Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC187B74F62711E9AC18E63BC4F9AE02.roa
File:                     BC187B74F62711E9AC18E63BC4F9AE02.roa (raw, json)
Hash identifier:          uvtQrM0TpfHbW7ex57nMW2ZvXTgDMttP3mpUN9tS1i4=
Subject key identifier:   D3:4E:36:BB:F0:15:7E:C5:91:61:2B:34:D1:95:D3:7A:1E:0E:8C:E4
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       38C3
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC187B74F62711E9AC18E63BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:23:17 +0000
ROA not before:           Mon 18 Aug 2025 14:50:28 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     56289
IP address blocks:        203.127.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 14:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14531 (0x38c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Aug 18 14:50:28 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48415-60a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:81:e7:0f:3b:61:17:f5:cd:4d:f6:c1:9d:12:
                    24:d1:1c:b3:15:fb:8f:6a:76:69:e0:d9:47:a5:e5:
                    0c:ce:db:6f:82:ff:1d:b7:92:5f:8b:04:16:99:a8:
                    66:09:a3:5b:0e:d7:f8:96:26:da:52:00:dd:b8:a9:
                    7a:cf:79:81:f7:d6:dc:2b:3e:53:33:2f:2c:4e:df:
                    ce:1a:cd:88:97:be:f8:86:a6:09:ee:0f:78:b7:af:
                    c7:09:f8:38:cf:9a:86:b8:c5:70:56:51:c1:d1:f1:
                    7d:90:85:31:f9:7e:a1:f5:11:ba:84:8e:5d:61:34:
                    40:6e:34:09:e4:64:cc:51:f1:65:28:fa:2c:38:c7:
                    0a:67:12:4b:5b:8e:fb:1d:6a:cc:9b:d4:92:1b:92:
                    d1:50:0a:cf:04:c9:7c:8b:e2:19:0f:2d:3a:87:9b:
                    26:21:d0:f9:4e:00:ba:72:7d:61:32:92:6a:ac:bd:
                    1d:20:50:14:e2:41:c9:58:ec:4b:73:8c:2a:9c:8f:
                    30:2c:6b:b7:23:8c:0f:13:8a:92:61:bc:05:32:61:
                    f1:ab:4e:22:08:37:80:41:bc:a3:78:ec:c3:d1:3d:
                    5a:66:c8:bb:1e:3d:36:6f:54:14:ae:6e:71:c1:52:
                    57:6c:6b:38:ca:cb:ed:c9:39:85:9c:45:4f:7e:79:
                    7b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4E:36:BB:F0:15:7E:C5:91:61:2B:34:D1:95:D3:7A:1E:0E:8C:E4
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC187B74F62711E9AC18E63BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.127.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:39:c5:7c:6e:64:e6:48:4a:6f:02:12:0e:ea:58:c8:7a:
         cf:ae:d8:8a:37:cd:08:59:52:28:d4:b5:90:ed:95:e2:9d:89:
         79:14:74:c3:e5:00:da:67:9d:67:00:2d:5a:7a:09:c6:2a:da:
         56:4c:ba:6e:ef:e2:48:ff:39:0a:9f:9e:cc:17:09:7b:5f:ca:
         5a:b1:7e:4e:cb:a1:cc:4c:02:5d:bd:f0:d8:58:ba:07:ed:5d:
         ef:57:84:1f:bc:d7:b3:f9:35:4f:a2:83:2b:b4:ec:f2:5f:6e:
         c6:84:ff:19:96:7f:c4:48:ce:ae:d1:c3:65:ba:19:59:ca:f3:
         5e:ec:19:53:c8:9b:9e:79:d9:e9:fe:1b:90:b8:97:30:71:a1:
         99:90:57:e1:4b:71:70:d2:14:b6:d2:f1:17:68:a1:e2:5a:a8:
         98:19:24:87:52:82:41:ba:a2:1c:43:0c:09:69:70:63:8f:bd:
         c6:c1:5f:ea:d0:35:a8:b6:56:b2:f1:8b:80:7e:7e:12:dc:f8:
         53:13:38:b2:9c:ce:8c:34:05:75:e8:c1:45:2b:bd:d4:6c:5b:
         f4:9b:22:24:51:ad:a3:68:bc:2e:05:a0:49:1a:c0:71:71:2c:
         15:58:bf:5a:ef:af:58:e2:91:9c:fe:a9:69:62:5f:25:cd:ce:
         29:5d:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:36:44 2026 by rpki-client