Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/B01E86045EC511EFA4479F42C4F9AE02.roa
File:                     B01E86045EC511EFA4479F42C4F9AE02.roa (raw, json)
Hash identifier:          zsKXMSkp+PvWPKVbS2PdjPccXHzghWKgI1Bm0STGTmY=
Subject key identifier:   3B:39:5D:21:CE:12:87:4A:FB:23:3A:EC:DC:AC:09:14:38:CA:2A:19
Certificate issuer:       /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Certificate serial:       0128
Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/B01E86045EC511EFA4479F42C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:34:38 +0000
ROA not before:           Tue 03 Jun 2025 06:50:40 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137998
IP address blocks:        203.25.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
                          rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
        Validity
            Not Before: Jun  3 06:50:40 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a591ee-868d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:c0:1e:b4:53:21:89:7e:30:eb:e2:dd:54:
                    6f:24:6f:dd:84:ba:93:b5:51:31:5f:64:96:b2:c0:
                    c4:1d:71:ad:39:06:5c:81:83:d2:aa:5e:f7:95:49:
                    c6:35:39:7f:2c:d8:9c:9a:76:b8:2c:d6:be:2f:a7:
                    62:8e:c0:22:b8:db:05:55:85:99:fb:4a:2d:22:4d:
                    ac:3c:aa:c2:83:c2:d0:97:3e:c1:b3:1a:0b:1f:40:
                    fa:b5:3b:ae:33:87:91:18:81:4e:27:4d:62:2e:b1:
                    72:d4:21:9e:60:56:8a:77:e2:f7:0e:da:b9:7f:28:
                    65:c6:24:70:36:f4:bf:54:9d:0a:89:d0:6f:64:61:
                    a0:59:7b:82:96:37:48:a0:3a:fd:13:34:f2:a5:bf:
                    06:33:cf:36:f9:44:a7:e0:21:1c:0c:d4:5b:61:72:
                    19:c7:15:f3:08:b3:f8:c1:bd:99:9f:c6:40:f7:97:
                    35:21:7a:db:bc:7b:82:53:66:80:f9:4e:20:86:93:
                    c7:a4:d5:fc:e2:80:55:17:14:86:7c:0e:a8:33:8a:
                    4d:d5:0d:11:8a:91:8b:62:62:15:cc:0a:a1:1d:39:
                    37:18:fb:30:74:ff:9f:87:1c:3a:ec:26:0a:75:8e:
                    15:7d:48:69:ae:6c:05:02:98:62:6f:77:98:7c:9e:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:39:5D:21:CE:12:87:4A:FB:23:3A:EC:DC:AC:09:14:38:CA:2A:19
            X509v3 Authority Key Identifier:
                keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/B01E86045EC511EFA4479F42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:52:d6:a7:73:97:32:ad:65:dd:e0:43:93:85:b7:fb:b4:
         30:0a:27:88:cf:eb:a7:80:88:3f:d4:e7:ce:c8:e2:b0:ae:ad:
         27:2a:47:80:ed:c0:5e:89:8d:58:0b:ea:d6:90:03:f4:0a:dd:
         3d:1d:7b:4d:e6:99:6d:5b:b6:cb:f6:7e:71:ba:57:6d:51:74:
         6f:d6:94:55:86:ef:e4:d6:b6:64:74:e1:95:f3:bd:2c:85:3c:
         03:c8:24:6c:12:50:d0:83:55:27:af:49:5d:a6:f3:cd:7e:34:
         7e:81:f8:9c:c4:80:0f:52:7f:2c:fa:49:dd:9d:50:af:32:f0:
         09:0c:d2:62:84:b6:ca:53:d6:4c:28:85:7b:c0:89:30:51:63:
         3d:c0:25:95:a4:20:4a:83:3b:b3:29:db:0b:2e:2b:b1:b0:50:
         5c:cb:78:19:35:07:4e:16:19:3d:80:0f:21:d9:18:65:59:6f:
         ba:58:0a:14:f8:59:15:f0:c3:6d:5e:5a:1d:20:4e:1e:38:e9:
         83:4c:9d:fa:25:ee:e1:14:94:b8:55:c4:d4:1d:68:bd:66:e2:
         0f:6e:5d:88:c0:c0:b7:83:89:23:a2:66:0f:84:f1:5b:09:29:
         dd:82:b4:2b:dc:5a:48:73:7e:29:48:45:48:1e:79:12:11:17:
         2c:54:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:35 2026 by rpki-client