Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/2D450BA8B58211F094C92178C4F9AE02.roa
File:                     2D450BA8B58211F094C92178C4F9AE02.roa (raw, json)
Hash identifier:          CYyBpgev2I8lIYy5euAo+T58y5gvQtb1JaMBoaDc3j0=
Subject key identifier:   7F:2E:3C:F0:78:AB:5C:C4:74:80:B2:F6:D8:8F:71:76:66:46:DE:CD
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       0235
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/2D450BA8B58211F094C92178C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:15:18 +0000
ROA not before:           Thu 30 Oct 2025 11:18:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        103.120.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 02:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Oct 30 11:18:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47426-5a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:fd:ba:e7:52:a5:12:e3:50:54:9e:5e:b9:
                    bf:03:9a:69:a4:d4:35:22:e7:77:8a:12:1b:64:f8:
                    0e:cf:17:6c:a3:44:45:64:5c:05:1b:d7:05:a3:60:
                    66:0d:f4:d8:13:bf:25:fa:fb:f7:98:fd:75:55:ee:
                    31:17:04:37:81:b1:3d:39:f8:27:15:6f:3d:96:17:
                    3c:39:55:f6:46:87:12:26:7b:b7:a4:b8:d8:7a:0b:
                    7c:56:ed:43:a5:9b:d9:ea:98:a4:3d:de:14:3c:58:
                    de:da:fb:c4:a1:83:7d:ad:9f:05:65:18:43:d6:67:
                    74:52:e2:59:53:5a:01:3a:0c:ef:d6:c1:11:b9:f3:
                    cd:9f:93:26:5a:c4:71:f4:7a:10:c0:62:b4:a9:f9:
                    e7:7d:10:f8:51:7c:64:bf:16:77:b6:5f:1e:b4:33:
                    4c:ff:03:f5:28:c5:a2:50:27:c8:37:af:0c:8a:f4:
                    01:05:18:12:0e:41:c1:85:4f:0a:84:6a:8d:45:79:
                    52:72:e7:ed:1c:fc:f3:ad:b9:96:b8:97:f6:42:0a:
                    80:4c:25:66:1a:05:48:58:ba:c1:ed:3e:55:39:63:
                    77:cc:99:0f:aa:97:85:d3:6b:39:30:4b:24:10:26:
                    1a:18:c0:93:b8:ef:dd:97:c6:3a:8f:b3:76:c6:de:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2E:3C:F0:78:AB:5C:C4:74:80:B2:F6:D8:8F:71:76:66:46:DE:CD
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/2D450BA8B58211F094C92178C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:a5:0f:3f:40:36:a8:2f:4d:2d:39:7e:c2:c8:b5:e0:55:
         2a:cd:2a:c7:25:65:fd:31:fd:2a:ee:52:87:3a:ad:55:2a:10:
         e4:6f:ea:76:05:93:ab:a7:86:af:32:34:11:98:d8:3a:03:fe:
         b1:82:aa:b3:46:86:8c:5c:47:fb:78:2f:28:83:a4:8d:24:86:
         15:82:92:2f:0c:15:a9:8b:b6:d6:2e:2a:4d:09:9c:6d:32:74:
         69:c4:58:7c:48:c3:47:f5:1a:fe:32:1d:a2:9b:22:d7:c3:da:
         9e:f0:18:21:28:e4:e9:b3:83:95:7c:45:0d:76:d6:1f:48:00:
         cf:c9:7c:15:1b:b5:0d:c4:9c:2a:ff:c7:9e:4f:fc:52:3d:c8:
         94:10:87:05:72:b6:f1:0c:62:3a:83:e8:90:88:2e:12:f0:ff:
         bb:1a:76:51:50:74:11:05:47:0a:a2:d4:b5:7c:87:5f:68:48:
         2c:94:99:6f:b5:c5:5a:a1:ab:a7:fd:98:2e:9b:e3:13:61:ed:
         67:90:90:65:67:49:51:a2:8a:8b:fd:75:f5:04:52:42:9d:f6:
         8f:76:21:24:24:ce:66:46:81:7a:e5:23:1b:3d:2b:c4:97:70:
         8b:69:dc:23:a7:31:8b:77:e2:27:f1:d3:21:3f:fc:fd:aa:1d:
         75:a5:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:03:14 2026 by rpki-client