Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa
File:                     3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (raw, json)
Hash identifier:          fUY5HB4r5+RIwAfPCkMPyTU4vay6oYcoCDFz1+akttk=
Subject key identifier:   F2:0A:1A:84:CF:A1:CD:87:B7:55:0A:1C:0E:18:A8:31:7F:92:53:C9
Certificate issuer:       /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Certificate serial:       0CD7
Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:53:42 +0000
ROA not before:           Fri 28 Nov 2025 18:22:14 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139792
IP address blocks:        103.145.70.0/23 maxlen: 23
                          103.145.70.0/24 maxlen: 24
                          103.145.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl
                          rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3287 (0xcd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
        Validity
            Not Before: Nov 28 18:22:14 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a444e6-5f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:18:2b:a4:38:ff:26:d5:38:96:a6:ab:e8:
                    17:89:29:f1:69:15:5d:4e:7e:27:a8:d4:23:35:d0:
                    ca:56:9b:89:4f:aa:2a:0e:fd:de:d2:9b:4a:16:be:
                    6f:dd:a6:89:73:6b:fd:69:f4:4b:b9:dc:65:32:f4:
                    73:8e:d0:29:17:f5:d9:e1:d2:fd:42:af:d1:b8:e8:
                    00:f5:b9:48:2f:cf:d8:f5:66:0d:ed:c7:55:9f:b4:
                    a4:ee:df:7e:23:f3:7a:c6:26:f9:50:a0:22:f8:69:
                    af:4d:53:56:61:45:e6:78:14:ab:56:f6:05:96:99:
                    02:d1:65:52:1a:13:08:69:eb:41:1a:fe:93:af:ce:
                    46:27:b2:c8:48:d6:bc:f1:33:1d:19:e8:d1:71:41:
                    13:58:ed:e9:b8:95:2c:32:eb:83:32:e4:5c:c2:af:
                    8d:78:cb:d3:93:e1:36:84:2c:d2:97:92:e3:9c:d2:
                    96:78:54:2c:8b:5c:a7:ce:a5:0c:bb:bb:09:32:a8:
                    8c:cb:50:d5:4b:8f:cf:b0:e5:d0:c1:bb:7b:f7:43:
                    ca:f4:71:4d:40:85:95:1b:28:09:8f:20:35:3a:70:
                    18:49:f2:07:e9:96:f8:d8:91:5a:dc:06:03:17:a9:
                    38:43:11:1a:92:75:52:5f:18:c2:05:ef:86:37:09:
                    30:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0A:1A:84:CF:A1:CD:87:B7:55:0A:1C:0E:18:A8:31:7F:92:53:C9
            X509v3 Authority Key Identifier:
                keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/3E0EDBC83E0111ECA3AF5462C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:7b:30:41:24:fa:d4:45:d3:2e:51:1b:9b:09:70:e6:99:55:
         df:c5:ae:f2:65:91:df:cd:70:36:bf:ae:a2:2a:e6:62:50:a6:
         e4:26:dd:af:47:c3:cf:51:4a:26:89:99:db:d9:5e:38:9a:31:
         b4:8c:86:a8:8d:bf:55:2e:56:20:c4:f6:ca:05:a7:4a:27:88:
         54:b0:d9:d6:34:3a:aa:c3:74:28:e9:6e:10:38:6d:16:b3:d9:
         15:3c:66:ce:cc:a9:e1:d0:5e:53:56:99:71:48:92:2f:b0:d7:
         df:4f:1e:cf:c9:71:65:77:6b:54:22:0d:43:8e:a8:ac:d8:a8:
         7d:21:0f:ab:d4:d8:f9:1b:d7:2d:93:88:79:24:7c:bd:27:86:
         69:bb:bf:c8:06:f9:89:bd:ac:ad:27:b7:ae:76:5a:03:8d:b3:
         fb:55:7d:e7:35:94:aa:d4:4f:46:44:96:12:50:13:67:f3:3a:
         e2:60:80:5b:55:d7:93:0a:99:58:18:38:b8:99:be:52:26:c1:
         0e:d2:53:62:9d:35:5b:43:37:83:23:f5:8d:91:00:0c:fc:c8:
         02:a3:39:a1:e5:74:f6:81:91:79:13:d9:1a:75:97:b1:a0:37:
         04:05:3d:28:c6:82:f4:0e:38:4a:30:94:f5:00:ef:3c:13:c5:
         f6:48:2d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:13 2026 by rpki-client