Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/A201A06CB42B11F0849A7A7AC4F9AE02.roa
File:                     A201A06CB42B11F0849A7A7AC4F9AE02.roa (raw, json)
Hash identifier:          8711DjizhgwUlMNKXElZ5orEHkZ18p22C/iB5twicyI=
Subject key identifier:   AE:FC:8A:1C:94:CC:7C:32:7E:16:AF:8A:24:92:65:A9:39:DD:37:E2
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0406
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/A201A06CB42B11F0849A7A7AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:03:58 +0000
ROA not before:           Tue 28 Oct 2025 18:26:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58945
IP address blocks:        103.185.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Oct 28 18:26:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4555e-d1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:80:4b:ff:67:36:04:43:4d:d2:2f:ef:b3:
                    cd:10:67:46:58:ec:9c:67:c5:57:35:93:27:5e:73:
                    7f:b8:32:66:32:9b:ad:d6:ef:f2:c3:88:c5:a4:05:
                    55:ec:7e:aa:f1:aa:e0:f2:76:4a:f9:81:49:26:0b:
                    e3:75:6c:95:4f:75:88:c0:5b:0d:ce:ec:6d:f2:49:
                    1e:ea:7e:d9:4c:a8:20:b8:7f:45:5a:a2:55:0f:63:
                    a4:fd:0b:00:1d:2e:26:d6:ce:51:20:73:0a:15:87:
                    82:b2:2c:5b:c4:94:59:aa:db:10:06:26:a6:6b:ed:
                    38:97:7d:42:9a:2c:8e:e9:f4:6b:fe:29:7d:1a:93:
                    db:50:0a:1e:03:b8:9a:21:9e:92:7d:70:24:b1:35:
                    74:b9:08:e1:f4:20:2f:3c:a3:c4:f5:e5:86:e8:a8:
                    de:8a:a8:b2:06:f6:b0:cb:8a:11:8f:7e:3e:7d:af:
                    46:e9:ab:ec:33:c4:a2:ca:11:4c:9b:91:41:e3:69:
                    4c:bc:bc:03:c1:f4:a2:71:51:ac:4a:4c:af:c0:0b:
                    95:5a:05:da:95:8c:ea:0b:e6:90:b4:fd:55:60:4e:
                    fd:00:d5:89:8d:c8:13:62:7e:5b:94:bd:0e:a7:3b:
                    3d:2c:57:01:65:29:78:a2:2e:c7:cb:12:71:53:8f:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FC:8A:1C:94:CC:7C:32:7E:16:AF:8A:24:92:65:A9:39:DD:37:E2
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/A201A06CB42B11F0849A7A7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:30:23:90:1e:da:ab:c1:a1:84:98:26:4a:22:a6:d4:c5:0e:
         40:71:cc:0b:dd:7c:76:62:f6:e7:a8:7b:63:be:b8:a8:ca:76:
         a6:5a:64:a7:6d:88:79:57:1d:48:74:c2:a4:d2:2b:6b:90:5c:
         51:17:6e:44:80:10:95:b6:ba:09:d6:86:b8:c5:a5:ca:17:1b:
         a1:d7:21:4c:8e:c8:c5:a8:0f:c4:ea:77:ad:f8:82:b4:b5:3c:
         98:00:b2:dc:5d:c1:5d:39:c7:cd:be:56:3c:48:c1:75:aa:29:
         95:28:38:40:ef:d2:f2:2e:31:3d:e0:65:91:a0:c3:54:41:93:
         49:8b:29:ca:fc:98:d5:97:22:fb:48:d2:04:39:cb:68:8b:71:
         a6:23:20:f8:95:86:1a:7d:0a:b5:36:f1:53:3e:06:74:e3:ef:
         fa:21:35:02:f9:f9:d8:03:ae:f0:9c:53:9d:13:21:14:13:7c:
         7c:b0:9b:08:c5:3b:5e:8c:01:80:ab:c6:dd:2c:61:a0:e6:49:
         50:83:b1:9b:58:20:ba:df:d9:2c:ae:ee:63:44:b5:77:77:ac:
         f1:d1:80:eb:f4:ea:3d:35:d6:83:13:2f:ad:26:8a:d7:41:ea:
         cd:f0:b8:74:93:bd:5d:bf:63:dc:65:b4:96:18:de:d7:19:7e:
         6e:26:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:43 2026 by rpki-client