Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa
File:                     804B03560A7211EE8FA2CD58C4F9AE02.roa (raw, json)
Hash identifier:          i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=
Subject key identifier:   FA:6A:F9:FC:97:D0:B7:B3:49:31:39:93:CD:E2:34:B8:01:E7:16:44
Certificate issuer:       /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial:       0433
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa
Signing time:             Tue 05 May 2026 00:31:11 +0000
ROA not before:           Tue 05 May 2026 00:31:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138398
IP address blocks:        103.185.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
                          rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
        Validity
            Not Before: May  5 00:31:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f93a4f-0472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:71:83:78:1c:f1:a4:1a:9a:a5:60:9c:93:
                    31:db:14:68:ef:ce:5a:0f:cf:44:49:b8:31:4b:1f:
                    9e:04:73:e8:0d:21:15:0f:ac:65:ee:1e:af:95:61:
                    99:2b:0c:8c:4a:12:db:21:b0:8b:90:ab:8b:d2:07:
                    3b:c8:61:4b:39:69:3d:78:80:b0:42:9a:73:91:3e:
                    1c:a2:97:10:a5:40:1f:20:92:a6:77:ff:77:8b:1f:
                    ab:c8:6f:a0:d9:2d:fb:70:d7:ac:d5:da:69:2e:dd:
                    99:94:a5:26:13:2c:57:61:16:f9:a2:99:81:2a:07:
                    59:0b:56:d3:84:1e:f2:13:36:73:db:f8:bc:03:36:
                    19:01:7d:79:db:a2:65:8d:97:03:1c:31:5c:b8:2a:
                    ac:1c:35:1a:87:ad:40:3e:13:40:1b:49:46:78:7f:
                    b1:1a:b3:9e:b9:d6:11:d4:f2:d6:1a:5b:03:fa:3a:
                    60:82:59:9c:bf:a5:57:6c:0c:bd:9f:cc:3f:4b:9c:
                    37:3f:33:79:7f:27:ab:62:f3:78:64:67:23:69:1f:
                    7c:b2:1a:f6:88:2f:54:39:8e:42:cb:27:e1:8d:48:
                    b8:8e:5c:af:e4:8f:d4:80:bd:29:f5:34:ef:8f:66:
                    bd:f4:0e:82:ea:d5:5b:4d:50:9f:3f:bc:1c:c1:23:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6A:F9:FC:97:D0:B7:B3:49:31:39:93:CD:E2:34:B8:01:E7:16:44
            X509v3 Authority Key Identifier:
                keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:42:7d:71:da:d9:57:9e:cc:12:f2:df:66:89:b8:aa:2d:1a:
         2c:e1:90:2a:fe:89:c5:13:fc:be:55:47:f4:b8:fa:db:41:d6:
         e9:d9:2f:cb:f9:9b:30:34:02:48:a7:06:cb:42:ac:db:d2:f2:
         89:38:c9:cb:8e:53:32:cb:bc:2f:1d:ea:dc:75:7b:20:4a:a9:
         d2:e7:d3:34:08:25:89:98:9f:69:d8:4e:b8:1a:67:f1:46:4c:
         6e:26:c1:41:15:69:f7:a2:9b:44:61:a1:bd:ba:a7:56:3e:ef:
         f8:8b:1b:a1:5a:ef:6c:a3:0b:e7:96:50:cf:cb:2b:c2:af:94:
         b1:a4:39:f7:cf:90:85:ae:58:6d:9e:db:34:ab:dc:0b:2d:9a:
         ed:94:57:29:22:19:30:06:61:23:80:a4:8b:21:14:66:60:48:
         6d:e0:dc:5b:c6:45:57:32:52:01:71:b6:4a:68:a2:10:e0:68:
         9c:33:7e:d4:49:6d:52:7b:75:0b:44:d6:3c:34:e6:b3:2c:db:
         4c:d9:a8:e9:86:84:81:60:ed:9d:eb:da:a8:73:b2:20:aa:aa:
         bf:37:e3:74:ae:0d:62:08:95:29:84:8d:a2:ba:a3:3d:2e:c5:
         5b:14:75:5f:fe:ae:e8:9d:97:e2:cd:af:57:37:cf:1c:1c:d2:
         0a:37:ff:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:35 2026 by rpki-client