Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/4394064223D511EF9AB13E4FC4F9AE02.roa
File:                     4394064223D511EF9AB13E4FC4F9AE02.roa (raw, json)
Hash identifier:          m9PVqT0U37yXO4ZBkmsSwAW86j+V8m+FgHiO1R6bfj0=
Subject key identifier:   84:4C:AF:8E:BB:C0:B6:20:BF:45:5D:62:C0:E2:AF:34:E5:91:AF:0C
Certificate issuer:       /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Certificate serial:       014A
Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/4394064223D511EF9AB13E4FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:16:45 +0000
ROA not before:           Sun 03 Aug 2025 06:13:10 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24183
IP address blocks:        103.111.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
                          rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
        Validity
            Not Before: Aug  3 06:13:10 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58dbd-021a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:2b:d9:00:53:7c:12:50:d1:18:52:12:56:
                    89:a8:ba:90:e0:38:13:7e:bd:c5:d3:d6:cf:27:ae:
                    df:6e:d3:f6:a0:1d:33:a8:57:f3:88:91:03:2f:15:
                    0c:43:72:1d:8e:7b:7d:27:0d:72:51:7a:ef:ee:c4:
                    99:2a:e6:9e:55:b0:9b:0e:dc:e1:d6:4a:81:75:06:
                    a8:fd:2e:03:01:36:0e:86:84:23:83:19:04:3f:65:
                    37:fb:e3:cf:80:1c:4f:15:c9:ab:7e:28:92:e1:63:
                    86:94:a1:20:42:fe:a2:a7:0e:b2:9a:0e:3c:49:7e:
                    cb:ea:fd:52:8f:98:af:6b:7d:96:74:ab:e7:a7:20:
                    44:b2:73:46:57:46:ec:a2:35:c9:1b:ad:52:35:ef:
                    f7:28:40:4d:76:c4:7d:41:dc:fa:cf:fa:83:59:4a:
                    90:35:90:56:88:02:d0:96:86:e0:c4:bb:7b:50:1b:
                    88:c2:21:44:46:04:a8:38:d1:74:74:1f:a8:8c:ef:
                    5b:50:69:71:dd:f7:5a:dd:32:27:9a:eb:57:f6:6e:
                    66:46:eb:11:b4:8c:67:b3:a2:9a:0c:d1:ad:e8:b3:
                    9e:bb:9c:fb:8b:79:38:9a:17:48:7f:ab:ce:e7:9e:
                    55:07:60:2e:20:6a:9e:dd:1c:51:8b:f5:2d:3d:fd:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4C:AF:8E:BB:C0:B6:20:BF:45:5D:62:C0:E2:AF:34:E5:91:AF:0C
            X509v3 Authority Key Identifier:
                keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/4394064223D511EF9AB13E4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:45:ea:e2:c0:c3:65:a7:93:2e:d1:68:5b:37:21:ab:59:
         8a:9a:29:c5:51:d0:4b:79:db:b0:2a:50:d9:bc:a6:fc:ee:be:
         c0:7e:58:d1:99:36:c0:67:7c:20:02:d1:aa:f3:8a:76:bd:a7:
         d0:43:7f:6c:64:57:2c:63:32:5b:35:a4:3f:18:13:86:28:3a:
         b5:a1:dc:4d:c6:fe:ee:06:26:f4:2d:90:39:3e:d7:f3:2c:15:
         c8:f2:c6:db:54:5d:21:1b:00:4e:61:64:a8:d8:32:b8:cf:18:
         44:3e:f3:7c:a6:61:34:85:48:90:e4:b5:27:f1:f5:c1:cd:ee:
         7b:76:b1:c3:f4:c2:76:45:8f:75:19:8a:d7:bb:cf:06:d0:37:
         2d:96:c1:98:fc:53:f6:f5:30:5e:35:0e:03:c4:c0:0a:45:ab:
         f4:cf:86:0e:d5:02:f8:90:78:64:2f:2e:85:b0:53:35:0c:25:
         4f:96:72:90:2b:a3:15:09:aa:3d:ee:22:fd:04:ab:76:c6:63:
         74:78:09:97:74:1a:e5:17:da:7c:25:d1:8b:c8:2f:5c:16:18:
         0e:99:2d:50:9a:32:41:ed:00:df:4e:8b:85:71:7f:50:92:22:
         50:95:86:f1:28:12:06:80:fe:8e:c7:21:67:32:4a:ff:00:ca:
         fb:e5:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:02:20 2026 by rpki-client