Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/44B90434DFA011ED8C895F7CC4F9AE02.roa
File:                     44B90434DFA011ED8C895F7CC4F9AE02.roa (raw, json)
Hash identifier:          fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=
Subject key identifier:   16:5A:D3:6C:E9:90:25:E3:5B:89:45:E8:A1:22:6B:34:A2:41:66:73
Certificate issuer:       /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Certificate serial:       03F6
Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/44B90434DFA011ED8C895F7CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:10:36 +0000
ROA not before:           Fri 27 Feb 2026 00:20:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149426
IP address blocks:        103.179.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl
                          rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
        Validity
            Not Before: Feb 27 00:20:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a464fb-8ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:2d:d9:63:cb:50:53:97:c1:65:10:62:b3:
                    ad:ab:36:f8:a9:54:f1:6f:06:35:d2:bc:ae:ec:40:
                    23:2f:f8:2f:ee:f9:cd:2c:a4:4a:5e:a1:85:5c:e0:
                    c0:de:53:ad:12:a6:90:2b:c9:d1:59:58:60:2a:cf:
                    9e:17:71:cd:1e:f7:83:9d:58:69:72:c9:83:39:c4:
                    c4:d1:f4:da:41:e7:ab:6e:2e:26:4f:44:21:b5:76:
                    35:b9:f7:96:80:cb:53:25:c7:82:a3:ca:39:99:28:
                    92:3b:b9:80:05:c1:4e:54:53:99:88:fc:64:1f:2e:
                    91:dc:c9:4b:43:b6:ee:33:2c:31:f5:33:3a:82:60:
                    22:fb:e1:81:43:7c:8f:29:ef:c0:6e:c1:77:69:25:
                    0d:c0:17:1d:37:a6:97:f9:a0:39:75:ac:8d:a1:20:
                    08:d8:be:fb:c0:92:01:46:c4:95:35:74:58:1c:f9:
                    f8:11:da:11:21:b8:15:06:14:f0:86:ec:42:d9:90:
                    9a:f8:c4:1b:60:4d:75:95:54:70:c8:4f:14:25:c9:
                    07:76:29:a0:ed:ab:82:bb:81:d6:ba:b2:b0:56:57:
                    6d:33:3b:1a:5d:73:c8:13:b1:3e:ca:a2:fd:90:13:
                    16:6b:c3:42:bf:cb:05:09:52:f7:98:59:43:22:8f:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5A:D3:6C:E9:90:25:E3:5B:89:45:E8:A1:22:6B:34:A2:41:66:73
            X509v3 Authority Key Identifier:
                keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/44B90434DFA011ED8C895F7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:04:05:3c:6d:93:80:52:6e:e3:6b:0d:0e:71:55:65:00:fb:
         fe:e7:e0:28:3f:e0:76:91:12:e3:e8:4e:9d:19:2e:2a:5d:24:
         ac:23:17:74:42:4b:35:c0:78:18:17:95:a2:c4:49:d9:87:df:
         7c:80:8b:3d:75:47:c2:dd:8f:8f:81:6b:55:0d:d4:56:50:88:
         e9:98:fa:86:92:b0:e1:fd:ef:3d:e9:7d:0b:5d:44:36:19:8c:
         d4:37:bb:6c:e4:ba:73:aa:6a:95:86:5a:d3:8b:30:2c:62:07:
         c6:24:73:d5:36:11:71:42:f4:4f:33:90:c7:6b:e5:42:93:2f:
         97:71:63:5c:e9:7d:7d:80:a8:97:5d:6e:3b:7a:26:0b:28:92:
         b8:65:eb:38:ff:c2:6c:7b:4c:ed:d9:7d:ff:0e:67:43:87:80:
         4a:3b:7f:45:ee:de:37:32:1e:5c:55:73:7c:73:f1:49:52:66:
         49:6e:16:64:16:59:9d:54:68:a6:60:f5:db:0c:38:7d:65:8f:
         8e:56:fa:d4:30:85:62:16:25:54:28:b8:7a:b1:d0:30:2d:93:
         e1:9c:b4:91:56:6d:33:09:2e:60:43:f0:82:0a:51:37:dc:d7:
         3c:8f:7d:5b:b9:e4:be:d2:12:61:bb:aa:da:23:ef:b5:04:50:
         ce:18:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:20 2026 by rpki-client