Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa
File:                     28F87D180A1611F0BC8FD10DC4F9AE02.roa (raw, json)
Hash identifier:          Jgehc0dNGWJlml8ypNr1T5HmtWN0p5K48gpU2FwQ+nU=
Subject key identifier:   BC:32:58:EE:51:D3:32:AE:46:B8:0D:25:F2:21:41:FE:12:2F:7D:64
Certificate issuer:       /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial:       D2
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa
Signing time:             Fri 01 May 2026 07:39:35 +0000
ROA not before:           Fri 01 May 2026 07:39:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132703
IP address blocks:        103.18.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
                          rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
        Validity
            Not Before: May  1 07:39:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f458b7-c9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:02:c7:4b:8f:73:64:64:1d:dd:d5:97:26:4c:
                    46:ae:a3:ec:f8:a9:10:05:01:6b:e6:d0:f1:02:34:
                    dc:b0:0c:42:9e:56:3d:f0:05:16:55:f8:24:59:f6:
                    0b:87:99:72:25:58:2c:b2:2e:dd:24:9d:36:7d:7a:
                    38:1f:a9:5e:c4:9c:cf:e1:29:d2:65:ba:d2:91:14:
                    ca:31:ff:18:b4:bc:e9:4b:ac:57:31:f5:f3:4c:13:
                    61:f0:0b:12:d5:61:bf:1f:f4:c6:b5:38:24:7c:4f:
                    dd:4e:ce:b0:47:45:47:f9:c8:07:34:dc:db:ca:b7:
                    26:74:6e:59:4c:8b:92:c8:5a:c3:0e:da:89:3d:b6:
                    ea:ac:36:7b:b6:ac:18:49:d7:73:5e:55:34:c3:c6:
                    30:64:eb:c3:f1:f1:f3:c4:60:45:46:19:05:31:5d:
                    98:5a:c8:67:2e:3e:16:89:15:90:fb:f1:a8:2f:3f:
                    52:88:ad:66:92:42:6d:95:ac:95:a3:ed:50:d8:3d:
                    b6:8f:67:5e:45:31:32:ea:a7:27:d0:95:cf:5c:7a:
                    66:b5:bf:bf:44:66:70:23:6a:3c:eb:97:9f:c5:5f:
                    c5:56:47:07:46:74:04:23:fa:65:da:49:3e:62:4d:
                    e1:50:7f:2b:a1:06:a1:7f:45:d7:4a:c9:1b:c4:57:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:32:58:EE:51:D3:32:AE:46:B8:0D:25:F2:21:41:FE:12:2F:7D:64
            X509v3 Authority Key Identifier:
                keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:cc:ec:49:fb:d0:f5:62:14:77:84:36:63:09:12:d6:2b:
         70:70:3a:f8:94:59:28:4d:fa:7b:18:96:a5:3e:86:00:47:de:
         e7:f6:7c:5c:87:0c:88:f1:bb:39:ec:f7:13:c5:6d:e1:bc:da:
         19:41:98:1c:1e:9d:e3:a8:09:ba:52:04:cc:19:4b:c1:1b:4c:
         be:68:06:02:b6:69:49:36:9e:04:e2:05:17:35:71:ec:f6:54:
         6e:fd:88:8e:f3:48:7a:25:58:b0:55:88:03:07:be:32:62:15:
         dc:f7:d6:39:f6:99:f7:cc:0b:30:d5:3a:e7:4d:0c:cc:64:37:
         1f:38:35:5d:60:e2:14:f9:76:b5:3c:61:f6:5a:36:d8:73:20:
         10:f2:bf:22:f4:78:f3:54:6a:fa:b2:df:9c:70:1c:04:a7:5d:
         55:9e:71:29:a3:8a:a0:5f:3d:ac:ea:8e:5f:8a:9f:e3:be:ad:
         d6:2e:41:8b:b0:5c:9f:28:02:5c:1b:7b:37:99:6e:54:95:25:
         fe:10:7e:50:22:df:12:8c:a0:5a:6e:47:5d:fb:f8:60:07:e2:
         4b:5f:bc:e3:54:23:b3:51:95:47:3e:aa:ee:01:6e:cb:71:a8:
         87:7c:b5:27:30:17:f1:0c:3d:4f:be:4d:9d:ec:6a:36:3d:f1:
         c1:1d:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:29 2026 by rpki-client