Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/9D006D76ABFF11EFB2C29330C4F9AE02.roa
File:                     9D006D76ABFF11EFB2C29330C4F9AE02.roa (raw, json)
Hash identifier:          gpTT47Zm52/oXmlCRQ9joE/pQOm48+JhXhIfyvy7DVY=
Subject key identifier:   33:EE:24:D0:97:AD:8F:5A:27:88:46:4A:3B:68:FC:13:42:86:50:7E
Certificate issuer:       /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial:       027B
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/9D006D76ABFF11EFB2C29330C4F9AE02.roa
Signing time:             Fri 01 May 2026 02:34:18 +0000
ROA not before:           Fri 01 May 2026 02:34:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139223
IP address blocks:        103.112.42.0/23 maxlen: 23
                          103.112.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
                          rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
        Validity
            Not Before: May  1 02:34:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f4112a-5a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:b5:5b:b9:79:ce:2c:2d:34:39:28:84:fa:
                    8e:58:48:b7:ac:4a:c7:5f:13:6b:7f:e0:12:d6:16:
                    1e:13:68:88:10:63:5a:6c:91:f0:26:68:84:84:0c:
                    4a:11:99:0e:a2:af:fc:0a:b6:d0:c3:47:c9:66:9e:
                    e9:57:71:79:fb:7a:90:b6:1a:ab:48:b2:af:a1:f1:
                    71:23:75:8f:07:3f:e2:32:81:d2:4c:cb:87:e1:82:
                    0e:51:66:c2:e4:b7:bc:bc:68:73:66:53:ff:d6:dd:
                    e4:84:97:84:9f:de:d7:60:23:75:47:fe:d5:ae:80:
                    20:b3:a6:d8:28:ce:e9:cc:22:b7:ba:dc:fc:69:f0:
                    04:da:a4:65:6b:85:04:da:bd:dc:02:db:3b:28:63:
                    38:8f:42:df:a6:60:4c:27:8a:33:e8:7d:cf:ea:46:
                    29:51:3e:e4:ce:b2:c9:5a:27:d8:13:fb:72:26:eb:
                    4c:b9:26:b5:bc:bd:1e:a4:1f:49:b0:96:ae:88:c2:
                    ec:49:ac:ca:60:61:e9:fd:ff:c3:fc:0b:76:dd:19:
                    c8:97:74:e6:8f:65:ca:17:fe:c1:e7:d7:78:cc:35:
                    23:43:f0:78:64:d8:d3:bc:46:fe:65:1e:57:8a:18:
                    f9:6b:a8:07:b0:41:46:d0:bf:7f:45:15:70:de:2c:
                    a3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EE:24:D0:97:AD:8F:5A:27:88:46:4A:3B:68:FC:13:42:86:50:7E
            X509v3 Authority Key Identifier:
                keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/9D006D76ABFF11EFB2C29330C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:e5:3e:1e:95:45:b2:47:82:33:c8:7b:ac:a1:f8:f2:8e:
         26:9f:d2:41:be:06:1b:f6:7e:8e:a6:af:8c:39:49:76:90:f3:
         b4:f5:24:6f:ac:29:c1:c9:b6:9b:a2:01:d6:77:15:62:fc:1a:
         ea:31:27:cc:a1:67:bd:27:75:d1:ac:a4:76:1e:30:13:86:11:
         07:0e:ba:e8:2c:d8:8d:2f:63:bc:6e:03:16:5a:3b:87:cd:0c:
         c8:2c:9d:44:39:76:43:01:90:15:9e:6b:68:3c:7e:f7:0e:dc:
         89:45:f4:22:c9:c8:e3:3c:21:57:a9:d7:a5:56:9a:2b:85:f2:
         53:ea:c7:45:23:5b:bb:26:4d:5f:58:5f:fc:07:9c:c0:eb:49:
         28:1b:cf:e9:27:b3:89:cb:e7:ef:7b:99:61:17:29:80:12:62:
         95:61:e4:6d:a1:ac:73:53:92:c3:88:22:dd:32:f1:98:23:e7:
         1c:7f:d0:64:e5:6c:e9:fa:dd:cb:5d:5b:38:29:d7:2f:11:2d:
         09:dc:90:c4:1f:8a:6c:57:65:2d:f6:35:50:ec:4e:8a:36:f6:
         13:77:40:2f:8b:cd:2e:8b:dd:0b:b7:75:82:58:8c:92:a1:24:
         c4:e2:6d:0a:56:6d:99:7a:7f:2d:9c:f5:8f:48:b9:9b:27:87:
         59:38:90:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURFODgxMTAvBgNVBAUTKEJFM0Y4QkRGODFCNjZCNEVEMkUxQzc0RUI1RDVGQjAx
QjVGNzc2NDEwHhcNMjYwNTAxMDIzNDE4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0MTEyYS01YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjm1W7l5ziwtNDkohPqOWEi3rErHXxNrf+AS1hYeE2iIEGNabJHwJmiEhAxK
EZkOoq/8CrbQw0fJZp7pV3F5+3qQthqrSLKvofFxI3WPBz/iMoHSTMuH4YIOUWbC
5Le8vGhzZlP/1t3khJeEn97XYCN1R/7VroAgs6bYKM7pzCK3utz8afAE2qRla4UE
2r3cAts7KGM4j0LfpmBMJ4oz6H3P6kYpUT7kzrLJWifYE/tyJutMuSa1vL0epB9J
sJauiMLsSazKYGHp/f/D/At23RnIl3Tmj2XKF/7B59d4zDUjQ/B4ZNjTvEb+ZR5X
ihj5a6gHsEFG0L9/RRVw3iyjuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDPuJNCX
rY9aJ4hGSjto/BNChlB+MB8GA1UdIwQYMBaAFL4/i9+BtmtO0uHHTrXV+wG193ZB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREU4OC80QkZDQTE0MkMz
RUUxMUVEOTIyQTExNTRDNEY5QUUwMi92ai1MMzRHMmEwN1M0Y2RPdGRYN0FiWDNk
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZqLUwzNEcyYTA3UzRjZE90ZFg3QWJYM2RrRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MURFODgvNEJGQ0ExNDJDM0VFMTFFRDkyMkExMTU0QzRGOUFFMDIvOUQwMDZENzZB
QkZGMTFFRkIyQzI5MzMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ3AqMA0GCSqGSIb3DQEBCwUAA4IBAQBa5uU+HpVFskeCM8h7rKH4
8o4mn9JBvgYb9n6Opq+MOUl2kPO09SRvrCnBybabogHWdxVi/BrqMSfMoWe9J3XR
rKR2HjAThhEHDrroLNiNL2O8bgMWWjuHzQzILJ1EOXZDAZAVnmtoPH73DtyJRfQi
ycjjPCFXqdelVporhfJT6sdFI1u7Jk1fWF/8B5zA60koG8/pJ7OJy+fve5lhFymA
EmKVYeRtoaxzU5LDiCLdMvGYI+ccf9Bk5Wzp+t3LXVs4KdcvES0J3JDEH4psV2Ut
9jVQ7E6KNvYTd0Avi80ui90Lt3WCWIySoSTE4m0KVm2Zen8tnPWPSLmbJ4dZOJDq
-----END CERTIFICATE-----
Generated at Wed May 13 04:04:42 2026 by rpki-client