Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa
File:                     12A549F8BFC111ECBF03EF63C4F9AE02.roa (raw, json)
Hash identifier:          a/OjejWguoz8SOjUqilIOKY73TJSTeqh0jYpuVfKqTM=
Subject key identifier:   9D:33:78:A9:20:22:81:DE:3F:FA:5A:A6:4A:99:D2:92:07:C3:F4:05
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       03F1
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:13:52 +0000
ROA not before:           Fri 13 Feb 2026 00:20:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     63889
IP address blocks:        103.179.242.0/24 maxlen: 24
                          103.179.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Feb 13 00:20:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a473d0-beff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:b8:84:9b:c0:78:81:dc:6b:b6:67:c3:14:
                    0f:4d:d9:cd:6a:9e:69:66:50:fc:93:ed:77:4b:b1:
                    f1:cc:d9:1f:ca:4f:e8:51:32:03:a6:12:27:b0:66:
                    b9:8d:73:78:7f:34:de:d1:6d:54:76:f0:ed:c2:cb:
                    57:48:28:ef:df:f3:82:7c:89:a7:19:a4:53:fe:58:
                    10:b6:5c:34:84:f7:5f:5d:cd:cc:f4:c5:c8:fa:4e:
                    83:6c:ff:de:6c:33:28:03:e1:62:fb:89:3d:7b:66:
                    e9:0e:6e:3b:c6:4e:83:0c:b3:d5:06:c7:e1:f9:09:
                    78:48:56:1a:aa:b9:80:1e:dd:e9:98:d3:d1:28:4b:
                    25:57:df:7d:11:e4:dd:ac:e4:de:48:30:20:2d:a3:
                    77:b6:c7:19:84:28:0b:2c:20:15:81:63:29:4c:d2:
                    22:12:ca:fb:a3:00:97:53:a6:55:7c:3c:d1:36:05:
                    b3:c1:6c:95:3d:4d:42:98:0a:14:55:b3:f7:1a:5b:
                    54:1e:cc:54:d6:2c:3c:28:10:db:f8:d2:32:46:3d:
                    b6:7d:6d:cd:a5:a5:83:a9:a4:35:06:a6:43:30:7e:
                    38:22:e5:f4:6f:aa:b6:6e:e6:e8:a9:07:a3:d8:05:
                    8f:2c:88:75:cb:ce:de:e4:8d:00:59:96:2b:11:76:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:33:78:A9:20:22:81:DE:3F:FA:5A:A6:4A:99:D2:92:07:C3:F4:05
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:d6:0f:b8:93:68:34:52:d6:0d:3a:14:6d:a7:4a:5c:2e:
         18:8c:33:a5:c2:30:d7:aa:52:00:79:48:59:f1:a9:11:c2:3e:
         43:19:31:d9:91:cc:6d:ca:a3:b7:26:3c:11:4e:52:cd:69:6f:
         3c:d6:eb:f8:ad:d5:6f:6a:9f:e0:1d:64:b3:b4:3d:85:6c:1b:
         0e:6d:a7:70:ea:d2:39:39:a9:e5:8e:a7:d7:f9:68:46:85:b5:
         61:06:03:27:f4:12:9b:9f:ab:03:f0:fa:63:4e:b8:09:58:ff:
         21:47:e0:2c:d9:2e:d1:28:6a:99:57:59:3a:a8:dd:fd:2a:4d:
         6b:b2:2a:a1:3f:af:fa:26:b4:38:04:ec:7f:d2:fa:b1:22:7c:
         c9:ed:a6:fb:d8:98:4e:cf:19:05:f1:55:f9:dc:9e:c6:3e:e0:
         e4:79:78:de:43:bd:4f:f6:fb:3c:d0:e6:be:92:aa:ac:e7:1c:
         fc:63:4f:62:ff:9d:1d:a7:69:7c:90:6a:dd:f2:91:39:c6:f6:
         d4:82:a8:80:ff:b1:d7:72:81:29:3f:8b:d7:b0:a2:28:02:78:
         37:9f:86:0f:7e:7e:31:f6:de:87:60:02:34:d8:ee:0f:49:6e:
         d0:8a:b5:32:12:3b:49:ef:31:fd:29:5e:ee:d6:c4:2e:c9:52:
         2c:0e:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:32 2026 by rpki-client