Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/E706A8B2BBF111EE8697E433C4F9AE02.roa
File:                     E706A8B2BBF111EE8697E433C4F9AE02.roa (raw, json)
Hash identifier:          +vaa0VOm4wz+weMjzRo0jbo8hgAyLHv/jTs0BYsAOGM=
Subject key identifier:   39:05:64:E9:C4:EE:E9:91:44:24:FC:C9:0A:3B:E7:3F:9D:77:0D:C8
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       2565
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/E706A8B2BBF111EE8697E433C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:18:44 +0000
ROA not before:           Tue 16 Sep 2025 15:53:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4845
IP address blocks:        203.208.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9573 (0x2565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Sep 16 15:53:46 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48304-8734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:77:a4:92:02:73:57:81:00:a3:c1:eb:bf:d8:
                    53:2c:c2:49:61:2b:2a:9d:49:87:25:3f:71:c1:0f:
                    24:c0:a2:c0:86:92:81:9a:1a:69:fd:e6:9a:2d:07:
                    24:85:2f:99:7b:2d:7e:c8:04:c1:cf:5a:42:b7:25:
                    31:c9:ba:b6:86:98:8f:07:ae:03:21:92:13:ff:9e:
                    00:5e:33:15:23:25:0d:a6:6d:6d:7a:78:d8:a0:91:
                    00:7b:6a:62:4f:b3:e5:02:57:df:19:ba:9b:0b:7d:
                    1b:aa:37:28:47:1a:4f:50:8a:84:2c:47:b5:83:10:
                    02:4f:ce:ce:9e:5d:9b:6f:16:82:56:8c:80:0e:f6:
                    fd:f5:a8:96:6d:d8:62:8c:0d:bb:7f:0b:a9:3a:7d:
                    14:bf:19:fb:1b:74:17:c0:bd:63:df:e3:60:d6:e8:
                    6b:8b:82:98:30:1a:7d:d6:87:6c:58:f1:23:6e:08:
                    7f:86:d6:35:b6:bd:44:1a:db:29:6f:eb:5c:5f:b3:
                    d2:85:5d:76:b9:6e:b5:f0:3e:7e:2a:28:9e:52:16:
                    78:75:9e:d7:86:6a:fc:74:48:fc:fc:bc:44:db:33:
                    c2:8f:f4:46:26:6b:36:9a:3b:70:93:d1:d3:33:cf:
                    c2:fe:00:21:47:36:71:28:8a:04:95:04:4f:76:53:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:05:64:E9:C4:EE:E9:91:44:24:FC:C9:0A:3B:E7:3F:9D:77:0D:C8
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/E706A8B2BBF111EE8697E433C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:dd:6b:32:cd:fd:69:ee:6e:be:0f:b5:80:bd:90:16:c7:ef:
         a1:88:4a:1a:26:5e:f3:c9:65:8a:c3:06:29:59:0d:eb:ec:72:
         c6:a7:e6:02:e5:16:6b:67:38:d6:12:22:4f:80:15:19:1a:76:
         fd:d8:41:ba:74:c2:2a:48:c4:de:ec:f3:72:7d:2e:b5:ae:15:
         27:6a:a3:24:ab:05:a6:9d:27:ed:07:01:9c:12:8a:93:a3:cd:
         3c:a4:54:a6:5e:d9:a9:33:f9:10:d2:6b:eb:f0:35:ac:35:3a:
         a7:5b:8b:d6:4e:92:da:27:b1:b7:c4:e8:fe:a2:7a:b9:54:77:
         46:fa:9d:31:75:2b:9d:bb:e0:5d:f6:a0:eb:37:17:28:1c:66:
         be:cc:98:c6:82:d1:a7:e2:d2:ba:77:dd:db:eb:04:21:01:78:
         1b:b2:ba:24:32:fb:2e:65:29:49:09:8e:d9:7b:4f:da:80:ef:
         8d:b2:6f:43:a6:fe:01:96:44:a8:d4:53:c3:75:2b:d6:fa:da:
         a5:54:c8:07:9a:3a:aa:fb:8f:72:5e:b6:b9:76:81:d7:6c:3d:
         71:45:07:e0:a4:a0:de:1c:8f:4b:49:eb:4c:a3:cc:bb:97:f6:
         1b:4c:86:ca:c2:9c:0c:1d:b2:15:95:cc:03:30:3e:14:61:e9:
         bb:4e:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:40 2026 by rpki-client