Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/0EDE44B2797511EF9F3FEC4CC4F9AE02.roa
File:                     0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (raw, json)
Hash identifier:          X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=
Subject key identifier:   21:1C:62:2C:FA:49:F1:1E:C9:59:1A:86:D0:BB:09:CC:D3:76:18:B3
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       037D
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/0EDE44B2797511EF9F3FEC4CC4F9AE02.roa
Signing time:             Sun 03 May 2026 01:32:30 +0000
ROA not before:           Sun 03 May 2026 01:32:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214271
IP address blocks:        103.227.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893 (0x37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: May  3 01:32:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6a5ad-0530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:85:1d:6c:90:f4:8f:c6:7d:34:8f:33:68:
                    1c:4d:88:2c:85:30:71:3b:38:0c:ad:22:56:e9:f1:
                    a5:6e:75:ac:e1:61:ab:17:df:95:aa:d3:81:01:a4:
                    dd:0a:67:c8:60:fd:3c:b3:e4:16:59:4d:8e:77:84:
                    84:05:02:ee:2b:41:81:23:c5:a8:ba:99:2e:c8:93:
                    5d:94:7b:1e:d8:cf:4f:66:ec:cb:41:54:a2:28:59:
                    97:1d:7b:06:67:cb:d7:8a:9a:fd:ee:ac:f2:48:1b:
                    cd:b8:2b:71:9f:e3:ca:cd:3e:1b:25:89:42:83:ae:
                    3f:7a:5d:88:eb:d7:29:65:85:d2:e2:f1:c8:39:aa:
                    cd:28:74:0d:c7:d7:42:c8:aa:d7:ee:a8:fe:a9:f0:
                    f6:c7:a8:f3:4c:d5:c4:5d:e2:82:fa:60:fb:d9:a1:
                    a4:95:61:42:25:88:45:69:a8:10:84:c7:0b:ee:e2:
                    fa:60:90:c4:cf:fb:11:f0:cb:51:6e:1f:ae:91:cf:
                    5b:f2:2b:c4:cd:a7:04:1d:f4:3f:57:2f:d4:9f:62:
                    e1:aa:d5:d5:00:bc:d2:e6:9f:75:b4:11:aa:69:fa:
                    8d:e2:e3:bd:b5:cc:4b:e3:3b:9c:c1:2b:2b:9b:23:
                    57:ca:d1:24:3d:9e:61:5f:72:2a:36:2e:b9:f0:90:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1C:62:2C:FA:49:F1:1E:C9:59:1A:86:D0:BB:09:CC:D3:76:18:B3
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/0EDE44B2797511EF9F3FEC4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ef:5a:a9:a9:98:16:65:e2:87:e0:73:7d:d5:25:3f:01:fe:
         b7:15:ad:0f:85:7c:e2:6c:a9:5e:d6:6a:2f:7f:ed:ba:4e:c9:
         4f:5f:73:9a:78:d4:b4:f9:8d:a7:b4:5a:85:69:03:e3:48:5b:
         4c:97:ee:42:2a:54:58:f3:38:2c:24:42:aa:0d:c3:41:04:6b:
         ff:96:c6:1d:34:48:ed:7e:a8:6c:6f:3c:f6:d1:db:fa:8c:96:
         92:50:ff:4a:d5:5c:2a:b2:dd:85:65:1a:b8:53:d4:cb:73:cf:
         04:08:6f:dd:2b:cf:d5:1e:f2:01:8c:81:ea:00:d4:36:2a:32:
         30:da:c0:47:e3:ba:b4:cf:9e:25:52:63:0a:fc:ca:70:d9:2e:
         70:c1:fb:90:a7:e0:1b:11:c8:ad:64:e1:ee:f8:7a:16:9f:41:
         51:9f:ca:22:53:bf:ed:5b:2d:fd:cf:85:f7:4b:00:94:98:40:
         f2:06:04:cf:10:6b:a7:a4:5c:36:15:05:03:a5:2e:7f:6a:85:
         2e:5b:64:e3:f1:24:b1:ac:ef:be:48:2c:9b:e8:b4:f1:b1:b9:
         8c:83:ef:11:95:f9:43:ae:90:b8:3c:20:5f:d6:3d:9e:00:d9:
         00:14:4e:c6:36:c7:1f:f6:3b:55:c0:4a:93:4c:54:0d:26:0f:
         9a:54:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:53 2026 by rpki-client