Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DC2FC844C39F11F0B36A6414C4F9AE02.roa
File:                     DC2FC844C39F11F0B36A6414C4F9AE02.roa (raw, json)
Hash identifier:          V2qlmV4XkoxlRoXJX3GJoP5zWEsqS91ZCQdcyts5qHo=
Subject key identifier:   80:D6:0F:2F:5E:3A:7C:82:D1:DC:68:00:71:A2:F4:E8:4B:38:A1:48
Certificate issuer:       /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial:       0C57
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DC2FC844C39F11F0B36A6414C4F9AE02.roa
Signing time:             Sat 04 Apr 2026 19:25:11 +0000
ROA not before:           Sat 04 Apr 2026 19:25:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154177
IP address blocks:        103.84.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3159 (0xc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
        Validity
            Not Before: Apr  4 19:25:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d16597-201e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:90:e2:71:2d:4b:00:b6:c9:4e:92:26:fb:
                    c7:44:bd:5e:75:66:33:c0:eb:5b:8f:61:6e:31:1f:
                    ab:d4:02:d4:6a:90:ae:04:5b:ca:3d:6f:8c:aa:4c:
                    7d:2a:d8:0a:98:eb:02:d8:25:64:8f:33:d3:e6:4d:
                    46:d9:2d:29:cb:1d:8b:cb:a9:1d:03:40:f1:75:5e:
                    1d:65:b8:47:49:07:91:90:51:99:0a:d2:aa:f2:a6:
                    14:e2:e9:a6:7d:c7:4a:89:2b:f9:46:cc:a6:3a:48:
                    be:ff:f1:46:a3:3e:dc:9e:3f:2c:d0:e2:71:2e:d0:
                    00:b4:a2:e1:21:c4:bc:62:37:42:56:e0:df:c2:ae:
                    ca:4b:7a:ae:e2:4c:2e:c1:7d:72:a6:50:0d:9f:67:
                    3c:d5:45:97:d9:56:d5:fd:f4:fe:74:1d:f0:a0:1a:
                    ee:60:4d:46:b8:b2:f3:28:6a:8a:36:b9:f8:64:83:
                    05:19:64:c1:ad:78:dc:ba:d7:5e:2a:0f:c9:4b:d8:
                    29:73:33:f0:83:38:76:8a:75:81:2e:83:a1:7e:4a:
                    2a:ba:98:44:47:6d:9a:87:9c:f5:2d:08:eb:31:36:
                    64:06:91:85:78:02:4d:87:0b:c0:85:bc:67:f7:96:
                    80:02:ed:69:43:5b:76:1d:08:3a:02:62:e4:fe:66:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D6:0F:2F:5E:3A:7C:82:D1:DC:68:00:71:A2:F4:E8:4B:38:A1:48
            X509v3 Authority Key Identifier:
                keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/DC2FC844C39F11F0B36A6414C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:73:4b:51:ac:e3:63:fb:f5:02:79:90:f3:68:bc:46:89:
         d4:86:3c:ef:7a:0b:92:3b:33:dc:26:b0:dd:53:eb:47:39:22:
         40:42:b0:b6:41:3e:0e:05:b3:3b:f2:19:e0:cc:7e:a6:aa:ed:
         29:85:68:27:e7:fc:88:e9:15:a7:0e:f9:1c:10:6a:6d:58:94:
         82:9a:99:45:01:19:98:9a:07:b0:2a:1b:ec:b0:ef:3c:de:aa:
         b8:e2:f2:a5:70:ec:73:78:f3:3c:35:c4:48:1b:51:c1:04:06:
         99:80:ac:45:18:14:52:ae:3b:f3:86:b7:49:e6:61:c1:26:67:
         a2:7f:2f:aa:64:e6:c8:31:63:0f:69:67:0d:a0:b4:94:a1:13:
         e5:30:23:a6:8e:63:64:b9:71:a1:7b:2f:c9:50:d9:c5:64:6f:
         74:60:00:92:2a:f0:b0:df:07:6b:b6:14:2c:8d:8c:6b:2a:e9:
         5a:58:44:43:06:4a:81:84:a1:79:73:22:7f:75:23:15:84:73:
         95:c3:05:ca:4c:d2:cf:7c:4c:1b:de:04:49:67:1c:6f:c8:eb:
         48:e6:0f:00:0f:88:db:ff:fb:e7:30:52:2e:13:e6:99:cd:84:
         21:d3:a6:2b:c2:72:e4:b7:49:01:02:c4:67:56:d6:3c:53:c2:
         10:51:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:38 2026 by rpki-client