Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa
File:                     ACC8D92C543611EEA8C54616C4F9AE02.roa (raw, json)
Hash identifier:          hAzzush7yJ4uggCEzGOjwed85AdGqHq5euECAazgkSU=
Subject key identifier:   40:66:89:B8:49:CB:B4:86:76:81:2D:AF:47:A2:2C:DA:4B:A9:FA:54
Certificate issuer:       /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial:       0353
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:52:43 +0000
ROA not before:           Thu 11 Sep 2025 02:08:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139016
IP address blocks:        103.187.22.0/23 maxlen: 23
                          103.187.22.0/24 maxlen: 24
                          103.187.23.0/24 maxlen: 24
                          2400:7920::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
                          rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
        Validity
            Not Before: Sep 11 02:08:41 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4369b-1a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:64:15:93:46:52:f5:27:4e:58:30:33:99:
                    67:6a:1d:89:fd:da:d4:42:d5:75:0f:f0:c6:12:1c:
                    79:88:c8:60:cf:28:ae:7c:28:aa:02:a5:6b:6b:ec:
                    3b:34:d0:4b:80:13:5f:a5:ac:3e:ca:91:d2:3d:d8:
                    c1:2f:21:ce:25:5f:8f:86:c7:17:d4:83:c8:da:3f:
                    51:e1:7b:83:a9:f3:a5:c5:a7:3e:44:c0:24:ed:5a:
                    ef:73:16:e3:71:f3:e3:5e:d2:5f:92:b3:d4:bd:4f:
                    b4:e4:d0:49:5d:85:9e:42:ca:e3:71:ed:fa:d2:34:
                    f7:d9:18:77:35:82:b2:03:c3:7f:18:b3:7c:ec:3a:
                    ce:15:3d:f1:bb:27:90:e6:9f:bd:ca:ab:39:dd:c7:
                    3b:02:17:6e:37:53:02:1b:ce:3f:bf:c6:72:71:6a:
                    e3:3a:04:9f:68:c6:a0:ea:d8:58:62:ab:5a:c3:87:
                    a0:2b:47:54:b8:18:63:cc:c4:12:ab:b8:c5:6c:a7:
                    43:04:3f:86:3d:7a:c7:b7:12:6d:f7:f7:b4:89:54:
                    b0:4c:24:d0:39:10:cb:9c:df:ea:80:18:f4:a3:30:
                    9c:1b:71:d0:11:b4:b7:a5:b3:e6:61:06:ae:2e:85:
                    66:98:9c:c1:54:66:a3:4f:ac:0f:99:69:9f:63:65:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:66:89:B8:49:CB:B4:86:76:81:2D:AF:47:A2:2C:DA:4B:A9:FA:54
            X509v3 Authority Key Identifier:
                keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.22.0/23
                IPv6:
                  2400:7920::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:15:e7:86:22:d2:bd:6c:ae:e5:87:63:2a:41:a2:ba:5c:00:
         b1:bd:b3:34:b5:7a:c1:0c:e9:bf:20:52:bd:50:67:52:21:cd:
         ef:f0:c5:25:64:3f:cc:05:c5:e6:33:b4:00:1e:b5:bb:40:3f:
         a1:26:c2:80:5d:46:42:3a:8a:ec:41:1e:bf:e8:7f:34:09:ee:
         29:8b:34:34:bf:2d:18:fe:76:f6:48:61:00:6a:de:24:b2:21:
         d2:68:10:7e:b2:22:24:bf:6b:34:dc:17:11:8a:52:a7:33:11:
         31:d8:3f:6b:02:db:87:c3:ef:ae:d2:04:e5:30:2a:b8:70:66:
         e0:af:11:8b:fc:96:fd:7d:32:00:dd:2b:57:44:be:37:33:51:
         26:f2:24:7b:ea:95:0d:6d:57:65:7b:2d:0c:d7:0f:45:f2:c2:
         cd:54:79:76:99:46:6b:95:f5:3c:ad:57:97:c4:69:fb:59:36:
         3d:37:a5:b4:1a:42:f2:ac:a9:8d:ff:24:46:38:4a:24:99:a6:
         d0:2b:47:7c:0d:ef:bf:da:8e:88:49:81:9a:5b:c9:74:b5:e6:
         6a:58:d2:e2:09:0c:06:0a:e0:29:d4:aa:56:af:ab:1c:25:b0:
         6a:d6:77:37:10:28:59:05:f6:49:e6:36:78:9f:1c:af:f6:36:
         c4:ed:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:02:18 2026 by rpki-client