Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
File:                     2DC89280AB5E11F087B3A63DC4F9AE02.roa (raw, json)
Hash identifier:          raMlWqDhjQC1kyKcLB1NtSmvdSNAXI5T6+IpnIwsYFY=
Subject key identifier:   8E:EB:8F:89:BF:39:00:66:14:DE:EC:E1:07:1F:15:81:58:78:8D:A6
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       AF
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
Signing time:             Mon 03 Aug 2026 08:58:27 +0000
ROA not before:           Mon 03 Aug 2026 08:58:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     38186
IP address blocks:        103.147.12.0/24 maxlen: 24
                          103.147.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 07:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Aug  3 08:58:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a705833-1af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:77:c2:ff:00:2e:05:5d:1c:c5:b2:d0:27:
                    b7:07:78:2d:b0:61:8e:ba:72:df:5d:03:bf:a1:65:
                    16:e1:8c:56:e3:46:e1:48:99:f0:55:94:5f:0e:4f:
                    12:6c:8e:4f:55:e4:5a:04:59:42:ff:d1:3a:1f:8e:
                    d4:89:ce:fd:1d:3f:eb:66:e0:b3:d9:01:43:bd:57:
                    5c:37:05:15:01:8f:e0:07:32:2b:4b:42:80:6a:4d:
                    d1:b1:8b:1f:dc:f5:68:4e:e6:40:92:16:fa:95:4b:
                    69:5d:ba:98:7e:ee:e3:cb:71:69:ec:87:13:a5:ee:
                    3f:36:74:6f:7a:b5:f3:34:e6:3b:fd:ff:44:66:09:
                    c7:c3:f9:8e:70:8b:26:37:90:51:07:1d:da:cb:9e:
                    0b:f5:fc:77:56:a1:62:2d:e2:ae:14:55:f2:23:e3:
                    2b:3c:bc:ef:3d:cc:72:75:02:c2:ce:69:da:be:40:
                    94:d4:46:c7:a9:37:19:88:d5:1f:7a:de:35:f8:64:
                    af:dc:42:ad:66:dc:4d:21:29:8d:e6:80:b1:08:b4:
                    69:5a:5b:e1:66:80:7f:0a:6b:cd:55:2b:12:bb:dc:
                    fd:c0:12:21:bd:bd:ee:03:96:79:b9:9f:49:66:1b:
                    aa:b7:49:1c:a5:fd:1b:da:4f:6b:3c:f0:aa:6c:6b:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EB:8F:89:BF:39:00:66:14:DE:EC:E1:07:1F:15:81:58:78:8D:A6
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:00:33:61:b7:df:d0:76:8f:55:bd:9b:0a:9f:eb:88:17:
         cd:fb:ad:20:a5:21:1d:fb:25:a9:11:8f:00:f8:62:4e:11:1f:
         de:50:a9:ee:76:06:cf:ab:ef:ae:9e:cc:60:3e:d0:0c:0c:20:
         2a:bc:1b:3e:aa:3a:f8:6a:24:f3:17:3d:ea:b7:6e:76:ff:9c:
         a6:bd:1b:03:94:3f:25:d2:a0:94:1f:53:69:a3:95:7a:7b:c9:
         ec:85:51:9f:11:6f:66:9d:8e:a3:fb:53:bf:0f:80:84:d0:e4:
         76:96:53:fd:56:18:4f:21:10:4d:f3:65:67:22:02:c6:f7:93:
         10:13:f6:ad:1f:38:21:1a:ab:e8:ea:7e:53:69:c8:82:0e:71:
         91:1f:4e:91:66:f5:8a:0a:e0:6f:b2:b1:61:d7:2d:03:37:d9:
         3a:67:69:c9:02:4a:4e:27:d6:2d:e9:4c:f5:13:c4:de:3a:f4:
         89:dd:27:14:4c:f0:6b:af:d1:b0:48:2f:37:61:df:bd:86:56:
         84:73:eb:ab:03:2b:cf:3b:9b:b1:9e:72:0d:23:b1:af:12:ee:
         78:33:87:aa:8b:01:b8:f5:40:0d:c5:01:6f:c9:25:16:11:61:
         97:69:e9:43:92:82:b4:18:02:dc:11:b6:41:4b:66:08:c8:80:
         f5:26:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:00:02 2026 by rpki-client