Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/12B1AAB4B74B11F1A50305EC3B11F970.roa
File:                     12B1AAB4B74B11F1A50305EC3B11F970.roa (raw, json)
Hash identifier:          v/IAUsXxFsvbrsBGrwa/A9xRHR8PY3Ni0uZYv24b1TQ=
Subject key identifier:   84:AF:38:1B:AC:49:7F:83:A5:0E:4A:C5:A5:C0:22:E1:5F:9A:3A:DC
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0C4B
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/12B1AAB4B74B11F1A50305EC3B11F970.roa
Signing time:             Wed 23 Sep 2026 12:34:09 +0000
ROA not before:           Wed 23 Sep 2026 12:34:09 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     2497
IP address blocks:        103.6.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 12:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3147 (0xc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Sep 23 12:34:09 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ab3c741-7aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:07:b1:55:4c:b6:1b:e5:90:42:ab:2c:76:8b:
                    8e:8a:e7:08:32:6b:38:42:e7:e0:a6:ff:bc:a2:9e:
                    0f:d4:8e:5c:ae:1c:5f:5a:0a:d5:0f:9c:b3:de:2d:
                    d9:9d:dd:a2:c4:6f:dc:a7:1a:71:39:80:22:b2:1f:
                    35:4b:e2:fe:4f:eb:59:24:76:07:43:b4:31:d1:5f:
                    5e:f5:25:8e:2d:bf:8a:a7:eb:b2:01:aa:b4:83:44:
                    b8:5f:29:24:26:10:53:3b:64:2d:55:f3:a6:e1:d8:
                    66:37:4a:9c:ac:94:61:1a:aa:11:46:b7:75:ed:93:
                    a8:ec:5e:68:e3:f8:c3:83:aa:ca:3a:8f:ca:4e:5f:
                    fe:c5:d1:b8:db:25:f0:30:b9:9a:e7:23:b5:c7:4c:
                    e5:41:c8:aa:6a:15:8a:72:18:89:93:13:32:8e:67:
                    43:d1:e9:ad:bf:9c:98:6b:40:23:25:ad:80:cd:56:
                    07:8a:73:88:1e:e2:e6:2e:f9:01:42:d6:98:09:a9:
                    a3:d0:a5:71:4a:be:44:8f:5f:b6:6b:9d:e5:15:d3:
                    42:4b:70:3d:2d:9c:a3:19:49:e5:ba:2a:7c:93:16:
                    14:75:c0:f9:76:51:65:7b:9c:87:cb:2e:4a:65:1b:
                    73:36:59:69:47:7e:d0:c4:73:fa:8d:a0:79:4c:08:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:38:1B:AC:49:7F:83:A5:0E:4A:C5:A5:C0:22:E1:5F:9A:3A:DC
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/12B1AAB4B74B11F1A50305EC3B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:39:f7:6e:b7:ca:1e:cc:07:8a:36:2f:85:49:06:fd:dc:aa:
         1c:3f:47:cb:25:5f:08:08:3a:a9:b8:83:62:3b:6d:dc:ed:7a:
         d3:1a:cc:8a:70:a5:7f:3a:ab:70:c9:e9:ef:d4:29:25:43:5e:
         e3:88:db:7d:2f:9d:a8:05:8b:46:91:9e:94:2b:a0:0b:21:50:
         f8:f6:b4:6f:a5:15:86:f8:2e:a7:1c:74:17:66:5c:fb:2a:78:
         48:1c:47:0c:0d:61:1b:8a:89:d1:91:bb:66:2e:32:ba:26:8a:
         05:bd:c7:ea:7b:fa:6f:72:c3:1a:64:d0:2f:8d:6c:93:76:69:
         d5:a6:c6:a7:1e:c4:43:25:d8:78:b1:3e:26:08:ac:ee:76:33:
         6c:99:02:24:07:72:04:e0:99:a0:1e:bd:68:c2:9a:16:d9:c3:
         3f:02:4f:c2:4d:9c:12:e4:a0:ca:2d:c9:e6:08:83:e3:d3:96:
         e6:31:6d:c4:2f:d8:7f:82:1f:58:55:2a:e3:e6:53:9c:f1:bc:
         6c:52:79:b8:db:1c:69:79:91:3d:a5:b8:6a:73:37:c3:77:4d:
         a7:69:96:60:d2:0c:60:5f:8e:d6:fa:56:e9:55:96:0f:23:be:
         15:36:a3:5a:ee:21:e8:06:f4:84:94:7b:a1:93:44:be:7b:8d:
         d2:2a:57:72
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE
QzhDQzdFMTkwHhcNMjYwOTIzMTIzNDA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzYzc0MS03YWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5AexVUy2G+WQQqssdouOiucIMms4Qufgpv+8op4P1I5crhxfWgrVD5yz3i3Z
nd2ixG/cpxpxOYAish81S+L+T+tZJHYHQ7Qx0V9e9SWOLb+Kp+uyAaq0g0S4Xykk
JhBTO2QtVfOm4dhmN0qcrJRhGqoRRrd17ZOo7F5o4/jDg6rKOo/KTl/+xdG42yXw
MLma5yO1x0zlQciqahWKchiJkxMyjmdD0emtv5yYa0AjJa2AzVYHinOIHuLmLvkB
QtaYCamj0KVxSr5Ej1+2a53lFdNCS3A9LZyjGUnluip8kxYUdcD5dlFle5yHyy5K
ZRtzNllpR37QxHP6jaB5TAj7IQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFISvOBus
SX+DpQ5KxaXAIuFfmjrcMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx
NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I3QjIvNDA2NjUwMDg0MTZGMTFFQUI1QzdDQTY1QzRGOUFFMDIvMTJCMUFBQjRC
NzRCMTFGMUE1MDMwNUVDM0IxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwYUMA0GCSqGSIb3DQEBCwUAA4IBAQDBOfdut8oezAeKNi+FSQb9
3KocP0fLJV8ICDqpuINiO23c7XrTGsyKcKV/Oqtwyenv1CklQ17jiNt9L52oBYtG
kZ6UK6ALIVD49rRvpRWG+C6nHHQXZlz7KnhIHEcMDWEbionRkbtmLjK6JooFvcfq
e/pvcsMaZNAvjWyTdmnVpsanHsRDJdh4sT4mCKzudjNsmQIkB3IE4JmgHr1owpoW
2cM/Ak/CTZwS5KDKLcnmCIPj05bmMW3EL9h/gh9YVSrj5lOc8bxsUnm42xxpeZE9
pbhqczfDd02naZZg0gxgX47W+lbpVZYPI74VNqNa7iHoBvSElHuhk0S+e43SKldy
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:11:45 2026 by rpki-client