Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa
File:                     A476C8C41EA011F187B67505113D8C67.roa (raw, json)
Hash identifier:          BiU56e9z/AuqAdUdiimC3Tw7BBkRLItDa2okx3XDsN0=
Subject key identifier:   57:D9:0C:24:61:ED:0A:95:CC:E3:21:4C:6F:99:18:56:F6:32:79:1C
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       0A77
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa
Signing time:             Fri 21 Aug 2026 05:54:35 +0000
ROA not before:           Fri 13 Mar 2026 05:51:13 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136788
IP address blocks:        103.96.24.0/23 maxlen: 23
                          123.253.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679 (0xa77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Mar 13 05:51:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a87e81b-092b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:7a:85:7c:aa:6a:bc:f0:d6:63:cd:54:18:
                    ae:4d:f6:7f:5b:b4:a5:27:3b:52:a8:11:8e:c9:24:
                    29:56:6e:d0:4d:d8:9e:9a:09:8c:e1:34:1f:85:fe:
                    10:b2:e2:ef:83:04:e7:de:8e:08:4e:11:a7:05:06:
                    83:e0:3e:51:c0:b8:57:a0:6a:52:03:f7:6b:f3:5b:
                    52:35:f6:0c:83:93:d2:f3:bf:74:7f:22:0e:3f:cf:
                    93:c1:e4:38:98:b7:1c:50:d5:4b:6b:86:22:f6:77:
                    53:e6:7f:03:12:d6:38:ba:86:db:89:67:de:d4:6c:
                    ae:df:d5:78:0b:21:f8:52:b6:87:0b:92:2f:a6:58:
                    60:e9:3b:c4:22:3a:12:79:c9:08:6d:f9:5f:c9:f9:
                    cd:31:82:68:b9:c6:bf:85:cc:36:8c:aa:be:63:f5:
                    43:45:d5:34:6e:39:a0:ad:c7:ba:d4:71:78:0f:ff:
                    26:17:91:52:44:1c:f7:ad:e5:92:e8:ec:4d:c5:d3:
                    dd:44:67:b9:aa:6d:cc:f6:6a:f7:e9:c3:35:06:92:
                    00:1f:ce:f0:c8:27:cb:7d:6c:28:69:06:d7:9d:e5:
                    a4:f6:c5:5e:6d:16:5a:87:e6:02:52:9b:5c:6d:96:
                    da:31:f0:db:b8:2f:c3:1d:cc:ed:98:20:93:d9:56:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:0C:24:61:ED:0A:95:CC:E3:21:4C:6F:99:18:56:F6:32:79:1C
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.24.0/23
                  123.253.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:8d:5c:4e:38:95:61:34:68:00:16:35:29:b1:19:55:7c:89:
         88:cf:f5:ec:45:04:91:c2:6a:7d:5f:20:86:fb:2d:50:d8:d5:
         8f:62:25:b0:ab:f5:e9:55:19:81:f6:2c:e2:d5:8d:f6:f0:ae:
         16:44:65:41:59:aa:02:c5:dc:7b:2b:18:67:09:0f:39:29:2f:
         f9:94:dd:4c:14:41:b1:5d:14:a4:c1:02:36:5a:89:db:66:f0:
         17:94:46:72:20:0a:af:d5:92:22:ec:d5:1c:ab:13:d1:b8:c9:
         08:cd:3f:6e:b1:6c:39:c2:50:4b:de:94:0a:ad:8c:14:f7:e0:
         f6:2e:db:e0:7c:25:4f:d7:d2:5d:c5:f5:22:db:b0:30:3a:10:
         8e:86:81:ef:0f:ea:1a:45:07:01:bd:07:ab:e5:62:f7:fd:04:
         4d:5b:2b:98:f6:44:d8:15:ad:8e:93:0d:e3:f8:0a:b8:76:a0:
         31:81:fd:19:5e:93:43:61:44:21:7b:0c:82:93:18:8a:3d:b1:
         4a:7e:4e:06:cf:14:5c:3a:b4:2e:db:d5:c9:5d:5d:95:31:c3:
         67:47:11:65:87:74:73:41:6e:7b:2b:6d:e7:e2:9d:28:c9:13:
         16:bb:d1:69:30:86:a5:88:28:c0:c3:2d:32:1c:3f:eb:13:4a:
         46:90:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:16:58 2026 by rpki-client