Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa
File:                     F70F5E7A505E11ED9947920DC4F9AE02.roa (raw, json)
Hash identifier:          o3juqhlkzvoSTkKnkj2B9rqpg4vlEounEHggkPD3cB4=
Subject key identifier:   55:AC:F5:E7:FD:03:15:E6:07:FA:6E:35:50:3F:9F:23:DA:06:12:5F
Certificate issuer:       /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial:       09DE
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa
Signing time:             Wed 22 Apr 2026 17:22:58 +0000
ROA not before:           Wed 22 Apr 2026 17:22:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132298
IP address blocks:        103.135.252.0/24 maxlen: 24
                          103.135.253.0/24 maxlen: 24
                          103.135.254.0/24 maxlen: 24
                          103.135.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2526 (0x9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
        Validity
            Not Before: Apr 22 17:22:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e903f2-bf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:58:aa:d4:56:cd:21:1d:81:6a:e6:d5:1e:
                    7f:c2:82:8d:8e:f6:3f:20:e8:e9:58:13:64:44:68:
                    3f:e1:fc:b9:80:8a:4a:4b:19:d9:24:f6:5c:f5:9c:
                    29:ec:48:d3:88:53:12:04:87:97:60:e8:00:9f:49:
                    2c:c1:76:b0:fa:ed:1a:dc:c8:21:32:ee:0b:65:1e:
                    e9:e6:31:03:6d:26:66:6f:74:28:45:e7:a4:bb:75:
                    7b:42:31:31:25:a5:f6:62:12:e7:dc:8b:53:22:5b:
                    2c:d6:b7:6b:e3:4c:b0:ef:b0:ee:95:f0:a6:cd:a8:
                    32:72:b3:e5:41:b4:d6:c0:e8:18:78:27:56:db:93:
                    ff:44:2d:61:32:77:f3:2b:f6:a6:da:42:26:7f:77:
                    04:ce:ab:40:01:18:c8:9a:16:e5:ea:93:14:a2:7b:
                    31:aa:1d:ee:9f:c8:fc:f9:d1:75:fb:5c:8a:1a:93:
                    a0:e2:0d:b5:ec:e9:da:34:ae:23:63:dc:56:2c:7f:
                    fc:24:9c:63:d3:f9:0e:ef:7e:22:55:39:9c:5c:ac:
                    49:ce:7f:12:ce:10:ec:b4:14:56:6b:a4:6d:f8:ca:
                    73:d4:b8:63:4f:41:77:11:e5:fa:7d:1e:cf:3a:05:
                    15:73:20:50:c2:11:46:11:c6:03:40:1a:3d:b1:49:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AC:F5:E7:FD:03:15:E6:07:FA:6E:35:50:3F:9F:23:DA:06:12:5F
            X509v3 Authority Key Identifier:
                keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:1f:c3:ed:1a:ca:21:69:4a:b5:43:61:21:81:bf:09:dd:
         20:c3:03:e6:f3:0d:8d:4e:9b:ac:53:0c:bf:ad:87:9e:ac:6d:
         1f:43:8e:d4:e4:48:4e:86:2e:24:9d:a2:62:df:48:93:4b:62:
         27:09:25:ce:0c:26:33:bc:b4:91:fa:db:91:f4:e9:54:52:69:
         f8:77:ed:73:ac:ac:fb:55:99:55:5c:7f:10:f9:19:9b:ec:96:
         c2:64:bd:4e:fb:b6:cc:2a:86:5d:aa:1f:ea:fb:a6:44:e2:6e:
         01:87:55:8c:cb:d1:ce:f6:d3:a1:f1:00:07:0e:f8:9c:f1:2f:
         61:d6:48:0d:0e:b4:c4:ff:fc:39:09:29:f1:83:fa:e9:a1:f9:
         4c:32:46:5a:db:df:2e:89:2c:fc:5a:00:b5:fe:61:3b:65:61:
         a9:ed:df:88:14:29:4e:5c:4d:50:fd:a8:a4:ed:e5:7c:38:1a:
         da:a2:80:7d:c4:6e:d8:b3:f1:28:d0:be:39:f6:51:61:98:44:
         11:c4:0e:ff:84:53:4f:8f:05:2c:d6:c1:e5:8c:69:7d:fa:13:
         ce:90:90:41:e0:26:6a:56:77:64:b6:dd:c8:49:6b:f2:08:4f:
         b4:fd:58:d2:06:ee:53:5b:f9:e0:7b:9e:79:e4:94:b5:da:b8:
         72:68:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:21 2026 by rpki-client