Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa
File:                     EAD89080BA8B11EDB9005884C4F9AE02.roa (raw, json)
Hash identifier:          Rgj1HrkRtnUk7tv3nX5Gs3LS5jWXcpehIhuMqvVKIYY=
Subject key identifier:   B6:3C:77:F6:D2:9E:90:6A:61:60:E0:0A:D0:C1:48:AE:5C:7B:51:16
Certificate issuer:       /CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
Certificate serial:       0245
Authority key identifier: C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa
Signing time:             Sat 21 Mar 2026 02:36:44 +0000
ROA not before:           Sat 21 Mar 2026 02:36:44 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     150782
IP address blocks:        103.197.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl
                          rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180882, serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
        Validity
            Not Before: Mar 21 02:36:44 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69be043c-b98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:61:b5:cf:c3:ea:f6:a6:16:08:8f:6d:c1:
                    8a:60:19:df:39:a4:26:7c:72:17:38:d8:6c:66:09:
                    af:18:3a:09:b6:ae:bf:2a:ce:9d:f6:1c:9f:3d:bd:
                    b3:16:f3:78:07:f2:fe:c3:18:7c:ab:21:48:bd:1b:
                    e5:80:4f:24:2d:c9:37:21:8d:5b:55:ea:8c:3e:41:
                    b5:c4:2f:13:22:37:fd:8b:38:a0:81:26:7b:4a:5c:
                    50:8b:72:01:b5:39:92:01:0f:b6:48:1c:05:97:03:
                    69:5e:06:11:de:a6:40:5a:ad:5e:e4:f9:96:d8:1e:
                    3e:12:4e:e0:15:f0:02:f8:9f:24:d4:77:72:e4:c1:
                    9d:a2:32:e4:c9:53:45:2f:a8:26:dc:0a:51:9d:65:
                    82:70:07:98:6c:fe:c7:d9:7f:bf:65:20:c9:53:4a:
                    31:8c:ba:f1:8f:57:bd:fa:d6:ad:cb:8e:08:8b:9a:
                    3a:26:52:41:89:5b:da:e0:26:6d:50:f1:ba:dd:a9:
                    89:41:48:9d:61:95:75:74:16:78:e8:57:07:a6:b9:
                    cb:6a:af:b3:14:8c:62:49:23:a6:0d:83:27:b1:ab:
                    69:e5:2e:d3:14:ea:fe:4e:54:13:46:e5:6c:9a:d1:
                    a5:c4:ba:a3:01:57:1a:63:1a:b9:0f:55:9a:74:b8:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:77:F6:D2:9E:90:6A:61:60:E0:0A:D0:C1:48:AE:5C:7B:51:16
            X509v3 Authority Key Identifier:
                keyid:C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ad:e1:bf:43:21:b7:ba:43:72:89:41:57:22:4f:9f:8b:d9:
         a5:29:f9:4d:7a:13:be:7b:75:a8:30:7d:48:71:c6:71:25:a9:
         13:65:be:34:1b:be:a4:83:1a:42:48:06:b8:01:3b:7a:cf:1e:
         2a:7b:5a:1e:34:ea:ce:8c:50:d1:c2:b0:1e:70:4e:ac:ce:96:
         11:5f:c1:1b:f3:13:02:7e:db:25:18:6f:52:b0:86:60:57:a3:
         56:d6:46:54:99:4d:a0:e3:3a:d3:46:27:7e:79:28:f5:01:11:
         06:ec:f9:5b:4d:d7:37:f2:fd:9a:63:f0:23:e6:70:65:63:f1:
         00:87:8d:ca:e7:f1:05:26:fe:f1:a6:ee:8c:cb:b1:26:16:8f:
         6d:16:7b:56:8c:16:e5:fb:82:05:1d:51:a2:3d:4c:dc:0e:a1:
         cb:4d:f0:cc:1c:70:cd:3c:ff:bd:eb:35:69:b8:e9:62:2c:a8:
         91:e8:ed:e4:c2:ae:13:a3:cc:41:c5:df:96:42:11:8f:dd:6e:
         af:fe:22:3e:91:21:03:ff:41:66:9b:93:8c:07:0f:eb:2f:66:
         03:1b:db:ee:c1:9f:6c:23:a7:59:e4:d6:ec:97:90:e6:cd:df:
         4a:09:71:a8:a3:c0:64:bf:01:ca:52:51:6d:53:be:13:20:3c:
         7c:b0:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:27 2026 by rpki-client