Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/3BE765AC2E5911F1AF1402DA99833773.roa
File:                     3BE765AC2E5911F1AF1402DA99833773.roa (raw, json)
Hash identifier:          4vN9DxDqav8XQy5RbRHkPzQNR/xKvXelfPI7Z+9SlN0=
Subject key identifier:   5D:6C:62:DE:C9:AB:5C:E6:80:BC:04:63:6A:DE:F9:B8:2B:1A:4E:94
Certificate issuer:       /CN=A912B1E4/serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
Certificate serial:       04
Authority key identifier: A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/3BE765AC2E5911F1AF1402DA99833773.roa
Signing time:             Thu 02 Apr 2026 06:00:48 +0000
ROA not before:           Thu 02 Apr 2026 06:00:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154579
IP address blocks:        163.128.144.0/23 maxlen: 24
                          2402:5460::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl
                          rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B1E4, serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
        Validity
            Not Before: Apr  2 06:00:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ce060f-5b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d9:3d:c2:1f:5d:d2:5a:18:67:13:24:b7:01:
                    7d:08:10:d3:bc:81:af:d9:19:97:7a:c9:e3:bd:b9:
                    d6:15:db:71:8a:7d:c3:32:44:20:2a:d5:3f:89:a4:
                    1e:2b:2d:64:e9:7a:77:37:38:36:4e:a4:46:8a:e7:
                    66:28:28:3f:f3:b3:73:24:aa:c8:be:f1:c4:0d:05:
                    ec:da:45:31:58:2f:ed:68:e0:e7:aa:c5:2b:c0:c0:
                    ec:9d:71:b8:5d:38:c2:26:2c:cd:6d:bc:b6:df:ec:
                    9e:c7:05:00:79:9f:c2:54:81:fe:2f:64:f3:99:78:
                    c6:dd:27:6e:35:cd:10:5a:dd:5e:8b:95:16:38:6f:
                    1a:82:8d:83:a2:c8:8e:65:a5:70:ab:ed:ab:db:6a:
                    5e:cf:0f:5c:0e:2d:92:76:13:76:70:ec:43:7d:62:
                    4a:be:0a:67:4e:29:2c:fc:6a:1f:23:7c:82:8e:06:
                    cb:e8:c0:0b:85:86:1e:1a:6a:4e:c1:33:a1:af:f7:
                    e1:08:2e:79:96:02:78:c2:1d:9e:6b:5f:b7:89:35:
                    9f:4c:ee:3a:77:45:ca:78:32:17:10:5b:a2:c6:3b:
                    98:9f:1b:d3:28:49:75:7f:3b:a1:59:ba:1c:6d:58:
                    c1:f1:47:58:97:e6:34:3a:94:de:24:d2:34:f2:90:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:62:DE:C9:AB:5C:E6:80:BC:04:63:6A:DE:F9:B8:2B:1A:4E:94
            X509v3 Authority Key Identifier:
                keyid:A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/3BE765AC2E5911F1AF1402DA99833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.144.0/23
                IPv6:
                  2402:5460::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:be:7e:3e:21:e0:10:75:da:ec:28:48:4f:de:c9:3f:b4:97:
         03:33:76:07:be:3a:10:35:53:cd:05:6f:32:85:7a:18:ff:96:
         99:09:6f:e6:9f:bf:b7:58:7f:36:94:89:b1:fd:70:59:c0:33:
         be:88:92:75:ea:3d:27:28:0a:18:b9:fe:e9:84:85:34:2d:45:
         79:d9:7d:ce:5b:df:d3:3d:d2:f4:ea:58:66:c0:e5:ef:59:11:
         2b:47:de:b6:1a:b6:90:39:5f:53:e7:cc:95:7f:dd:d7:5a:11:
         e0:79:a3:53:30:00:c7:c3:55:af:d7:d6:69:89:7a:28:ab:d1:
         cd:62:13:d9:06:75:fd:2e:ab:73:ae:4c:71:7b:d1:3a:8d:23:
         eb:bb:e3:ae:40:10:aa:db:62:15:05:fa:9a:da:93:91:83:47:
         df:e6:f5:9d:59:3f:d2:9b:48:1a:e1:bd:02:ed:e3:65:15:e0:
         be:10:35:ed:a4:3a:a7:a5:40:38:d8:02:4a:c1:de:25:50:c0:
         07:1f:17:b8:a0:d4:4b:af:9f:3f:1c:e7:f9:93:e5:87:df:df:
         42:91:02:cd:1f:f2:a0:5d:a2:b6:2a:70:23:66:f0:81:f9:e5:
         cf:9c:87:4d:57:8a:21:3f:4e:31:c4:c1:e5:21:bc:32:58:2c:
         5a:80:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:22:10 2026 by rpki-client