Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/E26269722E3811EFA4AF2445C4F9AE02.roa
File:                     E26269722E3811EFA4AF2445C4F9AE02.roa (raw, json)
Hash identifier:          SBh7/ucfyQHiZDQqOYlLERzU0mOVNQDSYZbvPKFmV+k=
Subject key identifier:   AF:DE:C6:E0:50:9D:E5:D1:49:FF:A9:E8:A1:93:84:BF:7F:7B:CD:6B
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       01DF
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/E26269722E3811EFA4AF2445C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:21:58 +0000
ROA not before:           Fri 29 Aug 2025 05:25:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     210488
IP address blocks:        103.118.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Aug 29 05:25:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a59d05-d06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:f1:28:de:7c:e1:5e:2a:b1:bf:43:63:a0:
                    63:16:c7:f3:ec:4c:ea:9f:b5:4d:c6:8b:f8:34:df:
                    76:13:8b:74:4f:68:30:05:3c:c7:d4:04:45:d8:fc:
                    eb:ee:a7:cc:08:c7:07:28:fe:21:81:c5:d6:c0:50:
                    9b:e7:b0:dc:57:07:d9:39:bd:8a:0d:8c:e2:12:3c:
                    e6:a6:71:af:10:1a:87:e7:8f:d6:1c:a8:28:a9:c7:
                    d7:21:3d:31:a0:b1:8e:4e:01:35:34:eb:48:fb:ac:
                    6c:05:af:cc:4f:67:63:4d:e4:b7:93:f6:e4:f3:80:
                    de:3d:50:c3:fc:72:34:4c:0a:3b:0e:ff:00:1f:57:
                    68:ec:17:44:da:40:81:d1:a4:4b:50:d6:00:d1:28:
                    2b:31:84:9b:a2:5b:b2:6f:6b:f1:56:13:c5:07:d6:
                    7b:20:be:16:b1:52:7d:b3:98:c9:77:b6:ad:a3:9b:
                    ea:a0:45:67:02:8d:2c:45:d5:ae:f4:c5:14:88:e7:
                    72:99:f1:0f:22:a3:7b:17:4e:73:ab:f4:3e:93:b9:
                    8c:ed:e5:12:d9:27:5c:c2:89:ee:34:a4:c0:36:4d:
                    93:c1:49:4c:82:f7:f7:d7:da:2e:f2:13:dc:28:32:
                    d0:6c:65:41:a0:7a:96:f9:70:20:7c:62:6b:41:43:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DE:C6:E0:50:9D:E5:D1:49:FF:A9:E8:A1:93:84:BF:7F:7B:CD:6B
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/E26269722E3811EFA4AF2445C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:db:16:1b:a9:f9:83:29:d2:22:a8:04:5d:dc:cf:7c:24:7d:
         fd:91:a8:d5:b9:52:98:6b:7a:12:02:92:52:7c:44:91:3f:4f:
         70:16:5d:08:c9:b0:b3:d7:22:7c:0f:16:71:d7:e0:d1:07:36:
         44:3e:fb:30:97:7d:c3:6f:62:61:24:11:86:2a:d4:2c:32:14:
         71:49:cd:84:16:30:0a:74:f2:b3:a7:87:89:12:b6:00:ad:12:
         e9:78:e5:dc:58:e8:e7:73:1e:d4:22:17:1d:80:a3:5f:d9:c1:
         21:68:48:6f:51:74:51:a1:a9:6a:b9:a3:d4:a0:a2:fa:d2:f7:
         b8:36:9b:b9:09:68:0c:9b:6b:68:1f:95:c3:2d:85:d4:ff:8f:
         c7:30:37:7b:6c:b9:27:6c:a5:01:ec:ec:a6:d5:4b:7e:05:fe:
         f7:b2:f3:b5:4f:c2:8c:86:63:49:9e:80:3d:dd:1c:7c:fc:eb:
         16:d8:ab:f4:9c:c0:cf:39:a7:df:6c:f9:95:67:12:f3:38:60:
         10:5d:f0:95:87:2a:a4:e5:c1:55:1e:98:77:f9:aa:e3:58:08:
         7d:d1:35:69:26:7e:d2:d9:ea:ff:92:e5:52:f5:bf:96:64:41:
         c2:9d:36:34:6e:7b:28:22:b5:f0:5c:a6:3f:60:c3:16:9b:d8:
         f3:ee:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:18 2026 by rpki-client