Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
File:                     ABC4A34EAFB511F0815FDC37C4F9AE02.roa (raw, json)
Hash identifier:          0/6SJ+XzNdePRVAhJMPC/WJWSVT8gaWhlz+RyT9iT6Q=
Subject key identifier:   3A:97:62:2C:81:B3:08:4C:4F:90:E2:15:05:B0:6F:42:EA:5B:C4:B8
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       0909
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
Signing time:             Wed 29 Apr 2026 06:07:59 +0000
ROA not before:           Wed 29 Apr 2026 06:07:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     40605
IP address blocks:        43.225.38.0/24 maxlen: 24
                          61.4.111.0/24 maxlen: 24
                          103.15.106.0/24 maxlen: 24
                          103.253.110.0/24 maxlen: 24
                          103.253.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: Apr 29 06:07:59 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69f1a03f-386e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:e1:3c:c4:c9:5d:78:50:ca:68:c1:cb:6c:
                    5a:0a:bc:19:6f:5b:3a:5a:39:15:7d:f7:32:b5:ec:
                    7d:ea:b1:d7:83:2d:8f:1d:fc:f7:1d:a8:86:c9:45:
                    0d:5c:5f:3f:c0:47:2b:59:6b:6b:00:6e:15:6f:43:
                    5d:2f:23:c6:f8:7d:73:41:f5:c7:f9:02:01:68:a0:
                    fc:1c:9c:1a:0b:25:ca:ee:55:66:a8:72:4f:1e:61:
                    c5:8f:27:6d:80:6d:52:95:70:a4:a6:c2:6c:90:68:
                    4d:06:1f:89:cf:58:db:4e:7d:62:f4:a7:56:82:20:
                    14:11:cb:2d:e6:8b:da:19:1e:60:dd:84:11:89:a5:
                    97:9e:15:3e:c3:66:7b:e2:00:47:7d:ee:8a:43:03:
                    0b:e8:7f:d6:75:02:8f:f5:60:af:8d:78:3e:b0:46:
                    67:64:e0:3f:2d:e4:8b:0d:cd:65:3b:4e:87:45:a4:
                    35:eb:60:a9:4c:09:d3:b7:cd:bd:fa:9a:04:2f:df:
                    45:3e:d4:c7:db:07:4d:4c:17:5f:4f:58:b3:b0:fc:
                    24:c3:17:cf:d2:9e:14:a1:a5:cb:7b:85:58:50:5c:
                    88:e2:5e:76:10:1c:3e:51:d7:2d:c6:8a:60:af:a1:
                    08:e2:0a:7f:8b:f3:66:e9:39:52:9d:a8:89:0b:76:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:97:62:2C:81:B3:08:4C:4F:90:E2:15:05:B0:6F:42:EA:5B:C4:B8
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.38.0/24
                  61.4.111.0/24
                  103.15.106.0/24
                  103.253.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:d8:cd:87:19:7a:e2:43:c6:9b:3b:6b:3e:2e:8d:82:59:
         27:c6:c0:4f:38:c0:92:5b:98:bc:d9:76:d5:03:4c:20:37:64:
         cd:1e:fe:47:2e:b7:79:df:fc:31:98:1b:65:b5:5e:49:13:8b:
         a5:85:41:e7:45:c3:93:18:44:1d:3b:1e:74:56:02:41:11:11:
         69:6f:b5:ae:2f:ac:82:4f:2b:95:ba:8c:24:ad:73:01:7a:6c:
         43:5e:4c:db:c8:4e:30:cd:84:ed:c6:1d:24:e8:29:46:12:1c:
         c8:a9:9c:1c:28:71:72:59:1c:1f:2f:ef:66:7d:c5:df:e3:55:
         e1:e5:26:92:66:dd:7f:59:45:a8:98:70:54:4e:33:a8:cb:7c:
         86:46:08:9e:4c:ad:35:81:65:d5:da:62:30:44:f8:48:76:c6:
         03:50:a4:aa:a8:4f:a8:6c:fc:b9:14:d9:44:ed:31:04:1d:70:
         93:fc:ff:1f:61:89:47:a8:cf:04:65:f4:43:1e:e5:00:24:bc:
         74:39:6b:c1:f1:20:2f:21:df:d8:03:22:17:05:ff:49:13:86:
         07:a5:50:47:e8:f9:28:96:e2:7b:11:98:cd:14:04:68:45:07:
         bc:a3:d6:05:34:8b:35:0b:9e:df:b6:59:d6:09:49:aa:05:81:
         7c:76:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:00 2026 by rpki-client