Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa
File:                     B288EC9C870811F0A371DD81C4F9AE02.roa (raw, json)
Hash identifier:          EbM83ZEvePXe1Ly5n5Vgc1KedeQFazDTw+k8LcCr0ls=
Subject key identifier:   E6:7B:85:37:C9:2A:D1:BD:CC:5B:50:FC:3E:24:E4:18:BE:6D:3A:13
Certificate issuer:       /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial:       02B0
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:59:59 +0000
ROA not before:           Mon 23 Feb 2026 01:21:49 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138004
IP address blocks:        103.10.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
                          rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
        Validity
            Not Before: Feb 23 01:21:49 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a589cf-4572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:38:c7:ee:2b:70:c3:6e:26:4e:bc:c4:4e:32:
                    3b:e7:51:db:84:cf:2b:55:f6:20:c6:00:ba:84:5c:
                    97:cb:e7:fd:a5:b3:a6:fc:74:44:e8:32:cb:aa:f5:
                    6c:4f:fb:a4:4d:0f:ea:6c:ca:12:96:ee:28:19:63:
                    a8:46:97:61:9f:2f:74:71:e4:c3:7f:e7:26:51:52:
                    bc:8c:d2:32:d7:ae:cb:07:2b:1a:60:21:42:5d:fe:
                    54:37:7e:d6:fe:2e:a0:1c:fc:66:bc:0a:9c:8f:1b:
                    e4:fc:d9:b7:0e:fb:2d:1f:91:31:ae:15:79:91:31:
                    5d:3f:ea:74:dc:6c:1d:a9:88:2e:ac:57:cd:07:c0:
                    d7:82:5a:9c:88:f3:ab:02:a1:7e:ed:32:d9:b9:17:
                    ff:f1:98:41:c0:0e:66:44:0f:27:e6:ad:b7:80:ee:
                    09:33:50:de:23:93:78:c9:56:dc:4f:5c:b1:98:0f:
                    8c:5f:06:58:ef:9a:b8:9e:68:85:af:62:cb:e7:05:
                    e9:e5:98:d8:e7:59:02:06:9c:a9:5c:1e:6a:65:16:
                    08:14:34:0d:b9:77:c1:3d:eb:7e:81:86:a7:7f:10:
                    9f:7f:23:82:a0:38:d8:17:30:4f:37:3f:f1:0d:db:
                    ce:40:18:63:98:66:3c:3d:f4:2b:ea:6f:55:d7:2a:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7B:85:37:C9:2A:D1:BD:CC:5B:50:FC:3E:24:E4:18:BE:6D:3A:13
            X509v3 Authority Key Identifier:
                keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:bc:24:37:e4:fa:d5:cf:d8:78:0e:66:85:db:dd:7f:20:93:
         41:69:cb:1e:85:15:ad:68:c3:8a:c8:45:85:e3:3b:34:94:6d:
         30:f0:7f:ae:5e:09:f0:6d:2d:a4:a3:74:18:53:db:44:98:7b:
         10:d8:ab:56:3b:9c:de:75:5c:1b:82:54:f5:e4:22:86:e1:d2:
         57:25:81:31:85:bc:c6:be:81:0c:7a:8c:49:66:e4:97:20:28:
         39:3a:8b:88:92:49:d2:7d:77:8d:f0:d9:40:61:91:90:0a:d9:
         0b:7f:1f:7a:97:1e:fa:65:68:26:7b:85:ec:ea:9c:b5:15:40:
         5a:c0:3e:e7:19:2d:49:7f:88:9e:55:27:1a:b1:80:3e:69:e3:
         10:b3:13:c4:3e:c5:0b:78:ec:86:94:c4:46:af:79:8a:75:26:
         57:4d:7b:29:07:a8:95:8f:e5:08:da:63:ad:2d:7a:e9:55:0a:
         92:12:1d:26:6a:3a:91:86:b9:d8:6d:e1:0d:b5:e5:a1:70:bd:
         3b:26:10:9c:ff:a3:ac:65:79:b3:35:1a:f0:ee:42:37:b8:12:
         62:64:c1:07:24:00:4c:2e:a5:f8:db:90:57:ab:17:48:94:de:
         a1:03:c2:de:38:72:56:ec:02:9f:9b:41:78:2b:73:86:13:b7:
         60:1c:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:21 2026 by rpki-client