Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/ACFD7470161F11EE9C6E4529C4F9AE02.roa
File:                     ACFD7470161F11EE9C6E4529C4F9AE02.roa (raw, json)
Hash identifier:          Hhuce/k2Nig26k0PhaoBK79YcGuzei5AcpeXnj1kphs=
Subject key identifier:   11:D4:E6:B0:D6:91:2D:6F:A2:47:A0:44:C2:3B:57:1B:C4:64:F1:71
Certificate issuer:       /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial:       021E
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/ACFD7470161F11EE9C6E4529C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:00:52 +0000
ROA not before:           Wed 11 Feb 2026 02:22:51 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.180.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
                          rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
        Validity
            Not Before: Feb 11 02:22:51 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43884-afb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:b5:95:90:c3:d9:55:45:9f:a6:5e:51:09:
                    1e:1e:1c:dd:bf:cb:3b:a6:69:02:68:82:ea:2e:22:
                    74:ca:08:c2:0a:17:a4:b4:62:56:83:7f:e4:b8:85:
                    d1:ae:26:2b:08:18:0f:a2:35:b5:9d:67:13:bc:ec:
                    eb:9f:56:94:83:92:c2:4d:4e:60:04:39:27:1d:a3:
                    73:cb:95:c1:22:e5:2a:67:0b:22:92:e0:13:ac:f7:
                    ae:ed:88:76:42:eb:15:01:dc:c4:93:9d:b2:80:26:
                    e7:16:b0:51:42:63:20:50:a7:df:aa:7a:58:52:71:
                    98:1b:97:be:a2:64:99:a3:73:63:c1:6f:55:bb:76:
                    ee:cf:b9:e2:a8:bd:99:43:a7:09:91:04:f3:9d:36:
                    66:79:ab:54:e7:d3:14:b2:6c:5a:b4:27:7c:c5:d9:
                    b3:d0:f2:cf:b0:99:55:f3:fd:c5:f0:56:65:2a:0a:
                    e0:62:ac:d5:d2:a1:22:0c:79:0a:ac:c3:13:81:55:
                    ee:3e:cc:94:45:1a:fb:f6:ec:e8:c4:4e:5f:a9:6d:
                    38:11:1b:4d:79:a7:80:52:05:d0:f2:c0:f3:87:fa:
                    4a:02:22:ba:b2:f3:f1:be:3b:e1:ff:0f:04:ac:89:
                    7d:a0:5e:e6:0e:d6:a8:f7:3f:aa:32:0e:76:73:91:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D4:E6:B0:D6:91:2D:6F:A2:47:A0:44:C2:3B:57:1B:C4:64:F1:71
            X509v3 Authority Key Identifier:
                keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/ACFD7470161F11EE9C6E4529C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:35:af:c5:e4:72:5e:ce:b5:bd:26:4e:d9:31:70:90:f8:aa:
         36:59:7e:ed:d0:42:c4:6f:1d:06:59:71:f7:1a:c6:aa:75:c1:
         07:70:5f:03:f2:fd:86:e2:94:1e:a7:b6:d4:f8:9a:f9:a0:9d:
         08:ba:cd:ae:63:21:f4:5f:7c:ce:64:c6:36:45:d6:44:7f:31:
         b6:aa:80:1b:36:08:cb:54:5a:c5:1b:b1:e9:69:9c:3c:94:e6:
         36:70:c4:d5:84:73:11:e9:0c:7f:d0:73:53:9a:17:45:ce:f0:
         f3:76:34:1f:b7:bd:0b:f8:27:92:c3:23:8d:25:44:cf:01:2b:
         f2:f7:9e:5f:dc:68:95:f4:ad:93:08:9d:31:08:95:22:a3:9d:
         76:46:e1:19:d6:eb:89:28:ad:60:bd:42:ac:03:74:50:56:62:
         9d:79:12:f1:54:e6:82:08:e9:69:fe:c7:71:3d:6d:07:23:55:
         54:c6:e6:a5:2f:04:99:ea:78:f2:ca:e8:b4:f9:5b:3e:db:4f:
         5e:e6:0c:18:12:04:56:60:48:ac:ba:59:9b:61:c5:f1:14:2f:
         ce:ec:c7:27:2b:bb:ff:ad:78:e3:2b:5c:58:cd:58:32:fe:e8:
         b1:62:d2:bb:71:19:77:e9:de:90:f7:73:1f:e6:43:51:e3:f3:
         b9:2a:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:58 2026 by rpki-client