Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa
File:                     12A47D4E9CDB11EF857FB626C4F9AE02.roa (raw, json)
Hash identifier:          1GModq8GVTp3VBZ+WmjSYkW1Bqq/2XyaBR4joVrXKaM=
Subject key identifier:   11:5D:F1:42:91:55:F1:F6:9A:59:A8:06:BE:59:54:30:D0:FC:AF:CA
Certificate issuer:       /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Certificate serial:       087B
Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:09:30 +0000
ROA not before:           Fri 18 Jul 2025 21:32:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132890
IP address blocks:        103.27.104.0/22 maxlen: 24
                          113.52.148.0/22 maxlen: 24
                          2407:5f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl
                          rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
        Validity
            Not Before: Jul 18 21:32:08 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5a82a-4728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:66:a2:2d:0f:fc:26:9f:0e:9c:5e:cc:cb:
                    a5:b4:da:26:4a:9c:0f:74:68:f4:1a:d8:d2:4c:54:
                    ba:18:dd:bd:31:a8:22:22:2e:aa:2b:d3:a5:fb:ef:
                    37:12:5c:7c:b2:bc:2d:9a:12:ca:60:e3:54:31:77:
                    4b:69:0b:ca:ba:83:ea:47:7d:95:dd:15:4d:3f:0e:
                    a9:f2:14:2b:3a:98:05:b0:64:ed:a9:e0:1d:10:d0:
                    0e:02:21:af:36:3e:99:83:64:90:85:f9:c3:c5:3a:
                    41:ac:24:8a:c6:48:af:35:55:9a:a4:74:a7:05:ff:
                    75:6c:c2:9c:9b:4a:be:92:f0:df:a9:c9:89:f3:2f:
                    6d:d7:4a:71:0e:07:99:9a:35:63:15:9c:29:72:bd:
                    b1:6e:82:c5:19:73:d3:eb:75:da:f3:c4:0f:6e:75:
                    78:80:96:b5:88:17:fa:43:90:b0:94:a9:06:73:98:
                    ca:16:3b:14:8f:11:9b:b7:09:38:0c:c1:f6:47:64:
                    94:a7:55:21:5e:1c:00:3a:b3:6a:a3:8c:44:5f:8e:
                    6f:e3:a4:6b:2f:78:53:ec:b0:c4:85:d2:41:07:31:
                    64:e6:b5:4f:37:7f:62:4f:c8:a5:a4:38:93:57:e8:
                    78:a0:a9:24:d7:be:03:9b:66:20:9e:65:3d:5b:60:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5D:F1:42:91:55:F1:F6:9A:59:A8:06:BE:59:54:30:D0:FC:AF:CA
            X509v3 Authority Key Identifier:
                keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.104.0/22
                  113.52.148.0/22
                IPv6:
                  2407:5f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:76:c1:33:3e:4c:72:99:86:d3:85:a8:1e:b1:aa:7c:45:cc:
         18:80:e1:3d:e1:29:9d:6f:03:25:36:eb:bb:d5:a9:31:40:c6:
         3a:0f:2d:24:9e:2f:bf:f5:4f:71:b4:bb:33:80:62:26:e1:c8:
         5f:a4:5b:da:15:ec:5f:2e:cb:e6:c2:95:e3:fb:db:46:46:1c:
         3c:59:d8:93:fb:9c:ef:ac:a5:ee:1a:0b:19:2c:9c:97:07:a6:
         10:be:f8:eb:63:d6:c6:ea:e9:36:35:cc:25:13:fe:b7:18:2a:
         60:91:04:9c:83:70:6e:a9:bb:9e:5a:c0:a2:f3:2a:24:30:8e:
         1f:d6:de:4b:00:c8:cb:6a:e5:e0:34:ca:16:cd:57:d0:46:18:
         b2:49:fd:09:90:e0:a4:4e:4d:5d:60:01:d1:11:e8:ab:e1:52:
         21:d6:48:6a:b3:ef:ff:28:9e:1b:28:1a:1d:da:18:c2:e5:94:
         35:ac:7a:83:f6:f4:9d:c5:89:62:4f:ee:e6:45:90:5e:af:7d:
         09:37:ea:35:96:a2:88:0c:7a:a7:56:b4:0c:28:11:c8:54:01:
         7e:f9:20:c1:6e:ef:14:0f:aa:8b:21:a0:92:f0:e6:73:9c:0f:
         ff:08:75:93:6a:bb:fa:4b:be:49:b6:b7:f2:f8:a5:09:be:77:
         75:0f:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:32 2026 by rpki-client