Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4D73512C49EE11F1AA9A1823B9833773.roa
File:                     4D73512C49EE11F1AA9A1823B9833773.roa (raw, json)
Hash identifier:          e0/pverBa6Jpv6AdP9wiuQiGW38MBPBQ9M3kVrGMFq8=
Subject key identifier:   63:F1:D9:04:BB:0D:AE:6C:90:04:D6:51:DA:7A:28:9B:4B:C5:D3:7A
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       09B1
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4D73512C49EE11F1AA9A1823B9833773.roa
Signing time:             Sat 10 Oct 2026 22:44:34 +0000
ROA not before:           Sat 10 Oct 2026 22:44:34 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        103.234.54.0/24 maxlen: 24
                          150.107.2.0/24 maxlen: 24
                          163.53.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 22:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2481 (0x9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct 10 22:44:34 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acabfd2-79c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c5:ba:ef:e9:b5:67:20:82:0b:d9:2f:61:b2:
                    e8:05:16:8f:7e:ea:c8:45:49:ae:27:d2:40:51:73:
                    f8:b7:be:81:fa:2c:52:52:bb:a1:40:ef:4d:46:e0:
                    9a:1d:80:67:e3:e1:a1:34:76:f8:a8:45:2e:49:c4:
                    93:0c:f2:98:b2:4f:45:60:c1:6c:3a:1c:47:38:bf:
                    aa:63:20:e0:27:6c:d5:00:8c:76:99:52:02:16:a1:
                    87:a3:cf:b8:2e:3b:0e:aa:22:9a:c7:12:5d:65:d5:
                    54:6c:7e:85:8d:0b:65:0b:34:65:49:62:73:16:ef:
                    d7:df:eb:4f:23:de:5c:16:d4:cb:a7:26:99:b6:e2:
                    f3:6d:19:81:c4:c8:81:93:9b:70:b8:40:df:08:e9:
                    4e:5c:6f:56:b0:0a:a7:cf:48:d0:5e:18:9d:7f:11:
                    00:c1:78:5c:b0:e5:4a:a5:31:a2:0e:04:6f:ef:6e:
                    d9:ed:bc:6a:87:28:35:4e:28:8f:d6:98:2b:49:1e:
                    98:91:c0:a5:26:9d:82:82:fe:7b:3e:b3:de:ee:d9:
                    3f:68:63:a0:1f:e6:27:26:6e:7a:c5:20:dc:11:c2:
                    31:dd:b7:7e:e4:37:06:4d:08:7c:b9:a8:cf:a1:e9:
                    60:36:24:8a:07:19:c1:e1:d2:15:e9:48:6c:ee:18:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F1:D9:04:BB:0D:AE:6C:90:04:D6:51:DA:7A:28:9B:4B:C5:D3:7A
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4D73512C49EE11F1AA9A1823B9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.54.0/24
                  150.107.2.0/24
                  163.53.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a0:68:ca:d2:dc:51:9a:72:23:02:da:76:fa:05:d2:80:14:
         e1:ef:87:35:3a:61:a4:5c:6a:52:da:d2:5f:94:a7:65:43:15:
         6f:1d:61:e6:f7:bc:18:58:1e:47:d2:c8:16:4d:ac:2e:29:de:
         d5:7b:22:a7:53:b7:7a:4d:84:c1:4b:15:9b:8a:64:d4:4b:4b:
         92:54:89:f7:c9:7e:45:19:7e:52:54:85:d7:c1:16:42:ed:0d:
         cc:0a:63:17:65:99:70:ea:87:8c:0c:88:8c:6b:58:e6:fe:91:
         78:9e:57:99:91:e8:45:24:84:4f:01:e5:67:b4:31:f8:2f:68:
         7f:d9:f4:c3:d3:77:eb:35:24:f6:bf:13:0e:16:6e:d9:7e:eb:
         e0:b8:e3:e1:93:3d:5a:2e:aa:da:52:b0:eb:c9:ec:b7:8e:2b:
         6e:cc:27:e5:81:16:ff:ac:ed:ea:2f:3a:5a:03:4f:30:46:cf:
         e9:13:fb:7c:21:24:31:ef:9e:88:52:6b:8b:16:1b:26:67:53:
         48:14:97:76:b2:30:55:0a:f8:ca:48:9c:75:ae:c3:b4:dc:aa:
         3f:5a:a4:35:e3:44:44:0d:13:ff:10:95:ae:cd:ee:91:88:bc:
         7f:9b:da:92:b5:db:6e:af:f0:20:2d:58:d1:5b:df:fa:74:67:
         5d:bd:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:36 2026 by rpki-client