Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/73F46EA421DE11F18A474186263D8C67.roa
File:                     73F46EA421DE11F18A474186263D8C67.roa (raw, json)
Hash identifier:          vnIYIAxb9jKhOykc5SH0nHz3rDLATOnUkgoBD81OJHg=
Subject key identifier:   23:C3:C6:14:9C:A9:35:A1:F3:BF:28:03:2B:F6:9E:51:3D:D8:AD:AA
Certificate issuer:       /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
Certificate serial:       0985
Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/73F46EA421DE11F18A474186263D8C67.roa
Signing time:             Tue 17 Mar 2026 08:51:14 +0000
ROA not before:           Tue 17 Mar 2026 08:51:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55707
IP address blocks:        103.5.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl
                          rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2437 (0x985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
        Validity
            Not Before: Mar 17 08:51:14 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69b91602-a0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:96:fa:ce:3a:dc:6a:51:59:e1:35:53:d8:
                    a6:98:a9:85:49:29:a4:42:69:2e:08:95:c5:34:8e:
                    a7:a2:25:7a:87:13:88:d4:2b:b8:7e:12:77:1d:93:
                    e3:60:31:9a:05:fc:4d:60:f0:37:1a:2c:47:d0:6c:
                    85:a9:32:cc:52:dc:53:e5:42:f0:c5:64:db:bc:75:
                    dd:bc:e7:7d:5e:9a:37:a6:30:4e:ef:07:ee:2e:f4:
                    cf:24:30:55:41:24:b8:22:7c:d7:2b:40:fc:e7:c4:
                    be:23:60:0c:97:3e:07:55:f3:57:2a:70:c3:6d:8c:
                    1e:fb:e5:3a:3a:9c:62:ed:04:f0:84:7a:6d:a2:53:
                    03:51:12:f5:9e:a8:89:71:da:21:9f:cb:48:69:19:
                    bf:f9:7a:f2:60:35:a2:c6:55:9a:0a:d5:79:04:89:
                    12:32:cf:d6:c3:38:bd:f5:15:fe:d2:93:c3:a3:3d:
                    37:4b:f7:ac:bd:85:99:a8:4f:e0:7d:54:be:cf:6b:
                    88:8e:bb:39:67:b8:4e:cf:77:3d:20:b6:fd:b4:46:
                    0c:f4:dd:c7:24:dd:f7:4a:57:15:e6:c2:a8:06:d3:
                    31:ac:d1:b1:25:a1:29:4f:7b:a8:9f:fd:19:36:41:
                    7a:79:62:29:77:04:87:fa:d9:a1:b6:a4:15:8f:73:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C3:C6:14:9C:A9:35:A1:F3:BF:28:03:2B:F6:9E:51:3D:D8:AD:AA
            X509v3 Authority Key Identifier:
                keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/73F46EA421DE11F18A474186263D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:ae:64:32:04:ce:89:c4:82:b3:71:31:5f:68:05:62:66:b8:
         34:18:87:04:1f:68:68:2a:7b:39:fe:7b:61:c9:76:84:64:f5:
         75:1c:f0:22:9d:f4:1b:0a:94:b6:cf:1c:c4:04:e5:ec:3a:cc:
         d0:32:cb:36:67:6d:17:e0:00:d4:4b:ea:62:49:41:9f:c2:8b:
         51:1d:03:78:78:94:8e:24:b3:19:2d:a4:14:01:a8:95:8e:79:
         66:01:94:b1:88:1e:f9:d2:25:57:8d:05:c8:fc:25:02:4c:fd:
         6c:db:f0:ab:d6:21:20:64:de:d6:e4:24:c4:39:6f:d2:02:31:
         9a:f4:e2:e7:07:e9:a1:1b:bf:6d:03:93:d4:97:65:12:2d:63:
         29:cf:d5:e5:3b:2b:f1:f1:a6:25:38:f4:bf:97:0f:43:eb:7b:
         56:24:c7:35:dd:07:1d:e6:f3:25:6d:ea:71:68:0e:1d:f1:31:
         93:8b:17:c8:ca:56:ef:71:99:c1:c2:f7:c7:89:1d:7a:32:1d:
         fa:6d:ca:db:ba:fe:b8:a7:3d:bc:4b:34:e2:b4:fb:df:34:34:
         04:da:cd:17:d4:91:da:87:e2:52:1f:56:40:cb:02:95:94:40:
         8d:d4:bc:47:70:b8:fc:d9:3a:e3:75:26:2c:01:05:51:e9:25:
         48:1d:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:38 2026 by rpki-client