Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/73F46EA421DE11F18A474186263D8C67.roa
File:                     73F46EA421DE11F18A474186263D8C67.roa (raw, json)
Hash identifier:          3UN4xbRTimMuR44cwoOR2FSGZhlpECHhB+D/CVZEmSY=
Subject key identifier:   A8:5B:7F:8B:9C:5A:2B:62:41:F3:F8:5B:E7:A4:2B:8C:03:F9:FC:B2
Certificate issuer:       /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
Certificate serial:       09BD
Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/73F46EA421DE11F18A474186263D8C67.roa
Signing time:             Thu 14 May 2026 20:24:34 +0000
ROA not before:           Thu 14 May 2026 20:24:34 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55707
IP address blocks:        103.5.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl
                          rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 20:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2493 (0x9bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
        Validity
            Not Before: May 14 20:24:34 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a062f82-93de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:07:ef:8c:fa:d1:e1:02:60:95:fa:81:3b:
                    7b:31:6b:24:a7:b8:fe:68:c3:33:17:ef:03:3e:f9:
                    24:92:26:ae:12:b1:49:1e:2c:e5:cf:e2:f3:1f:c2:
                    fc:6c:3d:2c:ce:91:89:cb:a7:ef:7a:87:6a:22:ba:
                    ce:6f:8e:26:13:e0:fd:34:4f:c2:f9:21:eb:36:de:
                    68:d1:31:f0:7d:56:13:32:95:4e:9a:cb:58:ea:2a:
                    8d:84:5a:d4:27:86:34:8f:f5:a8:ff:55:60:db:10:
                    70:49:d4:71:4c:ff:cb:8b:fb:29:c4:64:38:bc:10:
                    1b:e2:c9:b2:63:a1:62:66:9b:a5:93:f0:44:64:09:
                    05:42:1e:9a:d2:29:fd:86:05:10:43:64:c4:df:6c:
                    b2:ff:99:2c:08:22:c8:48:a7:64:7a:fb:d1:09:98:
                    52:cf:1e:23:3e:b3:55:70:37:1f:ac:c6:86:c8:e6:
                    05:59:fc:e2:e2:06:e4:23:cf:d3:f1:70:26:bd:dc:
                    ab:ce:b5:05:19:21:73:cd:8a:a5:01:f1:b4:48:21:
                    91:3a:f7:1d:be:d7:9f:3d:12:c4:82:84:d8:ee:e5:
                    5d:e8:e6:2d:a5:6c:29:ad:87:5a:37:cc:8d:88:56:
                    52:53:b3:4a:ff:eb:4e:a9:ba:13:92:04:f3:99:e3:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5B:7F:8B:9C:5A:2B:62:41:F3:F8:5B:E7:A4:2B:8C:03:F9:FC:B2
            X509v3 Authority Key Identifier:
                keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/73F46EA421DE11F18A474186263D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6d:f3:c0:18:3e:b4:c8:b6:e8:1b:21:37:74:57:e0:5c:c6:
         8f:10:5e:76:86:70:c3:65:b7:32:aa:1a:8f:70:c5:e0:34:ea:
         26:96:a0:43:96:e7:29:a8:42:aa:79:79:ac:2a:91:d1:7d:c5:
         c3:52:be:7a:9c:cc:28:73:b7:4e:78:a8:6e:e9:c8:aa:08:18:
         a5:81:dd:5a:64:2f:65:5c:1b:17:be:de:41:b1:c6:dc:73:2e:
         a1:96:25:f8:83:1a:24:dd:83:5e:2f:e0:ee:21:c9:47:88:8e:
         a6:c2:f9:2e:59:b9:b6:11:d4:5a:a6:6a:32:87:01:4a:53:9c:
         3d:84:ef:03:73:0a:5c:26:4c:7f:b1:1c:56:80:7d:b5:dd:fd:
         b4:77:36:ea:6b:fc:20:e9:44:39:0b:f6:07:aa:17:16:e1:50:
         a0:49:21:0a:4a:60:2e:d9:0d:63:cb:23:b4:f5:6b:5f:ba:0d:
         4f:dd:86:a2:a8:2d:8b:e8:32:85:8c:af:98:2d:72:cc:ce:fa:
         ff:90:b4:82:72:15:86:aa:0f:38:83:48:b0:35:63:d6:af:64:
         07:cd:24:69:fa:dd:10:67:af:ac:be:76:70:74:c1:01:25:2c:
         c4:80:5f:18:7f:3f:28:5d:af:c0:05:78:32:3f:7c:4d:a1:ed:
         a7:94:cb:7c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG
REZEODYwNTcwHhcNMjYwNTE0MjAyNDM0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA2MmY4Mi05M2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoh8H74z60eECYJX6gTt7MWskp7j+aMMzF+8DPvkkkiauErFJHizlz+LzH8L8
bD0szpGJy6fveodqIrrOb44mE+D9NE/C+SHrNt5o0THwfVYTMpVOmstY6iqNhFrU
J4Y0j/Wo/1Vg2xBwSdRxTP/Li/spxGQ4vBAb4smyY6FiZpulk/BEZAkFQh6a0in9
hgUQQ2TE32yy/5ksCCLISKdkevvRCZhSzx4jPrNVcDcfrMaGyOYFWfzi4gbkI8/T
8XAmvdyrzrUFGSFzzYqlAfG0SCGROvcdvtefPRLEgoTY7uVd6OYtpWwprYdaN8yN
iFZSU7NK/+tOqboTkgTzmeMr3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKhbf4uc
WitiQfP4W+ekK4wD+fyyMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx
MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkEzQzQvM0VFNjRDMUFCMTA0MTFFQUEzODQxNjVBQzRGOUFFMDIvNzNGNDZFQTQy
MURFMTFGMThBNDc0MTg2MjYzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwVYMA0GCSqGSIb3DQEBCwUAA4IBAQA+bfPAGD60yLboGyE3dFfg
XMaPEF52hnDDZbcyqhqPcMXgNOomlqBDlucpqEKqeXmsKpHRfcXDUr56nMwoc7dO
eKhu6ciqCBilgd1aZC9lXBsXvt5Bscbccy6hliX4gxok3YNeL+DuIclHiI6mwvku
Wbm2EdRapmoyhwFKU5w9hO8DcwpcJkx/sRxWgH213f20dzbqa/wg6UQ5C/YHqhcW
4VCgSSEKSmAu2Q1jyyO09Wtfug1P3YaiqC2L6DKFjK+YLXLMzvr/kLSCchWGqg84
g0iwNWPWr2QHzSRp+t0QZ6+svnZwdMEBJSzEgF8Yfz8oXa/ABXgyP3xNoe2nlMt8
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:19 2026 by rpki-client