Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/D41A51DE20C311F197B90590083D8C67.roa
File:                     D41A51DE20C311F197B90590083D8C67.roa (raw, json)
Hash identifier:          A9tEw4cCKpmr2BltHyvS8nLMeyyR3LGacTh/eVYaw8A=
Subject key identifier:   80:A2:05:07:E4:67:DA:BB:D4:74:60:42:71:BF:D9:4A:DE:51:BE:7C
Certificate issuer:       /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial:       0930
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/D41A51DE20C311F197B90590083D8C67.roa
Signing time:             Sun 15 Mar 2026 23:08:08 +0000
ROA not before:           Sun 15 Mar 2026 23:08:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     151066
IP address blocks:        103.210.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
                          rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352 (0x930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
        Validity
            Not Before: Mar 15 23:08:07 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69b73bd7-9f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:ea:3e:64:8c:ae:19:0e:2f:0f:4d:35:c5:
                    f6:6e:92:c5:b1:30:03:9f:5b:6d:2e:8a:35:e8:87:
                    95:42:72:05:b5:77:74:a9:a3:33:4c:35:6a:4d:ae:
                    a3:af:d9:e7:1b:90:90:75:36:97:ab:bf:34:c2:74:
                    df:45:9b:a3:8c:5e:33:d9:4b:8e:cd:25:63:0b:75:
                    f1:b5:83:de:cf:49:0f:21:86:81:49:af:c8:bb:d9:
                    57:fc:42:46:ba:7a:93:d5:58:fb:69:ae:1a:8c:64:
                    68:56:c9:bf:93:40:bd:7c:a0:70:b6:4a:9c:7b:82:
                    84:73:b5:a0:9b:5a:81:da:dd:3f:76:9b:0c:fe:58:
                    57:05:1f:5c:d5:11:7e:22:6a:b6:71:32:24:3f:d9:
                    d1:86:ea:db:1c:5a:c8:db:54:67:48:3b:42:f2:d5:
                    30:d7:ba:52:64:e6:d3:4d:c2:92:e0:c9:15:0f:aa:
                    71:a5:3f:bd:a2:dd:16:2d:ec:c5:ee:67:53:66:b1:
                    a1:ba:15:1c:62:10:25:43:5a:4d:b6:b4:cd:d7:06:
                    23:a5:eb:8d:ac:21:f9:c1:61:4e:86:e2:d0:4b:3b:
                    07:25:cb:bb:c0:73:70:1a:78:e9:65:14:3b:d3:46:
                    fe:5d:1e:52:4f:bc:29:b9:a6:c0:e5:f9:20:fe:d6:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A2:05:07:E4:67:DA:BB:D4:74:60:42:71:BF:D9:4A:DE:51:BE:7C
            X509v3 Authority Key Identifier:
                keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/D41A51DE20C311F197B90590083D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:8d:5c:8a:0e:02:61:76:95:3e:fe:8a:73:35:7b:0e:c7:c9:
         66:e9:ce:2b:51:18:20:34:62:31:c7:56:82:12:1f:18:97:8c:
         bf:d4:d9:7d:bc:07:38:2b:c7:b9:34:15:bc:d9:35:d6:c0:a7:
         19:fd:24:36:66:da:d9:37:9c:40:c3:74:62:89:a5:65:ec:83:
         3c:eb:ca:30:d3:e0:3b:c8:30:91:fe:e8:f2:78:4f:37:00:b3:
         22:0a:f9:df:72:ba:81:52:d3:bd:cf:f1:a5:e4:fa:d7:3f:b2:
         e1:1c:ee:4a:b6:f9:d0:99:de:40:27:db:dc:82:5b:88:a8:e2:
         b7:c7:18:8b:10:f0:46:8c:ed:b8:0d:5c:33:db:82:f3:a4:ec:
         7d:32:95:9c:4b:48:ca:71:ab:ed:6e:11:b0:6c:f6:37:13:93:
         cf:7d:db:a2:ef:23:b6:82:81:08:7c:3d:74:fd:1c:79:a6:1c:
         2e:9b:bb:fa:f2:99:e7:5a:d0:02:4b:d2:b1:40:80:6f:58:84:
         95:ba:03:3b:76:51:69:29:d1:d7:95:64:84:de:57:51:41:c4:
         c0:8a:8a:28:06:98:ed:60:f3:35:2a:9c:53:47:9c:bf:2a:e4:
         bb:65:3f:1d:a1:91:2c:65:21:21:37:7d:53:51:9d:e6:84:bd:
         aa:6c:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:42 2026 by rpki-client