Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/35D174F2C7DF11EDAEC8CE40C4F9AE02.roa
File:                     35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (raw, json)
Hash identifier:          pWzkuCt8a+9azhiGDPeDWp5ecjb9VtC3wFHM3M7CwD0=
Subject key identifier:   EC:5B:B1:30:0F:09:1D:E0:74:AE:17:00:35:27:B6:6A:98:EE:13:C3
Certificate issuer:       /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial:       0288
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/35D174F2C7DF11EDAEC8CE40C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:29:45 +0000
ROA not before:           Sat 29 Nov 2025 00:27:20 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134371
IP address blocks:        103.18.204.0/24 maxlen: 24
                          103.18.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
                          rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
        Validity
            Not Before: Nov 29 00:27:20 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a44d59-f1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:de:33:41:9c:c5:96:57:39:74:f1:ca:57:
                    31:5b:ac:5c:81:d3:31:55:e4:69:78:89:ab:27:76:
                    90:ca:92:db:25:93:ec:16:8c:f1:ff:04:e1:59:41:
                    f3:44:b7:3c:48:16:d0:f7:f5:f9:5b:68:60:ce:89:
                    4f:30:d5:41:1e:f0:aa:1f:e1:aa:d2:1d:b0:39:2e:
                    6b:51:df:34:30:1c:55:8f:a5:ed:7a:5a:e2:58:6d:
                    90:e7:74:c4:53:d2:39:07:71:1d:d5:2d:83:21:8e:
                    fd:6b:5d:de:47:a8:66:6d:9f:05:b4:92:79:7d:9f:
                    91:60:ec:10:d4:f8:ab:a1:eb:64:5d:13:89:81:36:
                    f2:a8:bb:b2:b7:5b:a0:e8:44:e0:03:22:a8:27:31:
                    26:c1:8d:27:f2:5b:a3:a9:8b:30:86:bd:c4:da:ad:
                    a4:09:c1:f3:0e:2d:4a:40:64:8b:9e:0e:8e:d5:b7:
                    4b:c3:fa:4c:d9:d7:f8:4e:38:fe:a4:d1:d3:4c:d4:
                    1f:4c:b4:bf:04:7d:c7:90:26:60:65:be:8a:38:ca:
                    2d:10:55:0c:9c:db:2f:63:f9:07:9f:9a:c3:40:55:
                    bb:19:77:08:9b:0f:0c:47:89:95:b5:ea:41:4d:63:
                    ce:1f:5a:29:d9:d6:99:4a:a2:69:db:85:c9:de:2f:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5B:B1:30:0F:09:1D:E0:74:AE:17:00:35:27:B6:6A:98:EE:13:C3
            X509v3 Authority Key Identifier:
                keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/35D174F2C7DF11EDAEC8CE40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:2a:20:6d:93:43:bd:c6:55:a7:bb:a2:fb:c9:5b:39:e7:ce:
         29:1a:84:7d:cd:3f:51:f5:1b:e1:ee:c1:e5:b7:a5:9d:18:08:
         8e:96:dc:23:a5:d8:dd:03:b5:01:7c:f3:91:d0:ef:47:9e:2a:
         c3:df:8e:a1:3b:1e:54:d8:ee:67:29:6c:21:8e:76:b9:05:9e:
         df:d6:25:4a:1a:18:87:b5:9e:0e:59:f3:14:fe:01:8b:59:4f:
         1f:08:c6:b4:62:b1:e5:66:31:d7:25:58:ce:92:c9:59:3e:1f:
         0d:bc:63:65:cb:96:db:3a:9a:a8:dd:87:21:25:e6:81:e8:82:
         dd:46:e8:2d:b3:b9:0c:64:81:e1:88:0b:fb:d6:1c:8b:c3:3d:
         3b:5c:ad:e7:39:b2:c2:39:18:48:87:a1:f3:cf:b2:b9:55:19:
         56:e1:21:44:85:7d:4a:3d:35:e5:08:71:13:ae:de:a8:2a:30:
         8b:54:61:a1:37:20:69:1d:6c:13:0c:db:fb:1a:6c:ec:82:9d:
         da:e9:84:68:dd:c6:ac:56:6e:24:20:26:e3:7e:de:ae:47:e6:
         da:13:dd:22:74:ba:1b:05:74:44:4c:82:42:0c:56:e9:a4:bc:
         14:26:c4:68:d3:50:b8:92:9a:c9:2d:b4:ed:99:c9:d1:0b:23:
         97:f5:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:06 2026 by rpki-client