Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/3D5EC616694B11EFABF9221EC4F9AE02.roa
File:                     3D5EC616694B11EFABF9221EC4F9AE02.roa (raw, json)
Hash identifier:          E4M2glENp14yC8XqERK+K5RnK+5kQXHvoIyYZ3+OkHg=
Subject key identifier:   4B:E0:FC:15:7D:69:23:54:78:62:43:19:BC:5E:E1:C9:5F:5E:85:D2
Certificate issuer:       /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial:       027C
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/3D5EC616694B11EFABF9221EC4F9AE02.roa
Signing time:             Fri 01 May 2026 02:34:20 +0000
ROA not before:           Fri 01 May 2026 02:34:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151477
IP address blocks:        103.112.43.0/24 maxlen: 24
                          2001:df2:1d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
                          rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
        Validity
            Not Before: May  1 02:34:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f4112c-6fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:44:30:8e:e1:7a:6c:2b:b6:65:b4:f0:f1:
                    83:ef:f7:9b:75:ae:d5:55:c8:dd:8e:b3:de:e6:24:
                    61:c0:98:af:6d:1a:fb:e7:ab:e0:0a:b3:e0:3a:58:
                    45:79:0f:d1:27:d3:8b:dc:f5:4d:24:2f:75:35:62:
                    1e:73:45:0c:79:e8:ca:9e:dd:c8:40:f6:d7:a2:72:
                    70:4c:e0:31:13:15:b3:44:cf:47:bf:49:95:fd:2b:
                    d4:73:7b:fd:4e:1a:9e:cf:58:cf:49:4a:48:22:fe:
                    14:76:56:c0:65:0f:da:13:25:2b:22:72:52:35:49:
                    8e:94:b7:2f:31:42:cb:d8:30:c3:1b:94:f2:4d:9e:
                    c7:0e:d4:14:4a:09:f9:f0:67:f2:62:b8:ea:6b:ba:
                    81:4c:36:55:cb:6b:fc:a7:8a:bf:84:ad:39:fe:58:
                    f6:3d:46:c1:e8:d8:01:a9:c2:53:4d:64:3f:03:43:
                    8d:1b:b0:d5:58:e0:9b:12:57:b3:4d:04:d5:d0:94:
                    b4:0a:a1:bb:db:b5:0a:39:a5:51:9a:9b:e3:95:f8:
                    eb:79:fa:98:59:bf:ab:28:02:9e:f6:4c:38:0d:a6:
                    49:44:9a:30:bb:b5:d2:b2:05:03:11:59:6e:b2:f3:
                    53:1e:b5:d5:af:ed:45:f5:fe:21:86:06:83:70:1f:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E0:FC:15:7D:69:23:54:78:62:43:19:BC:5E:E1:C9:5F:5E:85:D2
            X509v3 Authority Key Identifier:
                keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/3D5EC616694B11EFABF9221EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.43.0/24
                IPv6:
                  2001:df2:1d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:3f:8a:f8:58:80:b8:78:3d:d7:98:d6:59:7e:4c:35:a2:
         84:f7:43:4c:b2:90:67:59:2c:02:e9:bb:c6:b7:36:29:ff:b2:
         c7:36:7f:03:27:9d:54:c8:00:fc:af:96:ee:5a:6d:98:0f:79:
         23:b3:48:e7:01:88:ca:85:c7:7a:6b:17:e3:2c:c2:67:46:9c:
         ad:9b:00:d6:41:62:4a:11:83:6f:e8:7e:9c:c7:f9:03:00:3c:
         d8:ab:81:34:fb:49:3d:9c:30:78:f9:eb:76:c4:d4:fb:4a:83:
         f2:cf:dd:9a:ea:42:8d:e8:b5:d6:78:c3:2b:71:61:32:53:e5:
         6d:bb:90:c8:9f:a7:4f:d5:57:41:58:60:d3:50:af:f0:bd:59:
         fa:26:f3:2f:c1:95:39:d1:54:6a:0d:90:b6:90:fb:f6:46:1a:
         c9:6d:6c:47:d9:41:ab:e0:10:59:ed:dd:0f:ac:3e:e3:88:86:
         2b:b0:80:fd:22:fb:c3:f5:44:f3:c5:c8:89:95:1f:9c:2b:9f:
         16:2f:ac:a3:d0:fc:14:2f:5f:62:8b:9e:ed:5e:f3:60:fb:18:
         c3:4c:13:82:96:3a:3f:9b:1e:c4:61:3b:89:47:46:29:69:7b:
         8e:33:5f:c1:2a:42:79:3a:0b:72:fe:54:86:26:93:12:66:65:
         b5:95:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:09 2026 by rpki-client