Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/F33FD8F8EA5611EF8C0DD984C4F9AE02.roa
File:                     F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (raw, json)
Hash identifier:          6wieboldL+svyfaS92rGNVhaWY2jMOAdUQcLZF1T9Xg=
Subject key identifier:   8F:58:B2:5C:EE:75:62:C4:18:2B:6B:65:26:EB:CC:AD:2A:F3:3F:56
Certificate issuer:       /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41
Certificate serial:       0122
Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/F33FD8F8EA5611EF8C0DD984C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:47:35 +0000
ROA not before:           Tue 03 Mar 2026 05:47:35 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132906
IP address blocks:        103.148.240.0/24 maxlen: 24
                          103.164.7.0/24 maxlen: 24
                          2001:df2:fe80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl
                          rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41
        Validity
            Not Before: Mar  3 05:47:35 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a675f7-8253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:80:1c:cc:ef:be:3d:38:c8:22:5f:b0:4c:
                    a3:05:fa:79:91:c6:aa:ce:08:2f:be:b9:b8:1e:36:
                    78:81:19:9b:c3:f9:0e:b8:26:c3:cd:a6:ce:0c:16:
                    ce:cd:33:47:7d:b9:aa:f2:6a:70:e6:5e:1e:c3:90:
                    20:fb:72:be:7b:f9:d0:2e:5b:5e:53:57:4b:6a:28:
                    c8:e8:84:41:ac:a1:0f:81:03:00:34:f8:7f:76:4c:
                    30:7c:e3:f5:cc:90:3b:db:a9:6f:50:76:2b:f2:12:
                    64:b5:2e:5f:be:e0:e5:df:51:a6:e1:fc:fc:d8:25:
                    37:eb:b2:9a:b5:d5:07:1d:00:4c:1b:67:27:a9:ef:
                    ea:61:91:7a:b8:b8:0f:12:c0:d5:15:0c:c1:3a:52:
                    c3:5e:a3:63:3a:f5:3e:5f:0e:06:02:e7:c4:c7:4c:
                    4c:aa:ca:99:4e:69:a9:58:5b:9a:64:1c:51:28:16:
                    6b:34:6a:41:29:25:05:fa:ab:2b:f3:a0:4e:5d:91:
                    39:80:e8:e8:ce:cc:83:0f:8a:7a:39:00:cd:d9:ec:
                    b3:50:29:57:fb:f0:d2:dc:cf:ab:04:91:2c:b0:0f:
                    f8:a8:fc:c6:9a:06:8b:67:e4:77:5f:db:8f:4f:34:
                    84:d4:17:c8:5f:cf:62:ca:92:57:68:23:41:92:9e:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:58:B2:5C:EE:75:62:C4:18:2B:6B:65:26:EB:CC:AD:2A:F3:3F:56
            X509v3 Authority Key Identifier:
                keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/F33FD8F8EA5611EF8C0DD984C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.240.0/24
                  103.164.7.0/24
                IPv6:
                  2001:df2:fe80::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:19:b4:4c:80:32:1c:79:83:e8:a9:27:9f:e0:aa:46:f3:68:
         ae:32:78:4a:bc:6f:aa:1e:cf:17:e0:0d:43:5e:85:f9:36:bf:
         6f:a7:1b:bf:4d:b2:ce:8e:a6:23:79:78:2d:e5:4a:f8:c6:0b:
         25:f2:17:93:46:60:eb:e9:65:02:17:07:36:7b:fa:27:a5:95:
         7f:57:38:9e:8c:92:b6:74:3f:d7:c1:b8:6c:ee:2c:da:53:05:
         46:f4:d6:84:99:1c:bb:e4:2e:b7:7b:c4:e3:c2:79:e7:36:94:
         9a:57:77:c4:85:99:d8:a0:b7:53:48:ec:2a:7c:2f:c1:5c:ff:
         b6:7e:b3:b1:0f:af:3d:d6:bc:fe:e6:34:06:0a:97:88:6f:c6:
         a2:d5:47:e5:99:63:c2:04:ac:16:57:e2:1c:bf:f2:d7:1f:66:
         af:77:7a:af:9b:7d:6d:f3:f0:1c:d7:c2:7e:8f:1e:c3:15:e3:
         65:56:71:ec:68:3a:f0:05:ca:7a:8b:d6:d5:04:cb:0e:de:35:
         48:7f:70:6e:48:b5:a6:36:be:7c:bc:be:18:58:5f:a3:69:13:
         f1:5a:84:8f:c5:5c:02:b1:a7:ba:3e:d4:b1:0a:13:99:ae:a4:
         e4:1a:b5:b0:2f:2e:1c:ee:ca:7e:f4:a9:1e:c4:ec:07:5e:0d:
         08:e7:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:49 2026 by rpki-client