Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa
File:                     03D4EC14D82F11EBA454B918C4F9AE02.roa (raw, json)
Hash identifier:          TfxnYvMqsGqSHtutk4H1PEC5zPxBvYNGo/9OPc5rkx8=
Subject key identifier:   C3:AA:06:02:B5:7B:48:04:21:9E:9A:74:23:B1:FE:91:FF:4E:DC:69
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0D72
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa
Signing time:             Mon 04 May 2026 18:22:07 +0000
ROA not before:           Mon 04 May 2026 18:22:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139282
IP address blocks:        103.113.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3442 (0xd72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: May  4 18:22:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f8e3cf-178a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:91:64:5b:10:34:98:db:81:e5:d5:5f:13:
                    06:62:05:30:3e:ae:b0:e2:3f:3d:da:69:44:0a:56:
                    58:5e:10:78:80:f8:38:eb:47:f3:be:60:5d:1c:e0:
                    09:db:fe:98:29:77:55:f4:8f:42:8a:11:29:65:b4:
                    11:63:c3:19:7c:56:df:bf:44:0c:0b:a0:77:44:53:
                    9e:ce:d1:1f:fa:5d:5b:dc:f3:cb:3e:d5:99:c0:42:
                    63:d1:8a:ce:6c:85:c0:6d:9c:01:ef:98:da:fb:aa:
                    3d:10:2e:36:91:aa:c0:72:72:15:ac:0d:a5:00:ec:
                    42:ae:77:2b:23:72:9a:ad:d5:59:10:3b:76:80:6b:
                    22:81:67:0f:33:81:67:e6:f2:d3:fb:a6:29:3e:75:
                    c3:fc:2b:9e:27:a5:54:49:46:16:6a:63:2e:42:ed:
                    60:55:f0:a3:0f:e0:b0:a8:86:21:f5:03:62:64:92:
                    75:47:c0:b2:86:18:f8:1d:c5:9f:a8:e3:0c:69:91:
                    dc:e5:b9:9e:1c:0a:e0:4d:d3:78:10:9a:20:7c:ef:
                    3c:83:51:8a:ab:84:53:77:10:72:c1:f7:fc:d3:30:
                    f0:cc:87:a1:12:8c:56:46:08:33:21:0f:94:d0:45:
                    44:7b:8a:53:dd:ea:a6:74:23:fd:d1:50:18:8c:68:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AA:06:02:B5:7B:48:04:21:9E:9A:74:23:B1:FE:91:FF:4E:DC:69
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:37:e4:7e:58:9a:8a:58:b8:ce:92:28:b1:d9:73:4e:d8:4f:
         a2:63:6e:81:aa:e2:c1:c1:41:de:75:41:a7:49:96:f4:af:a1:
         c3:63:7c:c6:f1:48:e5:ef:55:be:18:88:e8:d6:d2:b7:d9:c4:
         19:9a:4e:da:5a:a3:e9:56:67:a0:7a:d3:5a:7f:d2:61:37:8d:
         bf:87:9c:c0:89:df:df:65:ba:98:c4:aa:5d:80:b9:63:41:59:
         7b:b2:b2:df:25:4a:50:d7:e4:35:53:17:0e:35:cd:ac:d6:db:
         f7:cc:8e:b7:45:47:23:b3:e1:d5:aa:42:a6:28:3d:f9:21:68:
         7d:83:9d:67:a8:61:f1:97:1f:73:ee:45:3a:09:44:99:3b:78:
         17:00:49:63:cb:da:c6:d1:cf:61:03:c0:82:01:0c:2b:6b:8d:
         44:3e:a3:40:3c:24:56:32:d3:56:bb:00:d6:8c:c3:d6:69:88:
         e5:9d:77:de:26:13:84:f3:97:42:39:9c:09:a3:e7:be:76:ce:
         d1:d6:f2:2c:2e:8c:8c:4b:be:29:9e:29:7d:68:62:1b:2c:62:
         79:82:b8:60:8a:7c:13:c9:ce:18:73:c8:f7:86:37:15:db:b7:
         10:52:f2:d1:ac:a1:d7:27:d2:af:49:e2:2c:e8:0c:fb:87:ee:
         a3:8c:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:29 2026 by rpki-client