Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1328B7DCBA6711EE9A63996FC4F9AE02.roa
File:                     1328B7DCBA6711EE9A63996FC4F9AE02.roa (raw, json)
Hash identifier:          DHViFPvNbWRkbmTAti4Bf+7PoBd6798WiZLchdU3w8g=
Subject key identifier:   79:68:15:27:D5:19:D8:FF:46:0B:F8:C3:10:5A:D2:2B:12:EF:C0:C6
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       01B8
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1328B7DCBA6711EE9A63996FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:01:12 +0000
ROA not before:           Sat 21 Jun 2025 04:33:28 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        14.192.4.0/22 maxlen: 23
                          103.215.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Jun 21 04:33:28 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59828-7970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:1e:a8:e4:1b:0d:d6:10:45:11:38:4d:76:
                    81:94:ad:a9:fe:34:9e:e7:75:3d:0e:28:0e:6d:2c:
                    ac:d2:a5:1a:dd:ba:c6:b0:ba:c2:d0:87:73:cf:72:
                    62:93:7b:85:e1:12:84:59:07:cf:a2:e3:22:83:3d:
                    7d:e4:fe:b0:94:8c:83:c1:0d:56:2d:a9:51:a2:b6:
                    d4:70:83:69:22:1d:c0:29:99:16:94:65:b1:f3:6f:
                    08:7a:d8:64:4a:60:b5:71:cc:78:4d:27:58:73:4b:
                    63:6c:d6:27:c2:a0:82:84:54:c9:97:2e:67:30:9d:
                    74:d5:a1:76:2e:65:35:dd:8c:07:1a:f0:a5:d0:47:
                    a7:cf:55:7f:68:2b:51:70:c7:f7:c5:93:ea:be:6f:
                    dc:43:6d:21:19:3e:d5:40:10:2b:3d:00:30:01:e7:
                    72:65:ca:c5:4c:a1:81:fd:68:05:06:95:fe:e2:ac:
                    9f:fa:f8:b6:34:47:3b:61:0f:67:c4:f1:fd:3a:ed:
                    8e:31:e5:27:36:31:b6:1d:8e:25:eb:c6:d5:96:90:
                    8d:f3:0b:ca:9a:01:fe:c4:e7:ae:6f:65:ac:75:61:
                    e2:b3:73:3b:a4:99:79:81:cf:90:0a:79:c1:93:42:
                    dc:32:d9:a3:8a:e8:c7:6e:d5:b6:78:bd:5e:c9:01:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:68:15:27:D5:19:D8:FF:46:0B:F8:C3:10:5A:D2:2B:12:EF:C0:C6
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1328B7DCBA6711EE9A63996FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.4.0/22
                  103.215.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ed:2f:e2:54:e6:8c:6d:83:78:1c:86:0c:7e:0d:34:78:bc:
         90:2e:6a:e0:d1:63:d2:8e:a9:cf:25:3f:9b:d4:03:2c:3a:8e:
         72:bd:7e:28:fc:e7:ad:1e:b0:2c:80:74:a0:18:71:1f:1c:97:
         b5:ef:5f:bd:b6:d0:03:b3:b6:53:78:02:b6:80:cb:6f:ba:99:
         5c:88:7c:a9:05:7f:b9:0a:76:b6:70:ab:72:8e:68:ec:5f:ad:
         8f:7f:65:46:c0:ee:57:71:7d:6d:89:8a:2e:44:b7:d8:4a:a2:
         ef:23:e7:81:88:51:e6:5d:85:92:07:7b:28:37:6c:57:cf:58:
         53:3d:8a:91:71:4e:78:a7:83:d6:84:9e:11:52:da:e4:a7:b7:
         4c:f7:57:4a:4d:5d:96:c3:b2:fb:07:60:8a:cd:0e:35:87:cb:
         e5:c0:ce:f1:34:e5:78:a9:a1:6f:a2:58:ee:09:07:8d:66:09:
         b1:2e:39:7f:34:37:ca:1e:b5:37:63:b7:6b:e9:cb:c7:d9:1e:
         4b:94:83:d8:d9:8b:06:73:dc:e7:ca:56:c8:08:68:55:99:e8:
         d3:30:9e:cc:e7:cc:13:64:8b:50:08:a2:d3:75:a9:7c:07:2d:
         f2:53:f6:62:de:51:15:bb:1d:4d:09:4f:cb:4b:c0:b7:de:e9:
         3e:af:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:19:32 2026 by rpki-client