Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/30CB037EC18E11EA8BF4FB68C4F9AE02.roa
File:                     30CB037EC18E11EA8BF4FB68C4F9AE02.roa (raw, json)
Hash identifier:          V308MbABYbhANAE8Mchi4dMxL6SOJKFNEqZDDLPqhsE=
Subject key identifier:   29:37:C2:EC:5F:E1:2A:15:88:89:D2:14:5C:32:3A:82:09:03:75:A6
Certificate issuer:       /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial:       0964
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/30CB037EC18E11EA8BF4FB68C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 20:40:04 +0000
ROA not before:           Sun 02 Aug 2026 20:40:04 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9919
IP address blocks:        103.12.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
                          rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404 (0x964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
        Validity
            Not Before: Aug  2 20:40:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6fab24-2dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:75:9a:d5:7c:27:22:11:5a:6b:d8:ed:85:
                    8e:52:08:40:5c:5f:7e:35:d6:45:0f:c7:67:eb:b8:
                    89:8c:67:a8:da:92:d6:ed:02:91:8e:74:b9:df:50:
                    59:d7:71:60:a9:06:a1:46:c2:a9:23:14:3e:dc:b1:
                    66:7f:32:e4:e8:3e:b7:da:67:3e:b2:3f:15:03:a3:
                    d7:97:c7:91:c8:54:59:6b:31:bf:45:3a:e4:da:86:
                    41:8e:8e:fc:ed:32:eb:58:53:35:dc:70:3a:00:97:
                    b6:06:a1:2d:72:8a:99:55:a0:d0:f4:f6:c4:b0:85:
                    60:05:30:bc:24:d7:42:c7:d6:30:2a:b2:4b:b7:85:
                    62:b1:0a:7b:15:0e:32:62:6d:0a:d7:85:c4:e1:0e:
                    e2:3a:be:91:5d:b2:50:08:4a:f8:9e:02:b3:78:25:
                    49:07:ff:43:7e:69:48:bb:46:17:9f:de:f5:6b:aa:
                    a6:63:ef:5c:55:0d:92:e7:a0:50:af:2f:2e:7c:28:
                    e0:84:cd:7a:67:81:70:7e:51:f8:f6:e9:f3:93:85:
                    7d:63:24:2d:c5:4e:65:9a:12:c4:70:ec:65:09:24:
                    63:1a:23:9f:83:31:4e:f6:86:f0:0d:a5:ed:c3:ed:
                    c7:90:f3:fe:43:cf:b4:96:8f:fc:6d:a6:ea:53:73:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:37:C2:EC:5F:E1:2A:15:88:89:D2:14:5C:32:3A:82:09:03:75:A6
            X509v3 Authority Key Identifier:
                keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/30CB037EC18E11EA8BF4FB68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:3f:7c:84:85:90:c1:ac:83:fe:66:38:a5:8e:6a:bd:98:bb:
         78:86:62:d0:90:62:f9:80:a3:a7:7a:dd:13:8a:b9:80:d5:eb:
         60:99:01:9a:ab:35:59:56:1a:7c:d5:44:d1:dd:0b:72:21:01:
         67:de:e5:c2:77:9c:2d:30:7b:9f:a1:56:4e:4e:e8:b1:71:62:
         4f:22:80:c1:00:81:18:58:02:54:e2:bd:75:10:7e:89:b5:3e:
         19:f2:a4:ad:71:fe:4f:71:45:1f:1f:a0:7f:ab:7d:ff:e1:6f:
         b3:a9:fb:6b:a8:cc:0d:4f:fc:8c:4a:b7:86:20:d9:57:1b:0e:
         f4:88:be:62:d6:13:5c:73:64:04:0e:48:32:37:bd:a3:45:dd:
         b5:eb:3c:a1:87:6c:98:f7:26:21:37:58:61:eb:6e:ad:fc:7c:
         1f:8b:6b:57:6a:d8:02:fb:82:37:93:f1:99:6d:c3:db:ec:2a:
         73:11:6a:ff:62:26:26:66:78:fa:81:ff:49:7d:29:4e:f8:ea:
         22:ad:f7:a1:b0:57:88:aa:26:2e:b4:ee:d0:5b:ec:c5:5f:66:
         f7:2a:15:b9:9e:5f:ce:32:ec:06:73:d1:e7:83:e7:67:35:54:
         d1:49:27:1c:22:c8:28:7e:cd:8a:ba:36:b7:a3:07:21:e8:3a:
         f6:37:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:44 2026 by rpki-client