Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/B2F017A26BE311ED8B83B484C4F9AE02.roa
File:                     B2F017A26BE311ED8B83B484C4F9AE02.roa (raw, json)
Hash identifier:          rpUyfZdW5IUbk6NgGsW43Rz/PEOzmhBfAVdBu5w6gaY=
Subject key identifier:   1A:11:77:88:3C:94:DF:DB:46:E9:BC:9E:9E:92:C8:68:1B:F4:02:EA
Certificate issuer:       /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Certificate serial:       026D
Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/B2F017A26BE311ED8B83B484C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:55:19 +0000
ROA not before:           Fri 19 Dec 2025 01:21:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150441
IP address blocks:        103.42.52.0/23 maxlen: 23
                          103.42.52.0/24 maxlen: 24
                          103.42.53.0/24 maxlen: 24
                          2001:df1:8fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl
                          rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
        Validity
            Not Before: Dec 19 01:21:02 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43737-c1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:79:bb:14:ba:8e:cf:56:ae:54:f8:f5:6e:b8:
                    a0:af:f1:3d:9e:c4:a0:0a:bc:46:1a:cd:3b:fb:75:
                    17:29:77:cf:81:71:ef:cb:3e:33:86:2c:0c:5c:e7:
                    79:97:36:f0:e3:50:22:8b:ec:59:7b:30:36:58:b9:
                    35:ee:24:75:bd:f0:62:46:d1:22:b4:6c:76:59:f2:
                    4e:c3:c3:46:cd:cb:b3:cd:10:40:e6:49:e5:4b:b3:
                    e1:67:b6:62:cf:43:a7:5c:45:62:01:f0:04:d2:d9:
                    95:fe:bb:89:5e:cf:5f:b0:4e:68:ba:e2:7c:19:55:
                    81:3c:f8:09:ba:e2:da:1f:94:95:3f:68:a4:1d:b0:
                    86:76:b7:36:8f:a9:04:e4:c1:97:56:d7:8b:02:f0:
                    23:c6:c8:38:42:71:1c:d2:f0:b1:3e:3e:05:cf:cd:
                    4c:77:25:90:41:6e:ce:9f:61:21:b3:df:ea:cc:bd:
                    9d:e1:4d:3a:e7:a1:ac:42:05:30:3b:4f:41:59:cc:
                    d7:ac:7e:e6:b5:a2:60:30:29:39:3f:db:69:a9:10:
                    09:a2:da:99:3b:12:bd:60:58:16:2b:ca:47:a0:f1:
                    ef:99:c3:d2:93:f5:1a:56:a6:7e:db:2b:da:ec:d8:
                    a3:1a:9a:00:06:a9:1e:60:1f:10:01:77:a6:f8:f5:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:11:77:88:3C:94:DF:DB:46:E9:BC:9E:9E:92:C8:68:1B:F4:02:EA
            X509v3 Authority Key Identifier:
                keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/B2F017A26BE311ED8B83B484C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.52.0/23
                IPv6:
                  2001:df1:8fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:0a:d8:d4:a4:28:2b:c8:d5:5e:7c:ca:e2:46:0f:ac:28:
         16:21:98:e9:b4:66:5a:c1:68:41:9d:10:d3:d1:74:ac:82:fe:
         80:56:4e:a1:85:4e:71:2f:dd:3c:34:79:f7:bc:77:5b:b7:4d:
         33:66:80:1f:fa:0b:17:7d:43:43:ab:5e:08:9b:89:37:5d:c8:
         55:03:5b:93:b0:c4:e6:c6:1e:b0:86:40:aa:ef:d2:e5:e4:05:
         4b:04:bb:e6:ef:31:01:bd:a8:9d:3d:63:21:7e:e8:0c:c7:74:
         05:7d:2e:d3:f0:3e:64:36:f3:b4:22:30:d6:65:a8:40:56:80:
         2c:f1:20:e6:a5:c6:3c:0b:95:f8:11:c7:c9:8d:b8:c4:4f:e9:
         d3:bf:b6:39:13:c9:91:fc:77:75:21:e7:c5:f3:6a:35:22:92:
         41:da:4d:a9:49:b1:5f:cf:f1:72:88:62:c3:cd:9c:cb:08:17:
         44:1c:0b:8d:2a:8b:53:b7:05:04:71:8c:56:a6:0e:7f:d3:b2:
         02:37:81:4d:31:54:ff:4f:07:bc:4c:e9:86:79:9a:b0:d2:9d:
         71:f4:8d:ee:65:82:75:0c:90:ca:1b:28:f5:22:35:f6:4d:a6:
         8b:8c:5f:20:c8:14:d5:9c:2e:1a:da:28:10:6d:99:b8:10:28:
         7e:75:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:12 2026 by rpki-client