Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/E8F2B1C224E911F0B5C26715C4F9AE02.roa
File:                     E8F2B1C224E911F0B5C26715C4F9AE02.roa (raw, json)
Hash identifier:          XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=
Subject key identifier:   CB:F3:98:42:A7:09:D9:E6:A8:7A:CE:A5:75:DA:CD:B4:54:2E:34:B3
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       027C
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/E8F2B1C224E911F0B5C26715C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:19:51 +0000
ROA not before:           Sat 13 Dec 2025 01:21:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137997
IP address blocks:        103.48.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
        Validity
            Not Before: Dec 13 01:21:23 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43cf6-f961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:73:39:56:15:b4:59:53:19:31:8e:4a:8e:
                    a7:3e:24:e8:2c:ee:6d:99:ac:02:10:be:f4:64:19:
                    e3:6d:d2:80:ab:af:36:be:82:aa:85:0c:bc:6a:54:
                    e5:2d:24:d2:ac:f5:ac:2c:7a:f6:ed:43:ba:88:8e:
                    cc:99:ba:7a:4e:35:64:d6:3f:5d:37:d5:7d:b8:38:
                    c7:e0:b1:35:a1:e6:5a:ab:83:9f:fd:13:f7:93:4e:
                    5b:04:77:db:54:0f:c8:17:7b:82:77:91:cc:52:21:
                    53:5b:8f:7b:89:0a:48:56:92:b8:ec:a8:d8:02:2c:
                    fb:a6:d1:56:08:6e:9d:7d:a0:74:d4:78:a7:b8:91:
                    f9:1e:14:d8:7c:ed:22:f8:3f:87:d8:19:b8:b2:8b:
                    bb:a9:bf:49:87:09:0a:5c:30:80:58:d2:11:3e:47:
                    80:c0:43:14:02:13:33:7c:b8:6a:17:23:09:62:27:
                    9c:b3:0f:76:59:7b:fd:23:04:ed:dd:16:12:1f:c0:
                    d6:78:b3:47:94:0f:7b:a2:1b:0b:fc:0b:a3:52:90:
                    b9:9e:b1:00:4c:8c:d9:24:85:cd:89:60:45:3d:6d:
                    0c:db:f2:29:bb:1e:a4:ad:c6:ed:2a:be:af:b0:cf:
                    d9:ae:84:02:4a:26:3b:62:d3:97:9c:92:51:85:b4:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F3:98:42:A7:09:D9:E6:A8:7A:CE:A5:75:DA:CD:B4:54:2E:34:B3
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/E8F2B1C224E911F0B5C26715C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:54:65:98:a6:6c:3f:2f:fa:30:d1:1a:3a:0d:5e:2e:2a:4a:
         0d:af:0e:18:73:e6:15:20:26:8e:7a:41:25:10:bc:1f:11:1c:
         31:73:6f:06:b5:a6:55:7c:e0:a6:1b:4f:d2:c7:1b:2b:45:08:
         6d:54:77:3e:38:e8:9a:54:20:22:c9:e6:aa:87:60:50:d2:18:
         25:f8:78:cf:39:0c:10:7d:2b:c6:0b:bc:40:d6:d1:cf:dd:af:
         85:31:9c:13:eb:6b:a8:e0:16:44:cb:ab:50:05:2d:92:67:e0:
         dd:d5:ca:a3:d6:ce:48:5e:e9:d1:97:4e:fa:b9:6d:51:bb:4a:
         90:59:6f:91:1e:dc:5f:b5:f5:86:ee:ba:3e:3a:8e:82:bc:5d:
         6f:23:c0:47:b4:59:dc:ce:34:e6:3d:c3:53:ca:bf:b7:58:81:
         51:de:32:44:29:66:7a:cc:1b:ac:7b:3d:c3:50:27:31:5d:2c:
         f9:74:a1:1e:ad:62:bd:15:d2:dd:6b:45:6f:b9:57:95:22:8c:
         ce:29:eb:42:3f:ca:ee:a7:1f:00:f0:ab:6a:6e:0f:f2:a6:df:
         12:f9:33:7c:ac:28:a0:a6:51:e9:2b:b8:9f:aa:8e:4f:ba:1f:
         98:ba:f7:4e:b7:07:0d:c4:8a:99:c2:61:10:79:68:65:2a:fd:
         6c:bc:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:10 2026 by rpki-client