Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
File:                     4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (raw, json)
Hash identifier:          dYjOKoFq07vgQeItv9OVgz3KsqWlrs+XcRm7MKKAaMM=
Subject key identifier:   8A:B3:46:9A:09:86:A4:D7:0B:C5:6E:F4:63:58:5A:B0:DD:A4:FA:50
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       01DA
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:03:41 +0000
ROA not before:           Wed 21 Jan 2026 03:22:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        103.180.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: Jan 21 03:22:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4392d-5b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:3e:c0:76:15:25:4b:b1:87:05:de:d1:27:
                    9c:a1:27:4e:56:0c:66:88:f3:bc:67:82:55:6b:5b:
                    6b:5e:00:10:ca:bd:2e:c2:f6:a8:ae:eb:2d:4a:d5:
                    d1:c5:d1:fa:e7:82:bd:81:31:24:60:4f:e2:bc:e0:
                    97:9e:60:fd:da:54:41:4b:2b:fa:7b:f3:a2:51:82:
                    e8:3e:05:b3:41:8b:e5:74:9a:b9:2a:d5:92:f4:78:
                    a3:a5:fe:95:bf:ad:3a:a2:8e:7e:dd:fc:4e:4d:14:
                    ce:40:a9:cb:69:7e:80:74:08:f7:db:e0:26:1a:8b:
                    5a:fd:ca:7b:47:28:5b:79:85:a0:e3:52:3e:2b:c4:
                    28:92:65:78:6c:ad:11:89:fe:08:99:30:f2:a3:0e:
                    4d:b5:26:65:67:71:16:78:ab:e0:47:7d:f2:15:87:
                    c7:00:b0:60:e6:16:85:33:ad:af:c9:78:7d:6b:d9:
                    15:dd:a1:0d:65:2d:db:19:61:99:9c:24:98:a9:88:
                    81:a6:d9:dc:df:5b:2d:cf:2c:25:32:00:30:30:6b:
                    a8:67:2e:80:db:04:6e:43:87:45:ef:9b:d2:84:db:
                    0a:b4:bd:df:c9:c6:ec:2a:6a:60:f9:7c:6e:a3:2d:
                    35:52:f1:e5:d8:88:42:51:c6:69:78:30:4e:45:24:
                    47:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B3:46:9A:09:86:A4:D7:0B:C5:6E:F4:63:58:5A:B0:DD:A4:FA:50
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b3:ae:94:0b:6f:c3:33:79:de:a7:f8:9c:16:7e:1e:3a:c6:
         ee:14:92:58:29:71:ee:32:62:c9:74:27:9f:92:5d:24:68:db:
         75:20:6a:52:8b:45:e3:52:f8:a1:85:6c:03:0c:cd:94:af:cb:
         7e:82:5a:6b:e6:1a:9d:79:bf:98:70:e6:92:65:ef:3d:2d:dc:
         06:70:1a:45:03:3b:3f:53:6f:4e:c5:79:1a:ad:23:95:e1:b0:
         9a:46:0d:00:6e:fd:18:77:88:6a:bc:7b:a1:85:ad:6a:ee:b4:
         c3:dd:64:f3:dd:9e:7f:63:a0:43:43:3e:c3:79:ae:d3:7a:e8:
         1a:5b:4e:5a:44:c4:17:14:98:f4:27:32:d0:bc:92:0b:79:f0:
         b4:64:ae:74:74:d6:4a:13:59:c1:96:33:b0:9d:5e:a3:f5:c5:
         44:6d:97:c7:78:26:29:00:d9:3f:9f:47:2a:00:8c:0c:f3:57:
         4a:04:64:b3:0a:81:1d:a4:8d:dc:bf:b5:14:a2:ec:2b:82:4b:
         9b:b6:79:30:23:c3:76:5a:e9:ca:79:c3:5b:78:70:83:16:03:
         94:2b:a9:20:2d:64:80:fb:0e:30:4e:c7:15:c7:0f:9c:9c:ef:
         03:59:0e:35:7c:86:4b:b3:44:50:63:65:4f:0e:09:e3:7a:57:
         95:c1:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:38 2026 by rpki-client