Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2E4F17E2AB5E11F087B3A63DC4F9AE02.roa
File:                     2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (raw, json)
Hash identifier:          1OXipBNzxtYp5UB0W5xX43Nvc/1EDv2/MhW+bGOdQcs=
Subject key identifier:   0A:13:D5:D0:73:F1:B2:23:24:6A:68:41:B5:0A:8C:8B:44:38:AC:E3
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       B0
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2E4F17E2AB5E11F087B3A63DC4F9AE02.roa
Signing time:             Mon 03 Aug 2026 08:58:29 +0000
ROA not before:           Mon 03 Aug 2026 08:58:29 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55933
IP address blocks:        103.237.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 07:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Aug  3 08:58:29 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a705835-4c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:33:27:6d:bc:e3:84:fa:83:89:fa:e1:53:
                    0f:7e:42:95:b3:ee:ae:4e:94:d8:48:6c:99:ec:56:
                    45:83:33:4b:95:c4:0e:2c:d8:c9:b8:56:97:f3:62:
                    b9:a4:a6:0e:97:e4:db:32:50:03:fb:dd:32:4f:b1:
                    0b:0b:2b:03:7b:bf:22:da:db:8f:c4:24:1e:68:67:
                    3e:31:c3:1c:91:6c:84:44:7d:d3:f5:59:12:b0:aa:
                    b9:f9:a6:70:89:81:f6:ea:4f:5f:c5:70:57:8a:86:
                    88:6b:f3:46:ab:84:99:b3:e3:a4:0f:85:34:72:fc:
                    ab:e0:58:8c:2f:b7:f5:eb:1a:8d:67:d5:7b:5b:08:
                    56:fc:5c:4f:02:bb:17:4f:5b:2d:2f:c8:a3:02:c2:
                    cf:aa:55:fe:a5:e5:e2:19:72:8d:93:c7:8d:8a:4d:
                    2b:68:f6:d2:73:72:e8:36:b7:97:5c:b6:a6:8e:3e:
                    74:6c:ae:f8:dc:92:b6:c2:ae:b8:df:ab:73:24:e5:
                    c7:29:f7:56:5a:df:50:e8:bb:d5:ce:56:5a:5e:0f:
                    77:90:79:40:9c:01:02:44:fc:13:57:d9:ad:60:f7:
                    1f:27:b5:b1:de:28:df:c9:8b:ef:d7:5c:7f:41:28:
                    ac:30:d7:94:b1:3d:73:88:be:5e:ed:33:24:97:8d:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:D5:D0:73:F1:B2:23:24:6A:68:41:B5:0A:8C:8B:44:38:AC:E3
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2E4F17E2AB5E11F087B3A63DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:d8:b0:a5:8a:48:dd:b6:d7:01:5b:31:90:2d:5c:04:33:e9:
         c4:5c:53:5b:27:16:d2:bb:06:d3:6c:00:a7:f2:0f:c9:f4:f6:
         05:f4:05:71:01:01:4d:b5:57:b8:89:a4:48:07:04:ad:d8:45:
         d3:91:14:14:c6:2c:1c:71:81:85:01:40:e2:8c:38:13:b0:f3:
         bb:e9:ce:92:b9:a5:ed:72:12:d6:a6:71:3b:f4:65:21:42:f7:
         70:09:31:5c:df:91:02:04:ec:a9:f8:6e:9b:7a:a0:61:20:5f:
         df:31:ba:f1:14:74:f5:fc:00:0f:8f:60:1a:b0:24:49:7f:68:
         a0:60:d3:0b:82:b1:db:c4:2e:c1:ab:6f:9f:bb:f3:e0:5f:d6:
         4b:7e:37:5a:04:ee:67:dc:39:a3:20:dd:aa:16:d0:57:2e:5e:
         e6:cb:93:29:07:a2:b2:01:21:cf:8b:2d:f6:fa:9b:a7:ea:3a:
         03:c9:32:90:4c:99:ba:77:47:24:02:b7:fc:69:81:69:de:fb:
         2b:58:b7:db:09:17:c8:91:fb:cd:6f:ea:7f:b2:ea:be:0c:0d:
         96:3e:d2:12:ad:70:50:bc:fc:cd:52:ad:82:b6:5e:51:15:eb:
         28:90:80:7f:38:e0:30:ea:4d:f6:f4:c0:60:bb:31:b1:74:cf:
         26:01:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:40:16 2026 by rpki-client