Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DC2FC844C39F11F0B36A6414C4F9AE02.roa
File:                     DC2FC844C39F11F0B36A6414C4F9AE02.roa (raw, json)
Hash identifier:          jy96PTs6C+gIaKgVnf+BwlI3PL8TIgkX96t1uqr+csc=
Subject key identifier:   F1:9A:6A:9C:6A:0C:8D:76:71:68:FC:E0:09:4D:A7:76:B1:F4:4B:43
Certificate issuer:       /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial:       0C3B
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DC2FC844C39F11F0B36A6414C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:44:42 +0000
ROA not before:           Mon 17 Nov 2025 10:26:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154177
IP address blocks:        103.84.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3131 (0xc3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
        Validity
            Not Before: Nov 17 10:26:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4891a-2727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:64:9c:60:a9:46:c5:11:36:fe:7b:ee:0b:
                    86:44:46:d1:09:e4:eb:66:39:65:b1:66:70:b2:6b:
                    c7:d9:69:48:27:bf:6f:06:6d:9c:69:e4:e3:b5:7d:
                    b9:b2:42:66:b0:67:06:f4:b9:e0:dc:a6:9a:62:9f:
                    b9:af:ae:39:bc:04:7c:96:dd:76:20:91:e2:79:e4:
                    89:68:d5:7e:ef:4d:b0:02:5c:7e:f6:b0:89:ef:4b:
                    da:5c:24:a9:49:ae:e4:2c:82:87:e1:7b:fd:40:c9:
                    10:3b:20:f9:1f:87:3a:ad:40:0d:19:29:bd:eb:d9:
                    68:32:e1:a4:be:fc:58:c9:6c:19:bb:b6:a4:e8:32:
                    c6:ab:d8:1b:fb:4a:7d:5b:6c:71:88:1b:b1:96:41:
                    23:a9:fd:81:c1:90:08:c6:9f:a8:ef:b3:f6:93:b0:
                    c2:d3:a9:39:9a:ef:f1:18:28:9b:0a:69:fc:83:19:
                    0f:f6:2a:6d:44:aa:fa:3c:69:eb:50:cb:5b:ca:c7:
                    67:44:a1:7b:c0:f4:16:5d:f3:45:23:61:15:62:55:
                    3a:80:67:dd:7c:dd:16:64:34:01:41:6f:09:31:49:
                    29:4c:be:d7:36:47:f1:f6:26:95:33:1a:a7:12:e9:
                    bd:d7:52:f2:93:6a:3a:d6:e2:3d:95:6b:34:b1:58:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9A:6A:9C:6A:0C:8D:76:71:68:FC:E0:09:4D:A7:76:B1:F4:4B:43
            X509v3 Authority Key Identifier:
                keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DC2FC844C39F11F0B36A6414C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:54:86:23:38:98:4a:67:6d:f5:aa:24:4c:37:bf:a1:b5:53:
         7c:aa:2c:82:fd:c0:57:74:5f:3e:f7:59:7b:bf:ab:96:0d:be:
         e2:b8:b6:57:5c:a3:55:21:ef:92:17:29:50:73:9d:0e:27:49:
         ee:4c:da:ee:4c:f9:46:0e:8d:9f:e3:6d:63:ff:98:91:c4:a0:
         75:6a:cb:c1:5d:43:45:eb:4d:4b:f0:5e:bb:fb:b2:a6:72:a9:
         79:13:94:82:75:9d:4d:a1:e5:3a:f3:1b:ef:32:8e:d5:f6:d0:
         70:40:64:c1:a9:2e:b1:1c:67:94:9b:aa:7b:fc:f6:ca:19:56:
         3e:69:20:92:7c:ca:e7:31:b6:a1:f7:a6:7c:01:69:0a:f6:33:
         65:4f:ca:88:f8:f9:09:76:a3:27:47:98:6c:d2:f7:6b:78:e2:
         32:d6:f2:6a:ba:d1:e1:82:e7:ac:b2:2d:c4:d4:a4:ab:66:9e:
         17:76:80:6e:a0:4b:7e:5d:d8:20:24:78:22:c8:b4:5d:2a:b5:
         33:ed:0b:6c:d9:a2:8e:f9:03:60:57:b3:a1:e1:b1:96:ca:37:
         eb:16:01:be:10:7d:13:a4:7f:d6:6f:8b:56:75:1e:96:ab:4c:
         42:40:2e:54:42:eb:d0:f7:30:0f:99:81:ec:1f:af:ba:48:47:
         76:fe:b4:b2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjUxMTE3MTAyNjIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODkxYS0yNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlnhknGCpRsURNv577guGREbRCeTrZjllsWZwsmvH2WlIJ79vBm2caeTjtX25
skJmsGcG9Lng3KaaYp+5r645vAR8lt12IJHieeSJaNV+702wAlx+9rCJ70vaXCSp
Sa7kLIKH4Xv9QMkQOyD5H4c6rUANGSm969loMuGkvvxYyWwZu7ak6DLGq9gb+0p9
W2xxiBuxlkEjqf2BwZAIxp+o77P2k7DC06k5mu/xGCibCmn8gxkP9iptRKr6PGnr
UMtbysdnRKF7wPQWXfNFI2EVYlU6gGfdfN0WZDQBQW8JMUkpTL7XNkfx9iaVMxqn
Eum911Lyk2o61uI9lWs0sVhIYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPGaapxq
DI12cWj84AlNp3ax9EtDMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvREMyRkM4NDRD
MzlGMTFGMEIzNkE2NDE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1RuMA0GCSqGSIb3DQEBCwUAA4IBAQBxVIYjOJhKZ231qiRMN7+h
tVN8qiyC/cBXdF8+91l7v6uWDb7iuLZXXKNVIe+SFylQc50OJ0nuTNruTPlGDo2f
421j/5iRxKB1asvBXUNF601L8F67+7Kmcql5E5SCdZ1NoeU68xvvMo7V9tBwQGTB
qS6xHGeUm6p7/PbKGVY+aSCSfMrnMbah96Z8AWkK9jNlT8qI+PkJdqMnR5hs0vdr
eOIy1vJqutHhguessi3E1KSrZp4XdoBuoEt+XdggJHgiyLRdKrUz7Qts2aKO+QNg
V7Oh4bGWyjfrFgG+EH0TpH/Wb4tWdR6Wq0xCQC5UQuvQ9zAPmYHsH6+6SEd2/rSy
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:56 2026 by rpki-client