Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/DAB6E11C251211F18B72873CBF833773.roa
File:                     DAB6E11C251211F18B72873CBF833773.roa (raw, json)
Hash identifier:          nxb1U9KV8D4GDxFWHrc+spPZIPBjyjFY/XbY1esDxwo=
Subject key identifier:   7E:7C:64:4C:84:0B:F4:60:A1:AF:F4:8C:FD:8C:51:53:19:94:02:1A
Certificate issuer:       /CN=A915974C/serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
Certificate serial:       12
Authority key identifier: E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/DAB6E11C251211F18B72873CBF833773.roa
Signing time:             Sat 21 Mar 2026 10:43:53 +0000
ROA not before:           Sat 21 Mar 2026 10:43:53 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        43.225.136.0/22 maxlen: 24
                          45.127.140.0/22 maxlen: 24
                          103.17.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl
                          rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915974C, serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
        Validity
            Not Before: Mar 21 10:43:53 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69be7669-698d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:15:09:87:40:2d:c2:1d:0b:aa:4f:79:95:
                    04:d5:af:9a:c3:b6:44:94:02:31:47:cd:ba:c0:53:
                    3c:9c:67:65:06:27:e2:c9:48:fa:5c:4d:e5:db:99:
                    51:a3:a3:4d:95:58:99:cb:0f:42:7f:24:50:2a:c9:
                    b0:c9:4a:f2:40:a0:91:52:0d:93:40:d3:da:c5:36:
                    5c:cf:54:05:fd:d9:7e:10:2b:a4:1c:c1:05:a1:de:
                    a9:a7:d4:38:ec:46:2e:55:9d:13:93:83:15:38:b5:
                    f0:8f:eb:bf:95:aa:bc:93:8f:7f:c9:83:66:c6:71:
                    c1:38:5b:c7:3d:fc:e6:ac:d8:83:17:9b:17:64:75:
                    15:26:a8:be:8c:67:eb:ee:1a:51:35:87:b5:79:07:
                    19:e4:54:5a:66:1d:1a:d9:bd:a5:1c:6a:84:ae:0d:
                    bf:04:76:f4:6d:90:d5:a2:e8:a9:b9:8c:6e:3e:0c:
                    61:45:1a:51:fc:cd:ff:9c:15:cc:f0:78:d3:90:25:
                    b6:13:1d:38:65:39:35:48:23:22:b5:db:25:79:1e:
                    07:99:04:cf:1a:d6:4b:01:bb:a7:93:81:83:28:4c:
                    26:62:4f:d7:4d:b0:ca:b8:8d:e8:4c:ff:13:00:4c:
                    a9:25:f1:21:ed:4c:76:71:65:01:ef:3f:f6:5d:fe:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:64:4C:84:0B:F4:60:A1:AF:F4:8C:FD:8C:51:53:19:94:02:1A
            X509v3 Authority Key Identifier:
                keyid:E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/DAB6E11C251211F18B72873CBF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.136.0/22
                  45.127.140.0/22
                  103.17.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:84:42:24:9f:95:86:92:08:99:9c:cb:c1:10:44:76:02:1a:
         ee:52:11:45:64:84:58:6c:0d:81:3e:88:cc:15:f6:90:90:ff:
         3b:b2:6f:f2:b7:75:d4:ab:7a:98:23:ef:d0:8e:74:32:4d:ae:
         3b:b2:c1:61:46:63:98:6d:5d:d3:a4:61:1d:fa:c3:64:83:7b:
         1a:3b:bf:7b:1b:f6:91:7e:4f:b4:1e:e7:d4:1c:60:93:e0:88:
         b7:2e:be:ef:8c:19:9c:54:20:ef:67:3e:c3:8b:50:d5:8f:dc:
         77:d3:4f:50:15:03:57:a3:96:78:f1:1b:95:0f:34:18:a8:3f:
         99:36:0a:51:65:86:4d:bd:69:3a:16:cb:f6:e8:13:1e:e1:4e:
         cd:cf:c9:25:60:7a:84:e4:0f:8d:f1:f5:d8:56:51:c9:57:c4:
         cb:bd:d3:55:9d:c7:c2:d2:ab:c2:8f:0f:e0:b7:86:1b:9e:55:
         2f:49:16:f8:de:4d:e7:9e:fa:d9:c7:96:a1:52:15:74:9a:34:
         da:e5:64:44:e8:fb:98:45:f5:b4:cc:89:05:5a:2d:57:bd:a2:
         3d:6e:96:b5:c0:b4:30:02:3e:be:09:d7:47:cf:b5:14:f9:45:
         a8:3d:83:c0:a1:a7:25:f4:2e:9c:d4:79:84:21:75:fe:82:cb:
         78:51:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:09 2026 by rpki-client