Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/1A922B26DCD711EC87E30728C4F9AE02.roa
File:                     1A922B26DCD711EC87E30728C4F9AE02.roa (raw, json)
Hash identifier:          coEyMl+P01v1R2i2iJg1fuZlCEmmrFGit4S5nWc09Hw=
Subject key identifier:   E5:18:47:A1:F6:61:0C:EE:0C:30:E1:D3:C6:04:54:32:86:CD:56:70
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       0394
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/1A922B26DCD711EC87E30728C4F9AE02.roa
Signing time:             Wed 25 Mar 2026 00:34:18 +0000
ROA not before:           Wed 25 Mar 2026 00:34:18 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     142029
IP address blocks:        103.165.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
        Validity
            Not Before: Mar 25 00:34:18 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c32d8a-b3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1d:da:bd:2a:9a:86:cc:8b:26:0b:db:90:55:
                    6e:a6:a5:ad:af:f9:64:07:29:56:53:52:c0:3f:fa:
                    3f:cc:0c:36:4a:1d:e4:a8:d5:2f:e8:60:54:60:1b:
                    d2:3e:5c:5d:cf:10:e2:a8:e9:9a:a1:7e:26:2b:e1:
                    5e:e1:a6:82:f2:e6:19:88:da:29:15:c2:45:1f:cc:
                    eb:a8:87:36:df:9e:69:c3:f6:35:27:f9:8a:64:76:
                    d9:a6:29:4c:60:a6:0c:ad:25:71:7b:21:63:43:92:
                    dc:4f:bb:bb:de:dd:db:c0:bf:50:40:92:26:fe:e3:
                    2f:70:cb:78:58:5f:79:87:db:67:a7:62:4e:fa:1f:
                    8d:3d:f1:17:6f:41:3f:31:c9:46:41:fe:12:48:42:
                    26:c8:59:48:97:37:31:b9:fa:f0:a4:a4:0d:eb:38:
                    bc:47:9f:85:01:ac:13:84:67:cd:37:cc:9b:54:07:
                    7c:58:8e:fe:5f:2b:5e:3f:ee:b6:bc:c7:4a:ab:e3:
                    00:c0:3a:2d:b0:3f:7b:a6:e6:18:4f:1b:80:a7:99:
                    5f:6d:26:c2:7e:77:1c:d0:c5:a3:eb:0e:48:41:6f:
                    96:ec:ce:cb:6c:1e:e1:fd:b8:66:7c:ab:6f:ae:94:
                    e3:9d:66:b4:62:7c:f5:1a:db:5f:a6:48:cb:17:54:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:18:47:A1:F6:61:0C:EE:0C:30:E1:D3:C6:04:54:32:86:CD:56:70
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/1A922B26DCD711EC87E30728C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:93:a1:f8:d4:65:6d:60:69:54:cb:c6:e8:04:7d:e5:7a:b9:
         99:b2:43:00:78:4d:a9:2e:55:5e:d2:87:62:45:be:a8:2b:88:
         82:50:1a:ef:26:3d:ea:57:88:9c:38:a7:cc:a6:ca:62:cf:5f:
         39:f3:86:59:84:6c:22:2a:1d:45:05:1b:ae:ee:a8:5c:c2:fc:
         a9:ef:d8:eb:83:92:86:fa:b4:ce:a2:fd:6c:ec:17:f1:c7:1a:
         99:0c:b7:1f:9e:be:a5:c9:cb:61:10:d3:8e:f7:8e:c2:34:ba:
         0e:86:37:05:d8:a4:49:50:90:33:65:64:89:8f:e2:e2:78:2c:
         79:c2:e8:7d:b9:60:1e:18:a1:b0:3f:48:dd:52:1f:85:a5:88:
         0f:22:ec:f5:ab:14:c1:f6:3f:b1:26:f7:02:12:a2:2e:42:49:
         df:b5:3a:15:ea:6a:1b:fe:f3:c3:e0:ef:33:0f:85:da:61:41:
         48:58:06:6e:98:f4:5f:e1:81:14:f2:90:75:ae:c6:f7:13:44:
         9c:71:ef:eb:f4:e9:f0:7b:9f:ca:24:42:cf:44:6f:b4:c6:54:
         3b:27:95:b4:ca:59:16:c8:3a:72:59:3b:7c:16:c2:b7:32:03:
         74:2e:f0:fc:9a:f3:08:32:3f:a4:bf:03:d6:bb:c2:8f:98:7b:
         2e:f6:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:13 2026 by rpki-client