Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa
File:                     319786BEB63B11EF8D06900EC4F9AE02.roa (raw, json)
Hash identifier:          9o3pl6rhGeRs3aXVGw+bwYJylicnCZsy7pyeVUVfyFw=
Subject key identifier:   9D:A6:8E:2E:EE:73:71:CF:E1:CB:66:C8:B3:C6:99:A5:4F:A7:68:D9
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0405
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:03:57 +0000
ROA not before:           Fri 25 Apr 2025 00:56:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149770
IP address blocks:        103.185.250.0/24 maxlen: 24
                          2001:df4:bfc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Apr 25 00:56:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4555d-c2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:be:7a:b4:e4:f1:30:c6:4f:93:88:ac:d9:
                    41:a3:77:3e:67:38:e7:ac:e2:5e:9c:60:26:4b:b0:
                    bd:da:7b:ca:5c:f9:30:1a:77:14:96:e3:6c:81:48:
                    00:93:82:7e:13:8f:bb:f7:b9:27:31:fa:d1:5f:eb:
                    83:28:37:f0:fd:f5:bf:74:b8:39:28:3c:30:ae:68:
                    68:f1:a2:17:88:1b:05:b6:85:cc:c9:29:fd:3a:43:
                    b1:a7:b0:4e:ad:66:a6:db:bc:a4:87:5f:90:4c:eb:
                    75:0b:c3:df:43:61:45:06:85:04:e0:db:9f:b4:c9:
                    00:27:d2:71:14:53:cb:e4:72:0b:7f:9f:7a:f1:2a:
                    80:b8:4e:ea:52:0d:8d:96:78:b3:0f:2c:71:2f:75:
                    20:a0:d4:56:a6:93:a0:75:fb:da:07:42:c9:1d:24:
                    06:56:bd:07:82:43:46:81:62:f4:87:e8:0e:3a:4e:
                    ec:ba:5f:cf:09:7d:85:40:c6:4d:2e:8b:91:d9:fa:
                    a1:cf:fd:f2:a2:1a:c4:de:66:bc:4d:30:01:4f:c0:
                    52:47:87:37:97:60:fa:0b:57:e4:ad:84:e4:21:67:
                    30:3b:d0:3a:f8:0e:6d:46:36:a3:1a:2e:9a:9c:84:
                    e7:ea:ba:18:e7:a7:e7:92:7d:94:90:30:e9:80:7a:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:8E:2E:EE:73:71:CF:E1:CB:66:C8:B3:C6:99:A5:4F:A7:68:D9
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.250.0/24
                IPv6:
                  2001:df4:bfc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:8e:16:9a:08:a4:a5:3d:b2:5e:53:03:13:d3:a8:34:f4:f1:
         73:6a:ec:3c:57:86:97:0d:36:e3:53:b5:e0:40:11:70:41:f9:
         cb:df:2a:4d:7e:05:fd:d2:e4:a9:a6:e5:3f:15:5b:4d:cc:fe:
         0a:05:60:9d:f0:1b:9e:b7:b0:81:f8:49:c4:e3:19:f0:e9:2e:
         00:0a:dc:13:62:14:f2:ca:23:c2:7f:ce:45:7b:1d:fc:58:04:
         a2:60:4d:76:13:88:68:8f:50:1a:74:61:12:35:06:42:79:01:
         67:97:08:92:22:e3:45:87:6e:c4:cf:5d:62:8c:bd:98:5a:c9:
         15:88:b6:99:34:69:d6:b0:85:00:2d:49:97:d6:2e:75:fc:ce:
         7b:14:5c:2a:d5:52:3c:bd:19:d1:55:23:d7:a9:9f:5e:cb:14:
         46:68:ef:99:4f:97:57:b1:12:a4:c4:37:5c:1b:bb:4f:f8:11:
         c9:a7:04:d0:ef:48:1b:60:ff:9b:61:cc:0a:9a:05:be:2b:50:
         a8:9d:0a:2d:41:a9:ef:92:40:31:71:75:c6:6a:c0:a1:4c:7a:
         37:11:43:65:a5:d1:f6:74:7e:9b:43:27:8b:33:2a:86:87:e8:
         35:21:54:7b:a4:40:ec:72:61:f2:07:25:e8:2c:99:93:a5:f8:
         bd:b9:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:28 2026 by rpki-client