Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
File:                     74D48D868CED11EF820CF762C4F9AE02.roa (raw, json)
Hash identifier:          Lei85g1gzQpDPpvgkfskCv8Gyrvp0ElU5LNUTKu3ta4=
Subject key identifier:   15:C0:F8:CC:B3:6D:25:FF:6E:5F:E2:7E:68:E2:62:E7:7A:19:44:2B
Certificate issuer:       /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial:       0134
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:12:07 +0000
ROA not before:           Mon 03 Nov 2025 05:51:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24046
IP address blocks:        203.10.24.0/24 maxlen: 24
                          203.10.25.0/24 maxlen: 24
                          203.10.26.0/24 maxlen: 24
                          203.10.27.0/24 maxlen: 24
                          203.10.28.0/24 maxlen: 24
                          203.10.29.0/24 maxlen: 24
                          203.10.30.0/24 maxlen: 24
                          203.10.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
                          rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
        Validity
            Not Before: Nov  3 05:51:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59ab6-0405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:28:95:45:68:6a:3a:f2:9e:87:ac:4a:12:
                    92:54:4b:b2:f4:eb:e6:57:e4:1e:88:d7:1b:8d:e6:
                    7d:8e:d6:62:2a:04:b4:76:db:db:ba:85:b3:c2:46:
                    37:3c:70:f1:d2:a0:3c:86:e5:53:2b:47:16:b7:b2:
                    80:1b:92:8d:d1:cc:32:34:17:2e:e4:ad:b9:0f:07:
                    2f:91:a2:34:eb:fa:20:00:56:05:40:8a:c9:c9:ef:
                    8e:b9:34:b7:8d:a7:bc:bb:28:62:b6:f1:b7:b5:57:
                    dc:66:77:26:53:b3:48:71:cc:6f:ef:1a:53:18:f3:
                    e7:6e:80:33:69:06:09:1f:d7:51:a5:03:9f:8f:e3:
                    dc:1b:47:1f:9e:e6:5f:3b:4c:d6:cc:cb:36:40:c4:
                    0d:8b:69:b4:81:32:5f:2a:9f:13:d0:a5:25:96:62:
                    e1:0c:1d:70:1e:00:d3:66:78:73:05:00:df:c4:66:
                    46:e4:9a:f4:77:88:c5:8e:a8:7e:bb:0f:c9:0f:c4:
                    20:e1:f8:30:da:58:3e:5a:24:66:d1:61:e5:d1:df:
                    71:80:6e:20:2d:c2:a8:01:11:af:8b:cc:a1:98:16:
                    bf:5f:5e:75:62:61:ac:87:39:41:c9:0c:02:37:65:
                    53:16:7f:50:e7:88:48:ac:e6:a0:54:14:e2:c2:07:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C0:F8:CC:B3:6D:25:FF:6E:5F:E2:7E:68:E2:62:E7:7A:19:44:2B
            X509v3 Authority Key Identifier:
                keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         de:16:ce:69:4f:30:fe:bd:01:e4:90:ba:4e:ad:24:e2:65:0b:
         11:ac:42:9d:ee:7e:04:14:da:99:40:da:f2:c5:d7:95:0b:39:
         d0:eb:9a:8e:fc:c7:4d:5e:63:71:ab:34:5a:8c:0a:b5:e5:c7:
         29:fc:94:81:11:4e:e7:ef:64:65:d3:fa:8b:03:e8:a0:87:b6:
         cd:b9:b5:e7:e5:11:67:d4:07:53:a4:6a:0e:19:a7:d0:a4:b4:
         96:42:5e:16:b7:31:00:b2:0c:10:28:46:93:1a:ed:aa:1c:6a:
         cf:83:cc:b6:1d:5a:95:fd:19:e5:fa:45:ad:b5:08:89:6e:30:
         04:c2:35:98:f9:b1:d2:62:09:a5:dd:16:f2:1b:16:bd:46:df:
         b2:d6:b7:51:b5:bb:c2:e4:94:7c:9d:4a:2a:11:0d:6b:8e:1a:
         d4:56:f1:cc:68:7b:07:71:e0:4b:ea:a7:13:29:9c:16:d6:5a:
         63:60:52:c5:0d:66:45:17:e2:3f:36:aa:47:29:dd:02:40:de:
         5e:45:99:01:54:b9:6c:1e:99:ac:3b:73:1f:22:77:41:bc:6d:
         d0:e1:dd:ba:b7:60:47:85:1f:b1:e8:1f:15:6d:5c:1a:1d:01:
         b1:80:fa:86:96:bf:eb:f1:64:5b:bd:93:0c:a9:36:d7:62:25:
         2a:cf:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:23 2026 by rpki-client