Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa
File:                     3DC507001C8F11E9990F665CC4F9AE02.roa (raw, json)
Hash identifier:          KNHL/L5tyBmlAfdw55D3rrTekY6agqcXrKB3/U0Q+x8=
Subject key identifier:   6F:22:02:CF:B2:7C:D8:7D:3C:16:E4:8F:0D:B6:1D:D2:71:3E:82:63
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       1925
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 17:19:08 +0000
ROA not before:           Mon 02 Mar 2026 17:19:08 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     395734
IP address blocks:        103.83.88.0/24 maxlen: 24
                          103.83.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6437 (0x1925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Mar  2 17:19:08 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a5c68c-17fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:65:d6:a3:ed:95:e3:bf:a6:d9:d9:f0:10:
                    2f:7f:57:9b:5c:9a:71:9c:92:ca:03:00:ac:95:c4:
                    47:44:da:65:41:3d:22:25:27:d4:58:66:d7:0b:8b:
                    f3:2f:a7:50:0d:dd:12:c4:08:cb:08:6a:45:0f:68:
                    f7:f2:52:29:f5:de:28:ed:43:b2:e7:76:7a:ed:ac:
                    ff:aa:8a:56:4a:47:73:2f:b1:a1:b2:9c:26:55:0d:
                    a4:1e:f0:21:61:04:10:a5:84:10:38:4d:e7:0c:38:
                    a3:3b:87:49:e7:90:52:16:8e:42:49:10:4a:62:61:
                    63:99:ba:8a:4b:ad:a6:e5:7d:ea:a9:ba:95:b5:11:
                    b6:b6:6e:6a:cd:9d:87:72:21:da:55:25:02:7e:b5:
                    e3:83:f2:f6:67:91:a5:73:dc:79:ef:6e:ba:8d:dd:
                    c4:8e:4c:6d:f0:a1:83:55:3d:47:d8:93:76:40:5c:
                    8e:ff:5e:f8:ee:1c:ad:c0:fb:85:51:dd:97:30:23:
                    59:25:cb:61:23:c9:93:c9:76:aa:70:a9:1f:58:01:
                    8f:52:2a:e0:e0:10:e6:a1:a1:4e:76:a8:2a:be:d7:
                    8a:54:45:42:7e:01:28:91:c8:34:20:dc:9c:7b:18:
                    d1:4e:8f:02:7f:86:9a:2c:b1:16:ea:67:23:26:da:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:22:02:CF:B2:7C:D8:7D:3C:16:E4:8F:0D:B6:1D:D2:71:3E:82:63
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.88.0/24
                  103.83.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:21:9b:d4:36:d5:cb:c4:ae:a3:8a:c3:3f:22:97:60:f3:1b:
         c2:cd:dd:d2:d8:61:b7:00:4a:65:3f:0f:43:2f:f1:99:ed:5e:
         54:cd:4a:9e:c8:97:44:0d:18:c5:9a:6d:da:ff:91:b1:1b:88:
         b3:65:70:56:b1:b8:7e:ec:27:5d:aa:30:5f:eb:74:3d:22:bb:
         bd:f3:ac:f8:61:cd:b7:32:e8:0c:5f:50:4a:18:d8:28:66:a3:
         c0:86:1d:34:da:cf:c0:6f:18:4d:c4:5d:e3:35:3c:32:c0:b3:
         51:02:88:f9:76:aa:b8:d1:9d:ce:ba:90:ca:e8:c6:4e:5c:23:
         8f:0f:d8:e8:eb:d8:d1:3d:b9:6a:c0:a8:a1:d2:7f:82:fa:de:
         0f:48:7b:bf:e6:5a:5e:87:53:2d:41:61:69:45:d8:c1:5b:54:
         2a:e7:36:61:5c:00:a9:11:e8:40:51:8e:af:e7:bd:86:5d:a1:
         dd:a0:b6:2d:19:68:67:ab:13:b2:93:46:96:95:e0:6b:84:e3:
         ea:be:5c:64:c5:e1:40:83:e6:27:bc:61:52:66:db:ae:95:84:
         a1:86:44:b0:aa:d5:a2:e8:53:df:14:e3:5f:1d:ca:25:02:0f:
         80:2a:ed:e7:01:d4:0c:69:94:b1:76:2a:e5:3c:db:fd:66:49:
         34:bc:f9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:48 2026 by rpki-client