Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
File:                     A83E51EC45F611EDBA9D6062C4F9AE02.roa (raw, json)
Hash identifier:          SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=
Subject key identifier:   02:F3:7E:24:68:E7:A8:C6:C0:94:33:72:5C:3A:32:44:C9:95:75:0E
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       0281
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:09:34 +0000
ROA not before:           Sun 23 Nov 2025 00:17:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        103.58.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Nov 23 00:17:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a42c7e-9c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:22:11:99:76:f8:18:48:68:f9:cd:d5:39:
                    70:14:1c:e9:a5:3a:47:2e:a5:83:f0:bc:d3:ff:ee:
                    93:a7:4a:60:26:23:f5:39:a9:71:fd:1e:91:54:34:
                    3b:de:ba:7c:a4:5f:48:59:c0:0d:d5:5a:7e:d8:02:
                    1f:0f:76:e7:56:c3:1c:b9:c7:ef:35:69:cd:ca:b1:
                    3c:b8:4f:a1:55:fc:24:50:63:d1:8b:68:4e:0b:bd:
                    44:76:27:4d:9d:22:d6:54:4c:fa:26:46:a9:e8:5a:
                    50:f0:64:c5:8f:9a:34:0c:0d:d7:f7:0b:4d:46:f1:
                    ba:16:00:02:d3:92:b5:7f:27:45:50:fa:20:15:c0:
                    45:c8:df:29:bb:90:79:da:41:30:f4:d1:36:28:2d:
                    97:eb:00:36:e2:af:e3:c0:7b:f2:15:bc:0f:ee:51:
                    fa:73:a2:d9:42:a7:aa:a8:26:01:8c:fe:df:a0:3f:
                    58:95:e2:91:27:6e:2d:80:62:4c:13:a8:a5:2b:28:
                    23:49:0c:19:d5:c6:4d:df:2a:e5:b1:19:73:e5:47:
                    7a:d0:75:79:58:ed:58:c3:ac:4f:eb:8f:04:b0:86:
                    d9:de:0f:eb:47:5a:04:39:2f:1b:7b:48:5f:61:80:
                    ac:1c:82:ff:da:ec:8b:8a:d5:62:5d:70:69:49:bd:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F3:7E:24:68:E7:A8:C6:C0:94:33:72:5C:3A:32:44:C9:95:75:0E
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:1c:a9:da:cc:84:e2:06:f2:28:12:70:18:35:08:24:e1:
         df:8d:7d:61:14:cf:ba:b0:c8:1e:f6:3f:1b:4e:ff:d0:d7:5b:
         f4:f5:e2:ee:53:68:a2:ec:7c:7c:82:b9:74:bb:94:92:3d:44:
         30:91:a6:5e:0b:5b:8b:69:aa:a4:75:3f:80:4b:71:51:5c:96:
         77:92:75:61:c6:0a:6d:4f:23:67:14:06:aa:fd:98:fc:d4:cf:
         db:17:4f:cd:87:80:76:38:cf:45:42:df:e7:07:a1:f7:50:27:
         e6:56:47:de:e8:20:63:85:49:de:f0:15:26:9e:c8:4f:62:7c:
         c8:3b:9c:75:4c:d0:fb:db:ea:5e:01:e0:c7:d5:f8:ba:52:f7:
         aa:2f:78:d6:5b:ee:e6:30:13:bc:f4:ae:7f:fe:98:d0:12:02:
         48:19:fc:3a:30:f7:56:24:65:86:24:cc:16:83:fc:3d:50:ec:
         0a:b1:74:a2:40:ec:fd:e8:4f:5c:1f:08:7d:97:25:ac:d9:5e:
         98:26:ec:82:2c:fd:b8:6b:91:43:24:3c:bc:3b:16:78:24:e8:
         ba:5b:d4:72:fe:3f:ec:eb:bd:c8:f7:6e:f6:99:6a:2e:52:1b:
         ff:2b:9d:9f:b3:93:1c:7a:30:b9:04:da:47:31:6f:9c:6b:54:
         98:6f:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:51 2026 by rpki-client