Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
File:                     C664689AE0F511EABB96D531C4F9AE02.roa (raw, json)
Hash identifier:          e7xh0EsycLj4xWIjRzWHI3/y4rIpItug3rbcYHWwZyg=
Subject key identifier:   7A:7D:B0:DC:E3:2F:68:3A:23:E9:61:C1:4B:DD:97:23:21:DC:1C:FB
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       08DE
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
Signing time:             Sat 02 May 2026 21:25:44 +0000
ROA not before:           Sat 02 May 2026 21:25:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.152.248.0/24 maxlen: 24
                          103.152.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2270 (0x8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: May  2 21:25:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f66bd8-8d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:44:0a:aa:0b:b3:e6:2f:b2:3d:3e:dc:81:
                    2e:d3:03:a8:36:38:01:34:1a:38:30:6f:a2:e8:25:
                    8e:d5:6c:4b:2e:fb:00:e7:60:8d:de:8a:8c:6a:ba:
                    9a:27:28:9a:5f:25:e7:25:7d:9c:aa:bc:ae:47:df:
                    f6:a0:b8:ef:0b:ef:45:05:e7:f4:8c:04:28:30:bf:
                    2a:28:20:00:b3:ad:84:d0:e7:0b:61:6d:b8:3e:7a:
                    19:f8:a1:63:e3:29:47:95:9f:29:b7:65:ba:36:23:
                    dd:98:e1:6c:4b:7c:aa:c3:78:43:e0:ed:8f:30:e6:
                    e7:80:6b:be:34:35:34:2b:c1:99:4c:da:79:57:41:
                    87:99:dc:eb:19:ab:ef:d8:64:5d:6d:2e:1f:5e:0a:
                    0e:98:1a:52:fb:7c:9c:08:9a:d0:1f:05:5b:bd:5b:
                    ca:bc:48:74:c6:bd:90:a4:91:20:3b:37:dd:26:b6:
                    c2:01:d0:eb:bd:00:3c:67:67:59:04:34:87:f7:aa:
                    87:76:2d:42:26:4f:c8:ac:f7:fd:ec:20:b4:ef:f2:
                    99:da:13:c9:c2:ed:37:01:d6:80:62:f4:c3:d5:f6:
                    08:c6:58:b4:12:e9:35:5f:e2:8d:3d:0d:71:b2:2d:
                    d9:a0:17:ba:71:fe:79:53:02:30:e5:69:dc:c5:3e:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7D:B0:DC:E3:2F:68:3A:23:E9:61:C1:4B:DD:97:23:21:DC:1C:FB
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:dd:3e:9e:c1:a7:3f:4f:b6:76:e3:6e:24:1a:3d:39:45:45:
         3b:d8:15:a5:3c:55:72:0e:81:5d:73:53:d0:ed:50:7d:02:75:
         e5:72:d6:c6:73:69:01:a9:70:1d:ca:ae:b9:83:15:4d:02:f4:
         9a:9f:14:e4:e9:73:78:01:72:7a:7c:46:ac:30:f7:ab:10:02:
         f2:1f:04:6a:70:26:a1:38:5e:a0:31:23:e4:5d:81:cb:d3:24:
         82:c6:1f:6b:f5:c2:4b:5b:b3:e6:3f:0d:63:f6:56:78:53:ed:
         b7:87:bc:87:a9:d8:79:98:e9:8b:10:a9:81:b9:8f:b8:cb:02:
         91:d5:cb:73:c6:65:d7:98:ba:6d:13:ac:8f:93:d0:9e:e2:4d:
         48:39:13:33:a8:38:fc:1a:d7:4c:49:8b:f9:f8:cf:51:87:8a:
         50:08:bf:36:41:d0:4e:dc:6c:46:24:77:cb:be:b3:9e:72:8d:
         7d:bb:1f:2c:57:b0:d2:7b:90:25:29:2d:00:6f:17:19:2c:02:
         29:3a:74:5d:90:fe:ad:a0:d2:a6:55:4b:4f:9f:16:7f:62:e5:
         60:e1:b8:cb:42:f2:9a:e2:91:3f:34:46:f2:eb:29:75:f3:03:
         3f:9c:7f:0c:61:25:43:9f:78:29:db:69:3a:18:dc:02:33:ec:
         c3:12:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:40 2026 by rpki-client