Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa
File:                     A476C8C41EA011F187B67505113D8C67.roa (raw, json)
Hash identifier:          W8WqvCmfqjbYm/Nsa9FcNN92lO+HROWGL8GeAXxnfuk=
Subject key identifier:   6F:97:86:DC:41:9B:68:3A:27:AD:5A:34:B7:C7:93:93:35:A6:E7:0C
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       0A12
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa
Signing time:             Fri 13 Mar 2026 05:51:13 +0000
ROA not before:           Fri 13 Mar 2026 05:51:13 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136788
IP address blocks:        103.96.24.0/23 maxlen: 23
                          123.253.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578 (0xa12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Mar 13 05:51:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b3a5d1-5dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:1c:e2:95:21:92:9e:6d:b1:d8:55:23:7e:
                    ff:55:9d:79:c2:4b:16:01:e0:e4:2c:0a:eb:9a:5b:
                    d8:04:c3:31:b6:ed:2c:18:bb:a8:d0:84:00:0c:f0:
                    db:f2:02:c7:24:38:4f:7c:43:9e:a3:1d:16:ef:cc:
                    d7:e0:bc:42:fa:60:7d:d6:ef:0c:3e:4e:9a:06:6f:
                    fd:37:ab:78:7e:60:c2:6e:9d:ea:b9:2e:e0:76:70:
                    6c:24:96:9a:e0:d9:a6:54:92:28:dc:d0:eb:a6:ee:
                    59:a3:c1:02:81:9e:5e:8f:07:45:4c:1e:ef:42:e7:
                    e1:f5:49:a8:fe:c5:b5:f9:5e:6f:1f:c5:54:29:c9:
                    1a:0e:88:1a:f8:0b:fc:ae:62:da:76:2f:30:eb:a8:
                    9c:3f:dc:68:d5:f2:9e:71:9b:76:c5:45:77:9c:75:
                    89:1d:f9:68:fc:39:c9:4b:04:de:93:36:83:a2:08:
                    5b:71:29:0b:05:85:9e:f2:d2:93:36:fe:59:f5:6f:
                    7e:bf:d9:f7:64:fd:37:c7:4a:97:ef:82:55:2a:c4:
                    7c:e0:de:ad:16:29:05:8c:61:8c:a9:11:27:7a:25:
                    12:f3:e1:e2:a3:0e:28:ac:86:a8:3e:3f:d8:4f:ca:
                    2c:db:89:7a:bb:9a:ae:7f:43:ff:f9:e8:9c:9e:35:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:97:86:DC:41:9B:68:3A:27:AD:5A:34:B7:C7:93:93:35:A6:E7:0C
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.24.0/23
                  123.253.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:d3:47:6c:61:b2:b4:e6:c5:27:2d:af:e5:73:1e:db:42:67:
         a9:d4:a5:c9:5f:02:36:4b:40:68:fe:25:e9:64:84:2c:c5:77:
         ca:d7:0a:62:62:e6:f8:c4:8e:67:12:55:e5:07:a3:46:bd:1f:
         42:87:86:7e:f6:ee:f0:b8:f9:2f:88:d5:74:b2:96:a7:c2:28:
         89:a8:d6:8c:99:db:88:dc:0c:f8:6d:b4:67:d0:d2:37:a5:df:
         4e:d0:7d:4f:65:cd:ed:c0:c4:6f:99:2e:b2:17:bb:68:f2:c1:
         f3:36:a2:f3:dd:65:11:5b:dc:2d:7a:45:9f:2d:2f:dd:18:64:
         46:89:53:9e:7c:f7:64:31:47:63:cd:b1:49:18:f7:19:99:fa:
         7a:a2:6a:07:f5:d4:e3:47:3d:a9:86:a9:5b:7b:76:16:cd:fa:
         2c:e5:fe:3d:53:d2:6a:3d:9e:22:1d:97:0f:1b:9e:9e:6d:e9:
         47:a8:d8:92:1a:51:00:f9:66:d3:3f:f7:c0:ff:d4:1e:3e:e8:
         3d:ce:a5:db:1c:28:14:c6:0b:9e:b2:39:c3:9b:4e:47:11:95:
         97:3f:66:89:89:97:87:7b:2a:47:e5:cf:16:af:f2:10:6e:e8:
         7a:12:52:02:c8:ee:18:13:4b:0a:89:ae:09:1c:7a:f9:b3:c2:
         8b:84:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:48 2026 by rpki-client