Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa
File:                     851D827C977511EBA99DCE72C4F9AE02.roa (raw, json)
Hash identifier:          wYQ1hETv3Dug/BOtfh0DkiLj4AqsvILr8R8QLEmBq3M=
Subject key identifier:   31:F4:5C:2E:A6:57:4C:9D:B5:C9:62:58:4D:EB:78:CD:C0:F1:5C:BE
Certificate issuer:       /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Certificate serial:       06DF
Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa
Signing time:             Tue 28 Apr 2026 23:29:00 +0000
ROA not before:           Tue 28 Apr 2026 23:29:00 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     137069
IP address blocks:        103.164.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
                          rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
        Validity
            Not Before: Apr 28 23:29:00 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f142bc-abce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d1:b6:5d:57:f0:09:50:40:24:44:ee:fa:73:
                    a9:a8:78:76:27:f8:9b:90:97:3a:6f:60:a9:6d:0d:
                    f9:18:3a:8f:a0:92:e1:a7:d5:58:7c:04:58:61:1a:
                    20:0c:05:1d:75:f8:86:8c:d3:d6:e7:0a:1c:5d:9e:
                    db:63:95:e3:42:21:1e:9c:43:2c:0b:e8:57:30:ec:
                    65:31:3f:76:0a:98:34:3f:e2:30:e1:2c:dd:b6:c7:
                    6a:89:06:96:28:b6:3f:48:8c:ab:87:50:d7:d2:7f:
                    6e:7e:90:bd:ad:c4:a3:b9:cd:ae:ad:01:99:68:56:
                    ab:aa:7d:b1:cd:42:26:4c:b2:fb:02:b6:49:25:11:
                    3f:be:94:32:11:bb:11:08:dc:f6:3f:db:34:d3:cb:
                    b4:c4:85:f6:fe:03:52:ee:d9:af:31:81:10:63:4e:
                    ab:c0:3e:d8:c0:e2:27:d6:61:34:56:23:c1:00:d9:
                    0d:ff:7f:32:21:31:3b:4d:f6:28:d8:dc:42:80:3e:
                    4e:0a:c1:54:5d:83:d6:6a:ef:e9:7c:74:6f:c1:51:
                    d0:26:4c:67:ac:62:64:d4:6d:6c:2d:4f:41:84:02:
                    d1:8b:c5:47:9f:55:a9:90:ad:17:12:03:7d:d1:43:
                    65:6a:74:0d:a1:49:53:06:a7:1e:99:8d:19:f4:c6:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:5C:2E:A6:57:4C:9D:B5:C9:62:58:4D:EB:78:CD:C0:F1:5C:BE
            X509v3 Authority Key Identifier:
                keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:1d:7e:cb:61:f9:38:11:3c:d1:3f:0d:b4:c4:a9:2f:69:
         ae:5b:e4:d5:ab:84:8c:d1:a4:62:be:e8:4c:80:85:84:a6:8b:
         36:93:73:40:91:3b:45:87:b1:03:21:2e:c5:81:f6:da:05:ca:
         c7:66:f7:cb:e2:78:e1:54:08:52:39:e7:49:2c:38:0a:b6:7c:
         d2:6e:9c:91:1f:e8:32:52:dc:19:9d:66:a1:13:82:0c:6f:4a:
         53:3f:e9:e3:62:5b:2c:81:36:f2:ae:28:d4:63:26:cf:ad:02:
         7d:12:2b:84:9a:4e:9e:7a:30:b5:18:4d:e4:91:ea:57:b7:73:
         d2:75:c2:70:86:29:b9:8e:b3:a9:27:2e:5a:b6:cf:56:54:b8:
         59:c1:e0:4b:ea:1b:b4:83:92:b6:ac:f6:70:ad:f2:f6:eb:48:
         95:a2:06:d2:ef:42:f5:5c:2b:58:eb:9c:78:0f:4b:ed:74:6c:
         29:2f:47:1a:2b:d6:e1:86:00:89:e3:a2:6b:ec:36:00:b1:19:
         09:49:ce:5e:fb:7d:72:9a:00:aa:c5:5d:7d:12:cf:68:6f:ee:
         8e:10:d2:07:66:96:91:0b:df:d4:63:83:bc:65:a5:78:1d:b8:
         52:95:ff:61:92:1c:e9:1c:0f:3c:02:78:59:7e:20:07:67:93:
         fe:4c:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:45 2026 by rpki-client