Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/0294C902459511EE982FBC6DC4F9AE02.roa
File:                     0294C902459511EE982FBC6DC4F9AE02.roa (raw, json)
Hash identifier:          dCOu9SWE3pUxFDJykl6C0mTQJtKqMJIuuUM8T2xcP1w=
Subject key identifier:   F6:D3:6F:1E:EE:1B:30:56:DB:8D:D3:FB:C1:FE:1C:D1:9A:DC:33:BB
Certificate issuer:       /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
Certificate serial:       01DE
Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/0294C902459511EE982FBC6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:18:40 +0000
ROA not before:           Thu 23 Oct 2025 05:18:27 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151781
IP address blocks:        103.26.28.0/24 maxlen: 24
                          2001:df2:db40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl
                          rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
        Validity
            Not Before: Oct 23 05:18:27 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a41280-ded6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:2e:36:44:2e:fe:aa:0b:9e:a7:71:4e:67:
                    6a:7b:8d:7a:f2:77:d6:10:c0:87:45:a4:24:71:e4:
                    cf:46:c5:97:05:be:bb:e7:81:2c:4e:d9:fc:30:8c:
                    bd:c3:ec:78:b0:72:e0:3d:9e:16:50:71:cf:13:b8:
                    8b:47:20:f7:34:96:0f:6a:29:2d:3b:69:c7:41:ef:
                    12:1a:cb:4d:ee:64:f0:c9:e2:d8:fb:93:3f:4f:ee:
                    b4:5e:08:ae:0d:e2:5e:4e:83:40:b2:33:a4:c3:8b:
                    67:ae:7c:d1:ec:02:08:96:83:56:74:37:0e:5f:8f:
                    d7:cd:90:7a:fa:4c:00:a8:77:61:97:d4:15:f6:42:
                    23:9b:35:91:2e:43:1b:9e:9c:21:90:54:70:0e:b3:
                    e4:f6:f5:d4:a5:77:b9:00:a1:45:13:2e:63:6a:0d:
                    6d:1f:88:67:55:ef:f5:36:83:b0:c9:b0:0c:c9:71:
                    fa:64:24:23:2d:6c:e8:ef:bc:99:9c:b0:b1:9f:0b:
                    fa:ca:1c:4d:d6:df:24:f2:ea:4a:50:d8:91:69:15:
                    38:33:aa:0a:f0:0d:56:96:33:31:d5:eb:9a:69:21:
                    85:5d:2f:82:dd:e5:7b:45:93:99:4b:7a:79:34:2f:
                    db:16:79:a4:c8:3f:8e:0c:db:46:25:46:a0:c0:d0:
                    b2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D3:6F:1E:EE:1B:30:56:DB:8D:D3:FB:C1:FE:1C:D1:9A:DC:33:BB
            X509v3 Authority Key Identifier:
                keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/0294C902459511EE982FBC6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.28.0/24
                IPv6:
                  2001:df2:db40::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:f6:48:b0:f0:03:33:63:5e:3f:98:a8:50:25:ab:af:3d:
         08:7b:0e:47:ee:79:70:40:ba:73:05:12:48:09:20:e8:57:76:
         e9:4d:28:1a:71:52:e0:41:d1:0c:31:12:6e:8f:87:25:97:5d:
         35:b4:79:f6:33:b3:dd:1d:c5:b6:06:e4:ab:37:52:99:04:2e:
         e5:54:e1:00:4c:be:2e:5c:4c:f6:d1:df:cc:b0:2c:91:c3:4f:
         85:fb:e8:7c:e0:72:ef:19:3e:9e:29:84:6b:9c:5c:62:08:cd:
         6a:2b:77:33:6f:aa:14:f9:11:9d:8f:50:1f:0f:22:ff:28:6a:
         09:19:00:28:6e:2e:e8:ac:e7:b1:3f:40:14:fa:6e:93:f5:b8:
         df:eb:a2:b1:21:c7:84:03:48:e2:6c:a0:0e:3d:37:55:5c:c1:
         be:e9:77:8d:6b:8c:79:88:6c:5d:b6:8b:72:da:cc:dc:cc:2b:
         c4:a2:89:37:80:7a:dc:04:e3:a1:cf:fb:60:e8:af:bc:e1:cd:
         6b:47:58:90:98:75:9f:db:63:5f:19:03:77:ed:3f:03:ec:cf:
         b9:11:42:a4:24:d8:c7:ca:0e:2b:49:63:d1:e7:ef:e3:06:0f:
         ab:39:3e:b7:f6:18:e0:76:5e:c6:9a:af:e0:07:91:e3:be:98:
         49:df:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:07 2026 by rpki-client