Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/A42489D8799211EAA230E17FC4F9AE02.roa
File:                     A42489D8799211EAA230E17FC4F9AE02.roa (raw, json)
Hash identifier:          kCnQek73leKmi3aDqde2ljkIvWHF4qyomHuVX7x+0k8=
Subject key identifier:   6C:0D:95:C5:E8:F1:80:F9:0F:F2:A9:34:75:06:F7:D3:56:41:58:7E
Certificate issuer:       /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
Certificate serial:       0AFC
Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/A42489D8799211EAA230E17FC4F9AE02.roa
Signing time:             Thu 24 Sep 2026 19:39:17 +0000
ROA not before:           Thu 24 Sep 2026 19:39:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     131275
IP address blocks:        103.121.120.0/24 maxlen: 24
                          103.121.121.0/24 maxlen: 24
                          2400:9c60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl
                          rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E
        Validity
            Not Before: Sep 24 19:39:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab57c65-69ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:2d:aa:8a:ea:11:30:ce:bb:85:ea:2d:a9:
                    d6:49:ad:53:da:8e:3b:3f:6f:78:31:86:62:72:d4:
                    a4:24:01:10:3a:dc:fe:14:a7:3b:ef:fe:af:2e:8b:
                    ff:e2:49:02:cd:c4:31:e1:60:7a:00:d8:db:97:2d:
                    c6:f3:c7:96:02:dd:71:8d:c5:b4:0d:e6:20:d8:62:
                    60:3d:f3:5b:4b:dc:80:d4:4a:c1:3f:3f:a4:cc:51:
                    84:4b:c3:0c:ce:88:e9:c3:a7:93:4d:33:28:9c:0a:
                    91:b8:3c:ca:d2:79:67:b7:fe:e4:77:5f:cd:a0:05:
                    3f:bd:50:e6:9b:72:53:65:c2:96:97:44:b1:e7:28:
                    3d:b0:61:c4:24:57:82:bc:8a:09:e0:4d:43:0b:c5:
                    0b:f0:1b:a1:15:4e:b3:0f:44:b9:e6:47:ab:1d:88:
                    99:01:f5:80:28:4f:de:18:3c:e2:42:65:77:08:9a:
                    b7:78:5c:de:b6:38:0d:df:41:a2:fb:ff:4d:3e:36:
                    c0:57:b7:90:6d:a1:35:67:89:98:f7:5d:ab:7d:85:
                    8d:d8:bf:ae:7f:de:e2:19:f3:8b:67:d2:30:56:59:
                    98:aa:d6:1f:9c:8a:9c:06:f2:91:ca:c3:46:34:97:
                    95:1c:6f:1a:e8:8e:3a:aa:27:02:20:15:79:bf:0b:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0D:95:C5:E8:F1:80:F9:0F:F2:A9:34:75:06:F7:D3:56:41:58:7E
            X509v3 Authority Key Identifier:
                keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/A42489D8799211EAA230E17FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.120.0/23
                IPv6:
                  2400:9c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:1a:e0:98:09:fd:91:55:dd:97:9c:1f:ae:c7:6c:47:4c:69:
         c6:fc:7b:47:bd:f9:18:89:f3:a7:44:a6:42:33:d5:ca:09:34:
         25:2c:83:06:61:9f:96:52:42:63:fa:34:a4:da:b8:4f:01:82:
         de:09:9d:4b:63:37:5f:72:d0:17:e3:5b:19:72:aa:e4:f8:63:
         c8:e0:e8:56:04:07:16:da:4b:08:b0:24:b9:72:3e:96:f4:ec:
         c6:5b:d4:5f:5c:f9:db:c1:b3:f1:9f:1f:60:74:c0:82:5c:1c:
         39:66:c1:9c:2a:01:91:3e:b6:f9:ae:c9:5d:72:ea:60:0e:b0:
         69:6f:4e:17:60:d7:81:91:5a:11:2a:11:7a:e3:d2:53:cd:8d:
         bc:24:cc:cc:40:ed:4f:a6:2d:af:53:63:b1:18:bb:c7:bc:ba:
         a2:1c:63:83:92:1e:38:f0:d4:4d:dd:32:e4:a1:9d:d5:9a:0c:
         2d:49:26:fb:61:e8:f5:6c:25:25:3f:33:27:3c:f0:a1:09:73:
         4e:6e:78:0f:eb:1e:1e:4f:c9:c8:75:3b:ed:3a:17:ff:39:f9:
         80:32:1c:df:ba:4b:40:0a:10:8d:27:4b:f8:cb:98:0e:81:13:
         11:9c:e6:0b:04:05:00:af:84:fa:2c:a4:5c:f8:fe:cf:50:76:
         55:03:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:13:55 2026 by rpki-client