Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa
File:                     753CE1E6814411F0AF823466C4F9AE02.roa (raw, json)
Hash identifier:          yzIzUBPrHypmilwZ97hmXQLxuQTPjTDzfB9emwk1+Is=
Subject key identifier:   1A:17:57:E0:99:71:B0:E7:59:04:EF:C6:11:8D:FA:75:79:63:20:50
Certificate issuer:       /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial:       070A
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:56:13 +0000
ROA not before:           Thu 30 Oct 2025 22:12:47 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138572
IP address blocks:        103.133.96.0/22 maxlen: 22
                          103.133.99.0/24 maxlen: 24
                          2404:4ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
        Validity
            Not Before: Oct 30 22:12:47 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4538d-0989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:12:d2:89:1e:f2:34:88:4f:7e:04:f6:b5:
                    0a:d0:a3:dd:9f:bb:5c:bf:9e:d6:4a:73:5b:11:1d:
                    ff:89:c3:e6:28:e7:15:01:da:1d:46:d0:dd:2f:97:
                    54:aa:55:31:f3:00:0f:38:e5:3b:82:9c:b8:48:d5:
                    54:61:74:fd:3c:0c:29:f9:cf:09:7e:5d:18:34:98:
                    0d:d1:9c:e8:99:ca:cc:0c:2c:59:a2:be:37:b7:c9:
                    c3:b9:6d:6c:17:80:6b:57:6d:71:8e:2e:af:54:7b:
                    c6:20:b9:c8:cd:f2:69:c5:3f:45:9a:9a:e4:9b:1f:
                    4e:9e:ae:35:7a:d5:26:07:cc:6d:cf:63:37:a8:cc:
                    9e:fe:d0:f0:67:85:45:f8:8f:ea:26:81:b7:0d:ba:
                    48:b8:b3:ef:9d:1d:9f:d3:3a:2c:0f:04:32:3b:b4:
                    0b:79:aa:11:fe:1b:0d:8e:92:1f:8e:12:47:ca:6b:
                    b7:64:93:07:f6:64:e2:6b:33:1a:14:e7:d9:79:57:
                    a7:0f:5c:ba:59:b1:eb:5b:cc:16:d2:df:1f:98:fb:
                    a9:aa:86:d6:b1:6a:77:d6:42:6b:88:9c:ae:5b:b6:
                    f2:12:1b:87:db:b7:8e:a6:f2:e3:33:66:9e:32:93:
                    42:6f:55:c7:ad:2a:b6:94:f4:bf:a9:7b:2e:54:d4:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:17:57:E0:99:71:B0:E7:59:04:EF:C6:11:8D:FA:75:79:63:20:50
            X509v3 Authority Key Identifier:
                keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.96.0/22
                IPv6:
                  2404:4ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:13:36:98:71:a1:ff:84:df:ee:af:4e:ff:c9:0a:c6:25:69:
         80:17:bf:8b:9f:15:a7:63:f8:4e:cc:b1:4f:47:46:1a:cc:27:
         db:62:3d:b2:3d:8f:92:a5:a8:ba:2e:82:35:03:a3:0a:86:22:
         e1:74:d3:7a:06:6e:e1:6b:34:0b:74:c9:1a:49:fd:c0:06:18:
         24:43:c3:b2:a5:69:ae:ea:04:72:90:c7:8d:22:56:f9:36:a8:
         ee:a9:17:01:69:e1:04:e5:84:e2:80:38:b8:2a:c4:76:04:2d:
         08:7b:72:92:d3:ee:73:52:fc:40:c2:1b:cb:ff:56:36:81:b1:
         ee:f5:d9:2b:d9:4e:95:fc:89:4a:b4:46:f2:83:0d:26:5a:b6:
         5c:02:a6:a7:a7:63:f3:79:17:ea:b4:81:ab:20:65:1f:4d:99:
         41:c1:b2:82:52:2a:9b:da:51:7b:75:cf:25:68:32:46:80:ba:
         80:51:aa:65:58:53:7a:c3:1e:fc:e3:66:9e:6d:80:93:57:ed:
         bc:34:19:d2:9f:50:d5:d9:8e:67:c3:75:11:40:7d:73:0e:d6:
         29:03:d9:10:85:28:b5:cd:fc:14:37:bd:4c:c6:0a:cf:c8:d4:
         2c:1c:8d:d4:ff:84:54:15:40:35:6c:1a:e4:f8:16:a5:d9:8b:
         7e:72:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:28 2026 by rpki-client