Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/5EAB725014A211EEA889E832C4F9AE02.roa
File:                     5EAB725014A211EEA889E832C4F9AE02.roa (raw, json)
Hash identifier:          5f30Ll3t4xHPOU0dcolsxzt6Cf3NYw0J9gKnntFoHSQ=
Subject key identifier:   47:73:1B:0E:39:71:E7:E1:11:E4:30:84:F6:00:D4:55:E5:BD:18:AD
Certificate issuer:       /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Certificate serial:       01FD
Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/5EAB725014A211EEA889E832C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:37:02 +0000
ROA not before:           Wed 05 Feb 2025 03:16:19 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150812
IP address blocks:        103.65.242.0/24 maxlen: 24
                          103.65.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
                          rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
        Validity
            Not Before: Feb  5 03:16:19 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3de8d-4a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:cf:15:05:89:f5:c5:94:b5:cb:99:f5:50:
                    80:4e:d3:be:ac:4e:4d:a3:4e:bf:2f:17:e1:8f:1d:
                    8d:3e:08:bf:f6:db:7d:ed:ac:68:53:ff:64:b2:1e:
                    67:9a:83:83:36:c4:7b:b1:b1:6b:d3:8c:9a:61:fc:
                    2c:dc:e2:bb:9c:9a:9b:85:46:a9:37:a9:ca:ce:4c:
                    9b:bf:ba:a5:46:81:c8:1d:b0:5e:3a:7e:90:ec:cb:
                    89:45:0c:00:93:79:b7:40:c2:ba:bd:ee:ee:08:8b:
                    d7:d3:e5:3e:8e:47:e7:c8:d7:16:c3:6f:d2:92:c4:
                    2b:38:63:32:2a:8f:c3:fc:4d:1a:ff:f0:55:32:1b:
                    da:90:b4:1e:84:c5:25:d6:6a:42:64:84:15:c6:ff:
                    74:3f:ec:83:59:cd:cb:f5:c4:b5:65:94:53:45:d6:
                    65:6c:25:21:9c:8b:f7:11:bd:2c:99:be:51:4b:b3:
                    43:09:78:ed:5d:09:ad:d0:ad:f6:00:41:22:aa:29:
                    a6:f9:80:9b:87:03:ea:ff:80:d9:be:2c:0d:b2:c5:
                    ed:72:8d:08:bf:83:10:df:3a:20:a6:63:59:d3:87:
                    04:1e:5e:5b:44:f1:4e:47:73:1c:74:7e:bd:e2:cc:
                    e9:73:5f:6e:ec:78:e9:b0:2d:8c:88:68:d7:19:b7:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:73:1B:0E:39:71:E7:E1:11:E4:30:84:F6:00:D4:55:E5:BD:18:AD
            X509v3 Authority Key Identifier:
                keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/5EAB725014A211EEA889E832C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:6a:3e:00:94:21:c0:87:9e:a6:a9:93:ab:9f:04:09:38:41:
         7a:0e:30:16:41:18:e9:e7:b9:fc:d2:35:ae:cd:a1:01:e2:01:
         f3:2d:23:2b:af:b3:08:2f:6f:ac:07:ee:56:4e:2e:a0:00:af:
         52:33:55:e5:fa:98:68:b9:70:e1:d9:67:93:b5:da:92:66:db:
         3e:0f:55:4b:62:f9:f9:f4:a8:9d:aa:f3:41:9c:43:90:c7:a1:
         8a:db:59:20:63:da:51:49:95:b1:6a:78:f8:a3:44:2b:69:3b:
         d6:a2:49:d1:f0:53:91:14:a6:68:8c:4b:cc:67:81:5c:b8:e9:
         55:05:d3:ab:13:bd:0e:28:89:3a:55:82:86:96:59:52:b5:2e:
         cd:d8:ac:f4:d8:2a:9a:b8:62:f5:dd:70:8a:52:4a:76:c5:d6:
         cf:b5:41:e8:2e:83:1f:e3:ae:e7:09:7f:dd:e6:99:9c:f1:62:
         7e:89:f0:c9:c8:a0:61:a8:ad:dd:b8:49:c5:0e:72:48:83:e2:
         b4:87:61:7b:c3:a8:be:cc:d4:b9:af:3a:26:89:69:ae:6e:98:
         71:46:f6:67:dc:ad:cf:04:6a:54:df:ff:33:bf:1b:10:5f:5b:
         74:17:f9:e1:ca:58:09:19:29:57:8b:7a:ce:23:a3:58:7f:81:
         60:cf:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:09 2026 by rpki-client