:54:
         08:51:86:e6:fd:be:61:b9:21:2f:d4:8a:df:6a:ae:ac:9c:bb:
         1a:7b:cb:1c:f0:6d:a7:e0:83:61:c0:de:c4:67:8a:0f:32:4b:
         08:c7:0e:4c:28:6d:80:08:ec:d5:00:04:73:df:5c:0f:82:20:
         4c:8b:eb:d5:e1:96:d8:2a:c8:df:6d:b1:93:82:9b:77:56:bb:
         d4:f1:ad:dd:68:e9:07:41:b5:1f:1e:3a:42:37:c7:f4:ce:35:
         a5:54:b6:0b:86:a1:ac:b9:66:ff:7a:bf:4e:73:98:4e:52:e9:
         15:55:b0:23:dc:7d:c1:42:31:2c:f2:34:a2:82:5f:27:44:ca:
         a8:20:8c:7b:34:d0:07:49:5f:24:5b:1d:5f:bf:69:89:52:b4:
         9d:16:9e:f1:12:fa:ef:18:49:1a:21:ad:57:b0:5a:87:9d:a2:
         78:88:1a:0b:64:72:32:cc:30:b9:f7:57:bf:18:a9:70:fe:73:
         54:4b:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:08 2026 by rpki-client