Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa
File:                     CB7909B4B26C11F08ED1666AC4F9AE02.roa (raw, json)
Hash identifier:          8uzxFmMR3Sr3PxroRuZhI7xinnvv5MK7IdYyanz4uBY=
Subject key identifier:   CE:18:0D:97:BC:7B:3E:80:3D:34:79:22:72:57:1C:3E:02:0F:E5:16
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       0645
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa
Signing time:             Mon 20 Apr 2026 23:29:21 +0000
ROA not before:           Mon 20 Apr 2026 23:29:21 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140287
IP address blocks:        103.112.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
                          rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: Apr 20 23:29:21 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e6b6d1-d624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:89:6d:e0:7a:74:2b:4e:12:88:d5:71:cc:
                    8e:76:a5:06:33:4b:34:6c:b1:16:49:86:e8:84:86:
                    fe:7e:fd:3b:e3:f3:e4:9b:b1:ae:84:af:50:09:21:
                    d7:4e:d3:12:10:56:44:a9:82:29:10:89:d9:f5:62:
                    00:17:ee:9e:83:9b:81:7b:02:91:a4:01:93:ca:da:
                    92:9c:0d:cb:8e:5b:e4:37:1f:97:38:c7:63:21:db:
                    f4:e9:08:73:17:dd:94:d4:2c:3a:c9:7b:e5:9b:53:
                    d5:8f:f5:f7:b6:d1:88:ec:17:cc:7d:43:5d:76:62:
                    6c:2a:7a:da:7b:c4:81:4e:80:27:ae:6b:98:fb:2b:
                    21:8f:7f:a2:68:d7:20:a7:bb:de:f7:e7:0b:0d:26:
                    4b:42:69:2b:77:99:17:18:51:13:d1:d1:cf:37:76:
                    eb:90:b1:10:fd:7c:c1:53:72:4a:1a:b8:95:f5:b3:
                    e8:28:c0:71:93:10:65:f2:e5:af:95:e7:9f:8a:73:
                    0d:30:b7:a1:ca:4c:ca:8f:08:a6:77:79:ef:ff:01:
                    73:f5:98:b2:27:35:63:56:9f:06:1f:ad:2a:cf:9f:
                    88:99:d6:64:f5:9a:48:3c:6c:cf:70:3d:9b:e1:23:
                    61:ce:70:dd:97:ae:5b:96:db:a7:f7:0e:25:4d:fd:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:18:0D:97:BC:7B:3E:80:3D:34:79:22:72:57:1C:3E:02:0F:E5:16
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:5d:7f:24:d1:4e:67:38:a9:a5:d5:b4:7c:f7:ae:8f:bc:
         37:44:a1:0d:15:f8:25:a3:9f:f9:74:87:23:30:02:16:ee:a6:
         72:cc:e1:07:17:37:0d:e7:cd:cb:4a:88:27:22:a4:a8:b3:20:
         0c:b6:b9:16:8e:16:d9:da:b1:be:fd:c7:d9:ac:68:1a:bb:fd:
         6a:6a:55:79:28:b3:3c:bf:c5:3f:54:63:4f:f8:2d:f4:3d:07:
         80:22:2c:0f:70:8b:b9:a1:80:5e:4e:fa:5a:2a:e4:79:c7:5b:
         0b:86:d1:c2:7e:1a:d2:2c:2d:84:7a:e7:68:e2:71:a4:e2:cd:
         0c:4f:bc:8c:06:07:fc:b5:85:cd:c5:82:d3:35:be:7a:d9:2c:
         f5:19:d5:e5:c9:de:26:70:04:96:81:58:ad:bf:9f:e3:0c:f1:
         f8:30:bb:65:ca:64:e3:1e:71:03:af:c2:e6:5a:03:b4:31:e0:
         17:87:af:c8:f6:2a:d3:d6:94:c6:d5:53:dd:de:2e:cd:ec:da:
         1a:76:2c:31:1a:ee:22:fc:78:a9:03:66:02:d1:6c:b7:3a:6d:
         d4:61:bf:24:1a:a9:3a:0c:69:31:87:88:b4:9f:08:71:0f:ec:
         f6:42:3c:9a:fb:e9:ed:48:ef:56:ff:59:58:78:d0:5d:6b:56:
         c6:73:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:49 2026 by rpki-client