Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa
File:                     10581DEAC75D11EBB00EBD1AC4F9AE02.roa (raw, json)
Hash identifier:          5sKr5Je6hbpFf2Q5JDk7nrFaAZ90rKYQRnu0lj3etl0=
Subject key identifier:   B3:E4:24:3C:C4:71:C1:9F:13:F9:0D:0E:DE:06:2D:29:33:DE:4D:AD
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       0654
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa
Signing time:             Fri 20 Mar 2026 22:30:02 +0000
ROA not before:           Fri 20 Mar 2026 22:30:02 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134555
IP address blocks:        203.2.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: Mar 20 22:30:02 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69bdca6a-4b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:14:93:7d:04:28:ef:02:81:03:60:ca:8a:76:
                    25:43:bd:06:61:e9:68:dd:bd:3d:c0:b0:cd:d7:4d:
                    d1:ac:72:cc:b3:11:47:8f:98:7b:1e:a5:f9:a7:37:
                    e1:00:e5:74:99:35:d1:54:56:70:c6:e9:a5:18:15:
                    e1:19:31:4c:fa:ee:6b:f7:bb:a2:10:e9:6d:42:60:
                    8a:3f:72:50:17:bc:53:47:5d:13:79:4c:af:e5:97:
                    9a:5a:79:55:55:1e:5c:4d:9c:e1:69:fc:b3:1c:f6:
                    48:6b:28:3e:ab:c7:ed:fe:cf:5f:2e:14:9f:7b:55:
                    d7:a8:71:a3:ab:2a:e0:52:58:25:0b:b4:03:cd:55:
                    6a:d6:98:66:ae:f2:6d:10:cc:6f:8b:63:0d:c4:d4:
                    7d:34:fa:93:48:1f:8a:9a:3d:ac:fc:65:38:ab:b8:
                    c7:67:f0:25:6d:68:66:1a:19:78:ea:73:72:64:16:
                    fd:a5:33:51:31:82:0d:f1:bd:12:d7:b1:f3:20:48:
                    5a:8f:02:ee:71:14:bb:86:27:ee:6b:2c:68:78:60:
                    15:da:33:97:cc:cc:bc:a3:87:9a:36:8a:5a:c7:a0:
                    6c:f4:1a:9e:09:56:39:1f:a9:4d:6c:f9:61:a3:f3:
                    a8:dd:99:69:21:76:e8:65:dd:9b:ae:2d:db:4c:74:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E4:24:3C:C4:71:C1:9F:13:F9:0D:0E:DE:06:2D:29:33:DE:4D:AD
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.2.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:00:cb:fe:42:8d:00:f3:25:26:ae:4d:d9:d0:75:9c:c5:
         c1:b8:f6:1d:50:eb:1a:d2:c7:ea:f9:09:c8:fe:aa:4b:6a:9a:
         47:fb:25:21:79:e4:cc:ff:1a:c9:15:6a:dd:4c:33:9b:57:4d:
         fa:9a:c0:b2:42:d9:a9:36:8a:e7:46:f8:ff:af:83:5b:39:16:
         6d:aa:19:86:6b:51:0a:29:57:24:81:16:bd:e0:59:3b:85:bf:
         60:52:61:b9:6b:57:b6:4c:14:fd:99:f2:a3:92:bb:26:aa:1d:
         3f:b4:9a:71:18:da:b8:0b:8a:12:71:2f:89:6e:af:f0:a3:2d:
         b1:69:56:73:26:e5:b5:f2:41:9d:50:54:b5:2e:93:e3:e3:3e:
         06:97:fa:06:09:85:df:15:20:ce:6d:28:b7:08:55:27:87:54:
         15:55:0c:75:0b:f9:2d:aa:21:16:d0:2a:14:eb:89:dc:1d:ed:
         fa:b0:e9:5a:49:cf:51:8b:d3:be:d6:02:08:50:24:d2:12:be:
         16:46:de:68:b1:30:68:4c:de:de:a4:0b:2c:41:96:66:eb:ad:
         60:e9:6d:9f:21:43:ca:22:39:a6:9c:08:2c:44:90:12:ad:b4:
         b4:b8:e6:27:e0:b4:98:16:fd:49:7e:fb:31:ec:5d:33:22:20:
         31:28:88:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:59 2026 by rpki-client