Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/247099D084C611F09EBC052BC4F9AE02.roa
File:                     247099D084C611F09EBC052BC4F9AE02.roa (raw, json)
Hash identifier:          +Q3AY1Q5BFNg+gcQ3gSJEdo3yWPoccjg5VLaMkkAwiE=
Subject key identifier:   27:F4:E5:1B:E6:83:53:E3:C9:79:2E:0B:25:C3:79:8A:BA:27:E8:91
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0F43
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/247099D084C611F09EBC052BC4F9AE02.roa
Signing time:             Thu 30 Apr 2026 18:22:01 +0000
ROA not before:           Thu 30 Apr 2026 18:22:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149296
IP address blocks:        103.136.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3907 (0xf43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Apr 30 18:22:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f39dc9-e616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:5c:b1:e3:a1:64:a8:16:5e:9e:db:03:5c:
                    ce:d9:34:0a:e1:a7:0c:d8:94:73:db:de:28:7d:f2:
                    7d:43:59:64:10:39:d6:9d:d5:80:32:f8:a1:07:ea:
                    9c:f6:40:a1:c9:4a:12:89:66:8d:c8:35:4e:d3:eb:
                    15:56:67:92:08:91:a7:53:27:2a:90:a4:8a:16:10:
                    7e:a5:50:44:89:3e:11:3c:70:6d:05:e0:2d:82:a2:
                    4c:12:db:88:72:e7:9b:fb:2f:54:e2:8b:a3:d6:a7:
                    91:d8:f2:89:dc:94:13:21:08:b0:48:59:6c:77:b9:
                    a3:d7:36:16:c6:86:af:95:63:ce:15:84:59:77:4b:
                    5d:05:83:a0:56:a9:a1:1b:c3:5f:a9:28:28:41:46:
                    a7:1f:a6:d7:79:bd:f4:e6:00:be:40:4c:9d:79:44:
                    79:93:eb:30:4a:b7:d6:78:a7:44:62:b9:32:58:4a:
                    b0:e4:9b:ca:47:a0:7c:86:d3:a6:0e:43:5e:26:81:
                    dc:a7:82:d4:0b:41:1b:ed:8a:fc:7b:63:9d:67:97:
                    a7:9b:eb:cc:af:ee:bd:b1:3e:11:31:a6:24:8c:14:
                    ac:00:c9:12:b7:b4:17:f9:80:87:48:72:f6:78:63:
                    24:4c:69:9d:7e:77:1d:72:74:bc:ef:46:76:8d:55:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:E5:1B:E6:83:53:E3:C9:79:2E:0B:25:C3:79:8A:BA:27:E8:91
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/247099D084C611F09EBC052BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:24:58:d3:5f:58:4d:85:ac:17:92:94:66:05:d5:3b:13:1e:
         79:1b:66:ca:bc:e4:35:d0:b2:b6:db:55:bd:59:42:10:b6:46:
         0b:82:58:e4:58:72:04:80:7a:2e:1b:54:95:82:03:8b:16:6c:
         30:84:bc:7e:77:8a:c1:5a:d5:04:12:a6:20:8f:99:dc:c4:07:
         e2:70:0e:4b:66:e0:31:73:1b:3d:03:29:85:36:36:38:4b:27:
         88:e0:03:60:7c:a4:68:1e:42:2c:0e:c0:c5:0e:f1:d7:ad:c4:
         47:b7:d5:fe:c9:2e:b1:85:34:77:be:14:2c:68:b7:54:48:cc:
         5e:6f:46:3a:e0:2d:ee:33:2e:84:4f:93:5e:c7:4d:ef:af:8c:
         34:15:b6:7f:0e:16:d5:c1:0d:ea:a8:e8:8b:24:f9:fc:95:7c:
         02:82:8a:f0:e1:82:4a:2d:05:25:0f:a9:3e:50:8c:ba:52:17:
         15:bd:64:05:fb:93:44:0b:fd:cf:5f:23:eb:aa:a3:fc:44:b7:
         97:ca:2c:91:47:e3:1f:50:e1:b4:e4:dc:64:b6:b1:fa:d9:08:
         f1:58:7e:2b:45:b6:7a:b5:b1:a6:42:f7:7a:df:94:9c:02:08:
         76:2f:1f:fd:f5:c9:94:b6:b1:28:dc:05:5a:fa:1e:8d:c6:7b:
         12:57:b4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:57 2026 by rpki-client