Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/71E2EBF2C47511F0B7E9E966C4F9AE02.roa
File:                     71E2EBF2C47511F0B7E9E966C4F9AE02.roa (raw, json)
Hash identifier:          UMGGF5oVD1bQSh7eEZjr39tgEnWLgHhi9vX/VKsH4M4=
Subject key identifier:   5D:58:19:6C:92:2D:A9:3F:06:AB:A3:31:34:0E:9D:39:32:91:20:38
Certificate issuer:       /CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
Certificate serial:       133B
Authority key identifier: 10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/71E2EBF2C47511F0B7E9E966C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:14:47 +0000
ROA not before:           Tue 18 Nov 2025 11:55:15 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134685
IP address blocks:        103.18.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl
                          rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4923 (0x133b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C6FA, serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
        Validity
            Not Before: Nov 18 11:55:15 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a51cc7-cb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:00:db:06:88:03:3a:d7:d9:23:32:7c:9f:
                    bb:fc:77:ca:38:36:50:43:34:24:82:bc:4b:69:a5:
                    32:e7:5c:62:ae:95:c3:7a:35:c5:02:0d:13:93:38:
                    42:e3:c0:9d:13:68:3b:e8:0d:94:55:91:d2:1a:d2:
                    3d:74:1a:91:68:7c:d7:87:f4:e7:53:d8:ea:a5:49:
                    a6:e4:29:77:18:81:fb:3f:7d:63:bf:43:e4:55:80:
                    9f:e7:99:78:f1:62:96:b2:59:c6:99:1b:ce:91:c8:
                    c3:2c:de:e0:e8:ba:bf:26:b5:a5:99:ef:80:39:97:
                    7d:87:4b:e5:d3:78:5e:39:79:27:cc:fb:d6:dc:07:
                    b6:5a:9a:f2:c8:9f:24:70:6e:6a:7f:8a:02:d3:0c:
                    e0:72:9d:f5:44:f7:e1:b4:02:77:69:3f:2e:c1:4c:
                    08:f6:95:ec:16:0e:6c:ef:37:7b:d3:16:71:a6:a3:
                    1c:e8:33:33:1a:75:39:c1:bb:2f:0e:f3:7f:4d:5b:
                    1d:11:81:3b:52:60:79:d2:20:61:e6:b3:84:ee:8e:
                    36:7f:8c:bc:c7:b6:65:d6:8c:b8:0e:4c:c7:21:8d:
                    21:24:c4:a4:16:45:ce:38:7e:42:d8:fd:7c:1e:42:
                    1c:55:c8:85:24:d8:bc:24:9d:8f:4e:a5:ce:a1:2e:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:58:19:6C:92:2D:A9:3F:06:AB:A3:31:34:0E:9D:39:32:91:20:38
            X509v3 Authority Key Identifier:
                keyid:10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/71E2EBF2C47511F0B7E9E966C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:2b:15:fc:e9:19:96:8f:54:db:d4:60:e4:4e:15:90:6c:
         95:4f:7b:44:49:e4:fb:5b:7d:f6:7e:00:c8:46:f2:03:7b:5c:
         b7:4b:7b:36:59:05:de:f1:87:26:0d:0c:95:07:ef:4d:69:ec:
         ef:4d:65:af:40:b5:12:a6:99:09:76:5e:a0:20:d2:4b:7e:c0:
         39:87:da:73:13:19:2c:1d:6a:ac:b0:5c:7b:93:5f:c2:f4:56:
         70:49:d1:0f:11:0f:4f:ec:8c:a7:9f:76:ed:ce:4d:14:64:95:
         44:a0:83:94:82:7b:56:6e:e9:a3:1e:92:1c:09:c4:58:a1:ba:
         78:c1:84:10:b4:ba:ef:cc:a7:d6:4b:10:4a:d9:90:c2:4c:67:
         52:f2:a9:8b:f0:19:41:be:a5:2e:b5:0f:42:cd:0d:72:b1:f8:
         91:77:20:63:d4:54:ab:0c:2f:44:f0:b2:84:d3:92:6f:1a:bc:
         6f:3d:be:28:00:02:0f:66:36:18:72:e6:b9:ad:71:de:69:cf:
         33:4b:d3:2a:08:60:e4:0c:10:c9:5b:c3:a1:93:f6:b1:e8:aa:
         1b:af:9e:58:18:af:07:37:43:08:5b:8b:5f:8b:a1:b6:63:39:
         e6:9b:ec:53:e9:49:c3:3f:f1:98:47:92:d4:64:2d:3f:aa:93:
         f8:54:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:33 2026 by rpki-client