Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/73D33FA24A8611F08884C659C4F9AE02.roa
File:                     73D33FA24A8611F08884C659C4F9AE02.roa (raw, json)
Hash identifier:          vP8lL4o3HuYHEtxmFVFrIPK3xiCpCNcYIvaXF6iQ6qc=
Subject key identifier:   A6:C9:75:F5:80:D1:B1:77:20:2D:FE:7E:AE:84:58:7A:9A:88:80:F0
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       08DC
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/73D33FA24A8611F08884C659C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:53:48 +0000
ROA not before:           Wed 08 Oct 2025 22:54:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        43.252.209.0/24 maxlen: 24
                          103.225.196.0/24 maxlen: 24
                          103.234.54.0/24 maxlen: 24
                          150.107.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 22:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct  8 22:54:14 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48b3b-188e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:7a:02:80:3d:f6:90:5e:43:21:6c:ec:db:
                    cc:aa:0a:5d:a1:f7:7d:28:9d:c2:88:80:7c:36:fb:
                    a3:32:28:47:03:51:a6:e8:e8:fe:e5:39:af:26:c4:
                    3f:e5:30:01:56:ad:b6:d9:db:39:70:a4:d1:53:b2:
                    89:cc:6b:34:76:35:20:f1:3d:6f:8b:56:ed:db:a0:
                    9f:f7:f0:93:cd:49:72:19:7a:01:ea:29:ce:b3:3f:
                    3b:e5:e6:d7:18:08:09:c3:1e:c1:dc:06:97:2d:21:
                    82:6a:1f:c0:69:16:ab:1c:58:a6:97:00:42:03:f3:
                    9a:49:51:e7:46:f2:4f:75:5b:28:9b:50:67:2e:5f:
                    8c:a4:b6:c0:6f:ba:08:f7:4e:5b:a8:23:23:3f:0f:
                    8a:4c:8f:72:b0:b7:44:b8:1a:6b:64:b5:95:70:55:
                    26:11:54:18:25:27:b4:28:f6:e0:5b:18:32:61:b0:
                    49:df:5c:8d:d9:43:ab:23:f6:f0:3e:90:9a:2d:34:
                    d4:b2:58:df:ca:55:5a:76:b4:c2:1c:6e:b0:4b:b0:
                    1b:b0:a6:f5:7d:6e:f4:10:b0:73:7e:12:32:b3:1a:
                    57:02:1a:99:d8:29:a4:3a:da:20:94:9c:b0:0a:9a:
                    d9:42:71:75:88:82:d1:db:1d:f5:9d:7a:3b:57:f8:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:75:F5:80:D1:B1:77:20:2D:FE:7E:AE:84:58:7A:9A:88:80:F0
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/73D33FA24A8611F08884C659C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.209.0/24
                  103.225.196.0/24
                  103.234.54.0/24
                  150.107.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:3b:a3:65:f0:18:c2:bb:ae:e9:32:1e:17:2d:a2:37:7e:
         18:fe:98:6a:22:a5:2e:aa:5a:13:c8:8e:f5:ac:8a:6a:ab:bf:
         b7:4b:39:c9:53:3d:21:52:f5:5f:69:67:c9:06:45:4f:1c:17:
         48:db:56:3e:42:b9:68:6a:dc:56:88:63:eb:84:60:6c:24:d5:
         02:99:82:12:2d:00:46:29:fa:6d:9f:74:7b:50:8b:44:2c:c9:
         9d:83:04:bf:9b:65:37:c7:7f:df:ef:3c:d8:9b:ce:64:a6:b5:
         71:21:26:59:88:a1:79:a9:f4:88:7e:91:15:76:ae:0e:47:25:
         12:6a:d6:2f:7b:ac:3f:ed:1a:33:11:fb:08:43:b2:81:c4:1f:
         e5:20:4e:79:73:3e:77:f4:f8:f3:e6:33:68:22:11:a5:27:e1:
         64:89:a7:89:fd:a1:07:b8:22:6b:c5:6c:69:36:7b:06:cd:84:
         f7:50:c8:58:d3:a8:f1:57:4b:9e:2f:9d:7b:79:1a:29:94:d7:
         08:a1:b0:1d:db:2b:23:18:47:f3:cb:58:35:2e:34:5c:fa:cf:
         0e:e1:22:7c:ce:d4:e7:ef:53:41:79:01:92:3d:03:e3:f5:d6:
         55:82:19:5b:d8:7d:a8:19:07:c2:37:d9:18:4d:37:cf:55:c1:
         b0:1a:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:43:42 2026 by rpki-client