Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/D44647F42AA511F0B80C4C59C4F9AE02.roa
File:                     D44647F42AA511F0B80C4C59C4F9AE02.roa (raw, json)
Hash identifier:          BPkxT9PJbOIgNrspZOoDgDO33hVHTRKGqGy183wMITk=
Subject key identifier:   D2:DA:83:E4:28:AD:CC:A0:FA:01:3D:DD:44:B4:B8:3F:D7:8E:EB:33
Certificate issuer:       /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial:       010B
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/D44647F42AA511F0B80C4C59C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 14:57:16 +0000
ROA not before:           Thu 30 Apr 2026 14:57:16 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152179
IP address blocks:        103.165.84.0/23 maxlen: 24
                          163.61.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
                          rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
        Validity
            Not Before: Apr 30 14:57:16 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69f36dcb-af6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:09:72:7f:07:6c:25:e1:04:61:a0:ce:58:
                    b1:49:f1:20:f4:73:76:9e:b8:0a:4b:f6:12:64:cc:
                    af:55:bd:77:34:35:a7:77:53:3e:05:bd:70:2f:fc:
                    a9:94:df:35:6a:1b:dd:b4:4a:49:8b:36:41:47:86:
                    96:ae:34:dc:77:39:5e:da:33:d9:ae:3b:5b:80:0d:
                    37:10:68:a5:41:a8:6a:03:6d:11:31:02:ab:3c:2f:
                    66:3a:83:5a:98:3e:0c:bb:7d:c5:37:62:25:7f:69:
                    15:67:b5:6a:bd:13:89:d4:33:78:a5:66:15:cd:d5:
                    36:fd:08:ef:6f:ce:5d:6b:1d:69:f5:f2:ba:22:b7:
                    f4:98:b5:7d:da:2d:26:64:fa:16:f5:73:9c:80:18:
                    c9:07:e5:5c:be:30:67:70:02:97:61:60:42:9b:b4:
                    ed:26:6a:8b:6c:95:1a:9c:ec:5b:d8:c3:2e:7d:c6:
                    eb:19:7b:6b:6c:c7:2f:12:25:4a:80:78:d5:d0:12:
                    0c:e2:00:d4:64:fc:83:f8:90:c3:68:7b:2c:a2:cd:
                    ab:dd:a1:9b:1e:3d:c8:58:39:59:a2:0a:80:67:5d:
                    5e:5d:90:28:f8:9b:8a:32:36:d1:59:4e:e3:15:e0:
                    8c:71:d2:80:0e:36:1f:91:78:30:a5:fd:dd:4a:e0:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DA:83:E4:28:AD:CC:A0:FA:01:3D:DD:44:B4:B8:3F:D7:8E:EB:33
            X509v3 Authority Key Identifier:
                keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/D44647F42AA511F0B80C4C59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.84.0/23
                  163.61.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:f6:d8:a1:1c:a6:b4:6a:38:8a:63:97:3c:54:42:02:98:d8:
         d2:40:06:f1:d1:9f:df:55:dc:77:02:9e:ea:91:29:12:f8:3b:
         c7:2c:83:80:60:b5:ea:ec:1c:32:95:f1:0e:59:78:94:f0:ab:
         0c:5e:b2:c5:13:f4:eb:02:b3:9e:39:89:45:0a:aa:82:72:61:
         1f:12:3f:2c:b2:79:32:79:71:e7:02:ce:12:68:e4:93:11:4b:
         c1:a4:b7:7d:54:b1:ba:94:b8:4c:a7:04:ee:c0:52:8c:c1:a7:
         65:d0:3f:ca:4d:6e:52:6d:e9:a7:7f:11:20:f0:b9:0f:09:19:
         fa:55:a9:93:19:70:f8:08:4e:be:b2:bf:a8:89:43:f9:38:62:
         28:bc:a1:83:c6:e5:31:44:14:3c:24:d5:60:a7:02:3e:4f:e6:
         77:50:cf:60:1a:c9:b6:67:9a:c4:84:5e:5c:a4:0a:81:24:8d:
         d1:4f:52:8b:2b:6e:46:73:8e:90:fd:1e:ee:33:13:5d:d7:16:
         2f:c4:80:04:78:e9:07:d5:38:c4:10:c5:57:c5:9c:c7:10:12:
         d2:08:b3:c3:f1:32:08:09:69:79:ba:1c:13:c4:e3:00:98:97:
         7a:79:cd:c3:6e:b2:3f:ec:b2:6b:79:bf:e1:ea:8b:ba:61:23:
         8e:a7:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:21 2026 by rpki-client