Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa
File:                     FC34967C6C8611EFBF35D221C4F9AE02.roa (raw, json)
Hash identifier:          9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=
Subject key identifier:   4F:BC:3C:EB:0B:1F:72:1F:77:E2:05:E9:70:46:A4:D3:75:62:D5:ED
Certificate issuer:       /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial:       01D4
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:23:03 +0000
ROA not before:           Tue 23 Dec 2025 03:23:10 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45691
IP address blocks:        202.47.187.0/24 maxlen: 24
                          2001:df3:25c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
                          rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 03:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
        Validity
            Not Before: Dec 23 03:23:10 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43db7-abe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:19:77:c5:bd:91:af:2a:1e:13:d6:16:6b:
                    89:aa:72:8a:b3:ec:fe:e1:ae:26:91:6a:29:98:45:
                    f6:ea:26:f3:1a:62:06:fc:e7:51:29:99:2a:d6:4c:
                    fc:82:6e:be:25:46:aa:6e:2f:4a:1f:25:76:0d:c6:
                    67:5d:a4:a7:5b:a2:20:4d:2c:02:48:bb:95:f6:96:
                    02:14:10:1c:46:90:07:e0:bf:ea:30:dc:f2:0f:d0:
                    d2:9a:05:d5:9e:70:f8:51:00:7e:66:8c:22:a3:93:
                    35:50:47:a7:f7:90:51:d3:1f:22:5f:4b:a6:06:46:
                    b4:5a:63:9b:57:0e:5e:cd:a4:1d:09:9d:ac:fb:49:
                    6c:35:bb:d7:5a:05:a5:c7:83:6b:df:db:38:89:9d:
                    e0:18:a2:17:92:ad:87:ce:b5:63:0e:4a:34:74:af:
                    7b:0e:69:fc:f2:fd:35:89:cb:b7:67:91:de:6a:fb:
                    28:5d:c3:50:9c:2b:9e:4d:8a:bf:14:de:50:28:8d:
                    93:98:f2:35:55:d0:60:d2:f2:fd:ec:21:d3:07:17:
                    b7:b7:26:e0:5a:1c:22:af:bc:c8:5f:b1:69:17:e4:
                    ae:16:e5:d8:a4:38:7d:c8:e4:07:8f:56:43:39:b4:
                    99:3f:8c:f8:27:85:a8:99:ce:8f:7a:b1:af:81:3b:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BC:3C:EB:0B:1F:72:1F:77:E2:05:E9:70:46:A4:D3:75:62:D5:ED
            X509v3 Authority Key Identifier:
                keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.187.0/24
                IPv6:
                  2001:df3:25c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:5e:4d:fb:28:10:3d:54:cb:64:e4:ee:ec:40:25:f9:09:
         8d:5e:a2:23:44:2f:b0:33:c2:bb:d6:6c:cf:43:9b:48:6a:09:
         bd:90:39:fd:ee:f4:c0:ed:99:e9:d6:12:61:b7:1f:6a:9c:1d:
         2e:84:e8:78:4b:65:7b:7e:76:0b:06:90:b6:68:99:15:5f:a2:
         02:62:35:06:37:6d:6d:78:28:86:dd:10:ac:26:97:02:a9:05:
         63:9c:81:e2:b7:68:9e:46:75:c8:af:a2:e1:5d:cf:57:5d:e7:
         b6:ae:75:ce:f0:bf:92:c5:ff:a8:15:3e:cc:96:d7:c1:5c:39:
         09:60:ed:c1:5c:39:2f:e8:9f:22:8f:83:4d:b9:2d:6e:26:a2:
         70:ab:ac:34:5d:61:72:76:34:93:f7:7c:cb:49:a1:92:42:af:
         b5:cc:37:98:24:ad:53:00:44:68:5a:69:ff:46:d8:5f:d5:98:
         b8:32:56:7b:87:08:f5:76:54:9c:34:05:52:fd:f9:09:11:54:
         46:fb:3b:b9:a4:07:60:fb:13:12:8a:4b:6b:e6:9f:26:53:8e:
         14:c5:81:8a:8e:d9:61:31:78:05:d7:9e:65:1c:ef:f0:31:42:
         3f:3f:0a:37:9a:c0:1d:f8:f1:f0:ac:f7:a5:05:b5:93:6a:d1:
         a0:56:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 15:58:50 2026 by rpki-client