Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
File:                     D42E171A97E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier:          oh12tPPyo0aWXq9QoIEWfwxMhcXGEQDCqo5UuHvVvl0=
Subject key identifier:   71:04:45:16:25:EB:F0:8E:E9:7E:AF:91:65:85:ED:CA:04:07:B8:5E
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2741
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
Signing time:             Tue 30 Jun 2026 18:22:00 +0000
ROA not before:           Tue 30 Jun 2026 18:22:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4294955555
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10049 (0x2741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Jun 30 18:22:00 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a440948-42ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:e8:9d:6a:53:2e:8d:de:d1:a0:36:cb:f2:
                    e0:22:ae:bb:0c:f8:ff:24:af:8a:51:ff:16:2c:ae:
                    e4:d8:9d:ab:35:12:e9:7f:82:ae:8b:46:fc:d7:dd:
                    07:5e:ef:1b:44:16:f6:d0:94:0f:88:ec:40:83:ea:
                    2c:cf:1e:04:e3:00:89:6e:05:f6:dc:1f:84:d8:56:
                    63:b6:3f:26:90:d5:56:af:be:19:7a:e2:5f:99:87:
                    9d:45:76:a7:11:b5:88:88:14:b5:64:1d:ae:58:49:
                    d7:ad:59:e0:99:ac:52:0e:e1:46:43:2c:b1:71:55:
                    aa:b0:df:50:f5:30:17:d4:9b:13:37:be:e8:7b:46:
                    62:84:4b:d7:99:a5:02:9d:1f:f7:8a:b0:73:32:75:
                    b9:8e:0a:73:4c:e9:1c:38:05:cd:a4:da:dc:5e:6e:
                    3b:1a:22:1f:cd:de:fd:28:1e:2a:d0:e0:cc:b2:da:
                    ca:73:26:86:a7:45:49:4d:34:b9:64:33:26:a8:97:
                    87:54:26:04:32:0c:50:8f:8c:99:74:6a:8f:b4:72:
                    8f:42:4a:dd:6d:be:a2:f2:a8:c4:04:ef:84:ff:fd:
                    85:cf:07:1d:af:73:4d:63:c7:e9:32:20:c1:7e:09:
                    bf:08:f4:4d:20:49:f5:d1:ea:b8:6e:79:20:76:2f:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:45:16:25:EB:F0:8E:E9:7E:AF:91:65:85:ED:CA:04:07:B8:5E
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:4c:52:78:2c:c4:4a:6f:13:a2:cc:b9:4d:86:c3:68:40:34:
         36:69:46:a9:02:9e:96:38:5f:aa:4f:0a:3e:a3:af:b4:08:1e:
         34:36:30:6f:cd:03:a7:1c:fd:26:5a:52:81:f8:86:91:62:6a:
         78:49:57:17:7d:86:a9:7e:28:8a:62:6e:0f:43:55:c1:31:23:
         c4:d4:bf:9d:6c:c0:56:9b:4e:e6:c1:eb:6d:86:1b:ae:c8:a1:
         2a:52:b8:4f:07:2d:77:d9:96:0b:be:63:e0:59:fc:95:e5:9c:
         cd:cf:5c:d5:cc:31:8e:80:90:db:79:9c:24:7c:53:67:8d:ec:
         75:9b:70:4a:eb:aa:e4:ae:bf:5c:7f:d9:ff:66:64:b9:a6:e8:
         40:26:f7:6f:a9:c4:af:62:d5:5e:85:10:c2:d3:0d:a6:9b:2e:
         a3:9a:e2:ca:83:7a:9d:bc:4d:71:6c:5d:29:2e:27:42:df:e2:
         b5:3b:f4:23:2a:8d:9c:93:4a:2d:46:29:b7:41:b8:ea:7e:a8:
         2d:3d:a4:9e:11:34:84:06:dc:bc:a8:ee:c9:ed:8e:a3:3d:e4:
         14:04:05:4f:f5:9c:5b:29:6c:4b:55:0d:ed:0f:26:ea:2f:db:
         fc:61:07:d6:4d:91:56:a2:b4:df:82:12:91:e2:9b:27:0b:a9:
         04:ee:b0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:36 2026 by rpki-client