Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
File:                     D08310DE94C511EDB2732947C4F9AE02.roa (raw, json)
Hash identifier:          2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=
Subject key identifier:   71:29:F4:B5:8A:ED:FA:49:F5:C3:9D:FB:69:2E:96:B4:8C:D1:EF:7D
Certificate issuer:       /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial:       0260
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:06:08 +0000
ROA not before:           Sun 07 Dec 2025 00:40:20 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150662
IP address blocks:        103.49.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
                          rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
        Validity
            Not Before: Dec  7 00:40:20 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a40f90-a45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:56:97:11:10:da:77:d4:44:f8:3a:ef:d4:
                    a7:6d:51:dd:1e:8f:61:f8:ff:8a:24:d9:d4:ed:43:
                    ab:34:38:a8:a0:d3:97:43:99:7d:78:d5:a6:20:e4:
                    6b:41:4e:59:ab:02:0e:aa:17:fa:47:5e:ca:2e:0d:
                    ea:9e:db:cd:1c:1e:59:07:4e:2d:b0:c8:57:63:c7:
                    2a:a3:3e:0b:20:46:dd:52:e9:07:d4:bc:c5:fb:88:
                    c1:79:d1:a2:f2:55:fe:8d:41:74:de:5c:c4:99:ee:
                    f9:e3:1b:83:09:3f:c1:2e:98:8a:39:92:bd:0b:85:
                    52:3a:a8:db:3f:e0:7c:71:db:13:a7:b2:3f:8d:b7:
                    a3:2f:07:98:95:e2:00:9d:a7:74:0f:e2:bf:e8:44:
                    39:17:f0:d0:09:40:16:f8:74:d1:8e:81:4f:d0:a4:
                    66:8e:04:34:93:c2:82:99:d9:ac:4d:f9:c8:73:da:
                    be:5e:66:b8:0a:33:c1:b1:95:d2:10:25:2b:cd:c1:
                    a5:cc:23:7d:91:88:68:5d:49:fe:d3:fe:0f:0d:98:
                    f8:1f:31:cf:b8:ea:dd:71:95:f1:5b:3a:78:16:27:
                    d8:f8:43:0e:8a:8b:86:56:46:c1:17:4e:51:51:f8:
                    a0:72:31:1b:57:23:7d:ad:5c:f1:c5:7d:74:ff:c6:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:29:F4:B5:8A:ED:FA:49:F5:C3:9D:FB:69:2E:96:B4:8C:D1:EF:7D
            X509v3 Authority Key Identifier:
                keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:43:10:64:05:04:e6:03:ef:24:d7:d6:fd:8e:26:43:43:57:
         0b:64:77:0f:80:82:46:d2:93:ff:f4:1d:52:7c:dd:af:f7:88:
         20:4b:9b:93:eb:34:40:98:30:92:fe:3f:22:fd:d9:9d:af:11:
         78:cb:e7:d9:dc:09:32:19:ad:f2:1d:74:8e:a2:6c:ea:86:b4:
         42:c2:e3:36:af:f9:78:79:9c:d3:d8:4a:d3:8f:14:dc:2f:ff:
         7a:8e:02:03:1b:07:94:1d:71:35:dc:bc:f9:5c:2a:77:bd:7d:
         1c:5b:0c:38:eb:36:5c:be:71:c8:49:15:ac:3b:6b:dd:d0:93:
         e5:4b:d1:3a:0c:59:2e:fb:eb:fe:fa:f9:79:7e:bf:a2:77:b7:
         53:6d:55:90:bb:29:e1:ae:aa:36:58:a6:48:46:30:e0:a7:c0:
         57:8f:c4:23:56:78:ae:38:ee:b4:8b:ad:74:a6:c3:b7:af:c2:
         c3:f7:98:5e:c4:98:b7:0e:28:c6:cb:16:69:1d:70:9c:0c:c1:
         e1:1b:51:02:5e:d7:01:7b:c0:8c:1b:35:98:0a:16:1b:ff:ba:
         17:6e:47:9c:31:7e:02:be:f7:bc:76:f0:8a:65:06:93:1f:03:
         c6:bc:07:7b:09:ca:3e:a4:5b:dc:f1:f4:41:99:43:76:4a:8b:
         c4:be:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:13:15 2026 by rpki-client