Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
File:                     ABC4A34EAFB511F0815FDC37C4F9AE02.roa (raw, json)
Hash identifier:          sTzRTjegS6pXcKJix4GmDLpe4+EUgN+B0F9yGltkFT4=
Subject key identifier:   5F:25:D3:42:15:B3:39:B1:AE:E5:2F:15:F1:5B:59:EF:61:B2:35:9F
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       08D8
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:43:16 +0000
ROA not before:           Thu 23 Oct 2025 02:12:05 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     40605
IP address blocks:        43.225.38.0/24 maxlen: 24
                          61.4.111.0/24 maxlen: 24
                          103.253.110.0/24 maxlen: 24
                          103.253.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: Oct 23 02:12:05 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a488c4-7074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:33:b6:73:66:8c:6b:40:41:fc:ec:2a:3c:
                    49:42:d9:36:7b:34:30:5a:ea:01:3e:e0:b8:56:91:
                    ca:26:6a:bf:9a:3a:19:ad:a7:c6:7b:5c:60:7d:80:
                    02:9c:80:8d:2b:56:e8:20:7c:ee:6d:32:12:d4:ed:
                    f9:0c:2e:bb:41:81:67:eb:4f:e7:ed:b3:ea:af:cf:
                    b8:76:d2:ca:69:7b:86:0b:78:3b:ee:60:ca:60:26:
                    50:3e:5e:57:c1:b7:c3:02:65:c3:14:5d:18:ea:e0:
                    14:a8:1a:92:5d:14:34:08:3d:fa:bb:8e:a7:3a:a8:
                    a6:7c:b8:fc:3b:07:22:c1:3a:92:1f:7c:32:5a:e4:
                    e2:da:ac:fd:4f:fc:03:af:e8:17:b3:f4:88:35:46:
                    30:de:c7:ba:6b:bd:b4:a3:49:b0:db:8c:96:0b:67:
                    55:ab:39:3a:ef:4b:14:32:8e:7d:d5:64:45:a0:60:
                    da:39:a3:d9:3c:80:ee:bd:7a:9b:0f:e5:95:2a:eb:
                    47:85:21:19:3b:f7:13:7c:94:2e:0b:af:9f:d2:c0:
                    59:a9:f0:f8:4a:3c:e3:41:ea:37:97:01:cf:1c:de:
                    1c:18:ed:ad:a5:2d:fc:14:72:86:0f:37:9a:b8:43:
                    7a:ce:5a:2f:e1:f5:17:e8:b6:85:d4:e0:f8:8b:9e:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:25:D3:42:15:B3:39:B1:AE:E5:2F:15:F1:5B:59:EF:61:B2:35:9F
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.38.0/24
                  61.4.111.0/24
                  103.253.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:02:35:32:62:13:d2:cd:b7:97:c7:6d:c8:72:72:34:11:64:
         0f:3a:c1:bd:8f:00:92:fb:d0:49:cd:32:41:eb:01:10:6c:32:
         85:f5:6b:da:9e:85:4a:2a:89:c6:33:0f:bb:08:5a:12:6f:5c:
         d3:45:69:bb:6d:9e:50:a6:02:9a:aa:91:d6:98:39:24:ef:97:
         ad:f8:f0:a1:fe:94:d6:cf:57:4a:6e:eb:99:78:a1:63:54:d7:
         e6:98:48:b3:0a:6c:31:62:29:a3:35:84:aa:f1:f7:48:17:fc:
         a3:0b:c7:bb:99:e3:1a:c4:94:d5:87:d7:2f:cf:2e:0a:dc:32:
         10:0a:50:e9:47:90:9a:75:4b:5f:7c:7e:27:1e:df:c2:55:9d:
         d9:3c:fa:e5:42:b9:be:eb:99:bb:ce:2e:62:e7:e0:55:8c:bb:
         d0:a3:18:19:84:f2:2e:dd:c0:92:de:9a:ad:6f:86:b0:2c:c3:
         9e:cc:3d:d4:47:fc:25:01:84:de:fd:f8:aa:59:2e:1c:70:5f:
         4b:d2:cb:1d:84:3e:f5:e3:35:82:a7:38:37:60:f3:38:a8:06:
         99:3e:70:a1:00:29:ab:11:17:ee:b2:a7:ad:11:49:4b:f8:94:
         63:0f:3e:fb:7d:83:bf:04:b2:b7:e5:c7:93:29:01:50:11:ca:
         5f:fe:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:00 2026 by rpki-client