Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/07D1B6FC38CF11F1A1A095919E833773.roa
File:                     07D1B6FC38CF11F1A1A095919E833773.roa (raw, json)
Hash identifier:          ZkQAnp0lRERbmMA1/RjVQsfhBU7hZ8rgz7dbI/EiSA0=
Subject key identifier:   7E:43:89:65:76:70:D1:A0:77:32:0D:C6:8A:2E:67:C5:E4:15:84:A7
Certificate issuer:       /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial:       096D
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/07D1B6FC38CF11F1A1A095919E833773.roa
Signing time:             Fri 24 Apr 2026 05:21:55 +0000
ROA not before:           Fri 24 Apr 2026 05:21:55 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        103.5.250.0/24 maxlen: 24
                          103.13.44.0/24 maxlen: 24
                          103.13.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
                          rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413 (0x96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
        Validity
            Not Before: Apr 24 05:21:55 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69eafdf3-4675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:d1:61:7c:d0:ad:85:2d:28:ef:5d:c1:73:
                    8b:dc:01:d1:32:78:a4:8e:a3:b5:f9:12:82:bd:ed:
                    86:a0:f0:b1:6f:71:d1:3d:b8:a1:0d:ff:3d:aa:df:
                    9e:c2:34:23:6f:fd:cc:c6:9a:7b:fd:8b:15:81:a5:
                    47:b4:57:20:1f:b8:9d:c2:e0:a5:5c:b1:fd:26:b8:
                    ba:a2:ef:7c:8e:44:8a:ef:8e:c6:ae:bc:1b:b6:e2:
                    43:7c:ca:cb:86:06:4f:53:c5:67:31:45:37:8d:d8:
                    5e:41:9a:a3:87:a7:72:68:16:51:fc:7d:ab:82:60:
                    6a:0d:ed:24:7a:5a:ab:98:c9:7b:40:b3:57:e0:ad:
                    ad:f8:19:e8:d8:7e:2a:a9:a5:f4:0f:a5:36:0a:21:
                    92:16:81:3c:8f:d0:b4:57:31:bc:05:58:ec:d6:00:
                    ec:e6:c4:38:5b:0b:a6:55:f5:29:be:e4:58:eb:b8:
                    58:5f:1c:e1:bc:af:ed:2f:36:ce:57:6d:2e:d6:98:
                    79:3c:3d:1d:2f:58:db:29:16:4e:5c:b9:15:7a:af:
                    2f:d1:a3:46:04:21:3d:c6:86:13:59:51:13:4e:30:
                    b5:d6:b4:04:95:48:44:ae:f6:91:b9:d3:a7:5f:40:
                    0d:9a:38:e4:4f:9d:45:e5:86:d8:1b:8c:e8:60:27:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:43:89:65:76:70:D1:A0:77:32:0D:C6:8A:2E:67:C5:E4:15:84:A7
            X509v3 Authority Key Identifier:
                keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/07D1B6FC38CF11F1A1A095919E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.250.0/24
                  103.13.44.0/24
                  103.13.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f6:58:a8:d2:84:f4:d1:69:32:5e:8b:ab:e1:a9:19:ae:8e:2c:
         88:f9:cb:6a:05:ad:6d:19:2d:a1:8f:f2:de:dd:24:e8:43:6c:
         f2:6a:b4:b4:c9:f9:1e:90:7e:09:35:e1:38:43:97:37:90:d9:
         3b:8d:c3:0e:87:a3:51:c3:6e:29:90:74:78:4e:e5:b7:0c:35:
         24:a4:45:c0:8f:57:54:7b:b2:28:59:79:52:66:b9:29:26:51:
         13:25:96:6a:fd:62:68:e0:9a:2e:ba:10:ce:ef:57:36:93:35:
         3c:06:a1:ad:b2:6d:b0:d2:65:93:ba:d6:20:bb:69:c6:b0:26:
         28:9a:94:4d:8f:99:45:8f:57:72:bf:29:25:6b:35:f5:92:c5:
         78:77:1e:d6:70:c0:eb:4f:ee:ea:07:8a:0d:9a:d0:ee:7d:a2:
         64:11:c9:93:c6:99:62:ea:ea:00:2e:74:21:be:a7:cf:99:7d:
         5b:3d:9e:9e:34:fe:de:e4:29:2e:c2:73:9c:d2:6c:51:fd:79:
         b0:c8:5a:db:2e:bc:eb:c3:86:b3:6d:da:49:c3:36:3a:b3:bc:
         49:55:4c:3c:9e:f2:bd:3f:c3:bc:69:9a:63:e6:9c:b3:4a:39:
         1e:bd:b3:80:40:7b:10:e3:69:c8:d7:74:9e:a7:65:60:6a:9e:
         27:4e:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:51 2026 by rpki-client