Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/A0B44D9C60E211EFB1283930C4F9AE02.roa
File:                     A0B44D9C60E211EFB1283930C4F9AE02.roa (raw, json)
Hash identifier:          0cQ7lL+Dgw4MdHfwJ/NaEJmV6pZpv3TD2ijoWRCbMbA=
Subject key identifier:   42:52:EC:18:CF:26:7A:69:C6:77:77:57:7E:06:7F:57:68:DF:5D:FD
Certificate issuer:       /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial:       0170
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/A0B44D9C60E211EFB1283930C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:38:20 +0000
ROA not before:           Fri 03 Oct 2025 05:32:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153306
IP address blocks:        103.111.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
                          rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
        Validity
            Not Before: Oct  3 05:32:10 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a592cc-f379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7e:8c:3c:36:75:d3:ab:7d:71:ab:f8:f4:89:
                    53:24:98:27:eb:96:e4:a7:e4:2d:e4:85:1a:d6:2b:
                    0a:20:39:59:40:ac:fe:52:8e:a4:61:59:59:95:ac:
                    2a:a5:6d:97:9c:fd:d8:25:3c:a5:38:66:8b:48:d7:
                    9e:30:69:e1:5b:35:b2:e7:6f:10:e6:55:6a:a4:0a:
                    06:27:c4:ef:af:3e:c9:a0:63:58:4f:7e:46:75:90:
                    8f:5a:82:72:bf:1e:f3:e9:63:dc:f4:5f:01:7a:3e:
                    e8:d1:ca:e7:7a:35:c1:b4:3b:21:ba:d9:ac:7c:b9:
                    a2:37:3f:e7:43:d4:17:28:8b:3b:73:cd:23:09:ef:
                    9e:d4:89:39:cb:86:51:d8:93:d6:fd:2f:8c:ed:ce:
                    1d:55:79:ec:d6:53:c2:a5:b3:3d:40:06:ad:1e:eb:
                    9e:f4:4d:65:30:d8:2b:bf:23:5e:2c:c4:4b:2a:6c:
                    92:c9:5f:57:71:0e:32:cc:74:a5:f4:12:60:ee:de:
                    91:4b:d8:73:10:b2:1d:37:bd:05:1f:98:1c:fe:19:
                    8d:76:40:0b:23:10:d5:f6:69:04:ce:b6:5c:4e:1d:
                    3c:49:d4:36:f5:38:a4:b0:9a:74:c8:f3:38:9f:92:
                    5b:80:48:c3:50:9c:02:e6:00:a7:82:7f:17:4c:b5:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:52:EC:18:CF:26:7A:69:C6:77:77:57:7E:06:7F:57:68:DF:5D:FD
            X509v3 Authority Key Identifier:
                keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/A0B44D9C60E211EFB1283930C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:22:03:28:d6:71:a3:a8:86:39:f8:c4:bc:ed:0d:11:7d:f6:
         ab:1f:80:bb:cd:8d:3c:84:f2:7a:43:1c:08:2c:d3:28:bb:21:
         9a:86:47:b7:17:2e:88:a6:1e:63:ff:f0:12:a3:ae:c0:6c:19:
         b5:06:81:b8:12:ea:19:7b:b5:50:01:2f:17:12:19:53:44:1a:
         b1:bc:ba:59:f9:2b:fc:d3:51:4f:84:fb:6e:15:71:32:68:a2:
         e9:79:a4:c7:e2:66:65:ff:60:cb:3b:f5:75:d5:e7:43:b3:9c:
         f7:5f:13:46:72:21:44:42:a1:39:9c:76:6f:d3:0c:00:72:c4:
         a3:a4:10:89:7f:c1:5e:bf:1b:b5:5a:b3:8e:c0:91:76:52:81:
         b9:4b:4f:0f:96:92:77:f1:c1:b6:7e:9f:60:3a:85:ae:a6:a2:
         dd:f6:b4:f9:0a:1f:f7:8a:80:7b:15:47:52:fe:31:4d:60:9d:
         54:da:bd:e0:59:8a:bf:ca:23:2f:0a:d3:c0:c5:8d:3f:a3:c7:
         fd:31:d5:ee:7c:0a:89:a1:41:05:bd:40:92:7d:fc:b0:df:a5:
         30:c7:a0:e9:67:19:7d:b6:21:c0:14:f0:95:19:8d:28:ae:40:
         3f:32:b0:24:72:c4:4f:ea:fd:bb:a9:38:02:6d:64:ef:d0:f6:
         e9:b4:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:27 2026 by rpki-client