Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7CA73BD4F7E111F09133AC30656F56BC.roa
File:                     7CA73BD4F7E111F09133AC30656F56BC.roa (raw, json)
Hash identifier:          lrf8090retSGwJwGuDcCx3aFLrFcPfdjin1o0PlkDcA=
Subject key identifier:   24:A2:DB:57:12:6F:73:8E:FC:79:53:C0:A5:F5:A7:B4:94:CE:4C:5F
Certificate issuer:       /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial:       043A
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7CA73BD4F7E111F09133AC30656F56BC.roa
Signing time:             Sun 01 Mar 2026 17:43:07 +0000
ROA not before:           Mon 23 Feb 2026 00:20:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137897
IP address blocks:        103.182.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
                          rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
        Validity
            Not Before: Feb 23 00:20:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a47aab-ec2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:dd:81:4c:a0:1e:37:8e:cb:64:6a:d1:4b:
                    d5:51:04:70:f2:97:89:7d:f8:a6:98:a1:7c:e8:54:
                    2f:a7:6e:df:aa:ac:bc:6e:6c:ca:f9:6f:c9:23:a2:
                    cc:15:b9:c3:14:bc:3d:c8:9f:cc:c3:bb:3d:67:9e:
                    21:ae:7f:ad:e5:0a:65:fe:ef:7a:19:5b:c6:2f:3f:
                    42:20:ad:e6:94:0e:a7:64:2e:e6:df:4c:eb:13:62:
                    bf:d4:f2:aa:b6:d9:79:a2:f5:77:17:b4:00:0f:87:
                    64:bb:48:44:f2:97:af:8a:48:6f:fb:53:22:40:2d:
                    e4:10:30:38:20:38:a7:7c:02:3f:d8:c0:c1:73:10:
                    78:fc:0c:a4:46:10:c2:64:f3:bc:2c:31:5f:ac:dd:
                    83:77:f2:16:bd:0c:fb:ed:d6:48:13:ac:28:23:4c:
                    41:93:1d:de:05:dd:02:3b:e9:21:82:3f:d5:d0:4e:
                    f7:e2:be:46:e4:e5:1d:a9:70:8c:e5:7a:93:f5:13:
                    1c:06:83:c1:3a:16:13:10:bd:11:6d:53:68:2d:51:
                    d3:93:e7:a6:50:f3:79:88:d5:c8:53:9d:09:7d:61:
                    77:49:69:90:02:e3:91:38:f2:a0:c8:7d:8a:45:0c:
                    bb:3a:8b:32:1a:26:51:b4:d6:25:3e:38:47:9b:a9:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A2:DB:57:12:6F:73:8E:FC:79:53:C0:A5:F5:A7:B4:94:CE:4C:5F
            X509v3 Authority Key Identifier:
                keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7CA73BD4F7E111F09133AC30656F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:70:99:06:6c:6f:11:bd:af:80:4e:bc:97:dd:b4:98:00:
         77:e5:13:04:e1:36:e0:d3:56:5b:77:d9:7f:cb:35:f1:9c:5c:
         9d:f1:af:4c:d8:73:c1:1b:74:37:43:2d:25:0c:ef:bb:35:09:
         86:fa:0f:55:4e:5d:6e:a5:fc:c5:dc:8d:44:ee:39:bd:78:7c:
         ff:8b:52:9e:a1:89:ce:9b:ca:d9:db:ea:33:e6:6c:60:cc:eb:
         c6:87:41:bd:09:66:3c:dd:b0:64:45:d0:e2:bf:3c:27:6b:9f:
         79:e4:e6:01:9e:08:9b:7b:75:50:30:1e:49:f1:a3:4a:4d:d2:
         88:46:dc:d5:c3:cb:59:e3:53:8b:2a:21:65:41:97:5b:08:d8:
         77:e4:23:c6:00:3c:7f:3b:c0:c0:2d:4f:22:46:30:79:12:cc:
         1f:cd:6d:87:cd:24:82:2e:28:87:0b:02:f5:ee:08:fe:2a:60:
         90:6c:fd:a3:76:38:6c:d3:6b:8d:e6:71:47:86:29:5b:ef:12:
         6c:e3:08:c9:26:09:f4:07:34:4e:03:b9:34:71:da:5d:ff:c3:
         a3:a9:b0:17:1d:52:96:43:3e:35:22:75:84:fc:c8:53:8e:2a:
         13:28:df:dc:05:f9:05:d3:33:54:e5:e7:06:f9:00:29:0a:5b:
         f8:55:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:00 2026 by rpki-client