Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa
File:                     DB0C41022A0611EE95A2F00DC4F9AE02.roa (raw, json)
Hash identifier:          KokSDbus0aBO0eU4DsUwFv5W4sAsc3V1iSHBb9lNujw=
Subject key identifier:   87:73:45:32:9E:E4:F1:D3:EC:4A:C5:44:60:54:B6:A2:37:15:B3:40
Certificate issuer:       /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial:       01EB
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:37:41 +0000
ROA not before:           Thu 05 Jun 2025 03:51:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151207
IP address blocks:        103.107.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
                          rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
        Validity
            Not Before: Jun  5 03:51:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3deb4-3d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:b5:d9:05:a8:68:36:31:7c:3e:c9:36:d8:
                    af:7e:72:3a:c3:f8:59:12:5e:24:95:eb:5d:9b:8a:
                    4b:42:12:56:41:c9:c4:06:3c:22:a6:8f:dc:c1:41:
                    4e:68:02:b4:5b:d0:de:d4:95:68:41:9c:df:e8:ee:
                    60:dc:5f:54:55:97:c2:3b:10:06:88:d8:0a:9e:fb:
                    24:12:77:c9:af:ee:a4:c7:d9:7a:cd:2a:e2:52:19:
                    f9:6c:85:a9:36:8c:d5:70:1c:ee:45:28:7b:9f:9c:
                    08:10:82:c5:3d:2c:96:db:f2:04:c7:00:c6:90:5a:
                    83:4c:43:bb:78:c1:da:11:41:8c:ea:65:9f:c5:fa:
                    0b:46:fa:30:a1:75:9e:52:f2:f5:49:c9:1a:ac:ed:
                    3f:03:4e:26:7f:03:9b:a8:e2:97:70:45:f1:1e:8d:
                    8c:c5:db:dc:c7:28:f0:33:f0:6b:96:e9:fc:42:f7:
                    14:5e:ff:fe:65:5e:92:5a:a4:ad:0c:48:bf:b7:6c:
                    a6:24:28:ad:f7:ae:78:c1:f5:ec:b4:7c:cc:a7:8d:
                    d8:bd:a3:ed:d2:5a:df:05:4b:11:c6:fd:ff:50:67:
                    ed:9f:38:b4:51:b2:72:23:0f:b3:7b:21:ff:dc:62:
                    a1:3d:97:cf:8b:18:f0:be:61:46:2c:18:6a:bf:88:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:45:32:9E:E4:F1:D3:EC:4A:C5:44:60:54:B6:A2:37:15:B3:40
            X509v3 Authority Key Identifier:
                keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:86:c3:b0:58:f8:4f:99:60:db:c3:26:58:a5:1f:62:3a:
         d3:05:82:db:54:6c:73:81:7b:a8:39:bc:33:23:df:1c:98:a2:
         a8:23:da:75:ae:8f:dd:c6:25:7a:18:85:a5:a9:1d:3d:25:b9:
         39:b6:88:38:3e:24:79:9e:08:0a:ef:4e:c9:96:2b:60:18:95:
         00:8a:46:38:1b:87:f4:38:9e:cb:16:f6:c0:59:13:e8:1a:4e:
         08:32:8f:a3:e9:61:23:c9:21:d2:c1:97:bc:e1:32:a9:ba:b2:
         19:0f:88:41:51:aa:8d:bf:26:33:e7:8e:d6:58:00:6d:f5:e0:
         ed:2d:79:ea:c3:a2:09:83:f6:c2:a2:32:2b:a3:c0:0c:a0:73:
         ff:33:d0:b8:7a:d1:b9:71:cb:31:79:e7:6a:c0:e5:2d:6e:56:
         e3:a4:56:c1:65:1c:7e:53:8a:c7:c3:82:a3:c6:21:31:37:66:
         39:f5:f9:09:c2:7f:43:20:4e:69:5d:bc:0a:e1:b2:63:ef:cf:
         f4:7f:ee:70:9a:05:4f:17:22:af:a7:58:38:b3:04:e0:0c:cf:
         6f:f2:9d:55:5d:cf:1d:13:86:69:05:03:1f:9a:25:12:de:e8:
         72:41:8c:ab:92:3e:31:50:53:7c:1e:fc:17:96:a1:66:54:ea:
         9c:8e:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:20:44 2026 by rpki-client