Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa
File:                     7C616486A6EF11EF9EB0B473C4F9AE02.roa (raw, json)
Hash identifier:          nWtabR7nOhGufvq+gkx3bXJFQRRyMbogt12nPEsCiOg=
Subject key identifier:   42:8F:2E:3C:6F:78:DA:45:29:44:27:9D:45:EC:48:2D:A3:47:93:DD
Certificate issuer:       /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Certificate serial:       0113
Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa
Signing time:             Tue 21 Apr 2026 06:39:48 +0000
ROA not before:           Tue 21 Apr 2026 06:39:48 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     45476
IP address blocks:        203.208.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
                          rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
        Validity
            Not Before: Apr 21 06:39:48 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e71bb4-4493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:c6:ed:2f:87:f0:c5:b5:14:28:eb:58:18:
                    e5:4e:40:37:82:b0:37:7e:35:26:bf:97:54:1a:e7:
                    dd:56:52:f0:ca:5b:ac:a4:8d:e8:2e:7d:03:de:61:
                    50:58:ea:8f:ed:a7:52:33:76:cc:28:80:f8:aa:e5:
                    6a:4e:eb:a1:df:4a:11:88:8b:b0:ce:9e:87:6e:7d:
                    cf:bf:49:6b:af:25:60:97:50:54:71:7b:d2:8e:8c:
                    fd:4d:96:b6:d7:e2:be:63:1f:e0:6a:f1:0e:51:27:
                    2d:78:20:07:e0:70:bb:8e:71:99:e8:ef:7e:e8:e2:
                    df:70:6b:c2:a3:8e:b1:e9:41:d7:5b:84:af:3b:9f:
                    69:e2:f1:64:64:1d:89:e7:45:24:41:85:b7:44:c5:
                    46:b3:bc:24:53:44:94:fc:05:43:f7:eb:39:d6:f4:
                    05:47:6a:25:a5:da:56:ad:f9:1f:7c:4e:0c:9a:f8:
                    2f:a9:b2:92:2e:db:6f:67:50:75:3f:69:10:41:aa:
                    8c:64:89:18:9f:6b:41:ec:9e:83:53:f1:c5:dd:2f:
                    e4:72:cb:93:33:cc:58:c5:6b:46:0b:ab:85:24:e8:
                    fc:71:1a:6a:30:76:b4:2d:18:c0:0e:63:5f:50:24:
                    e7:df:36:e1:79:a5:78:43:93:56:6b:6b:66:a1:aa:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8F:2E:3C:6F:78:DA:45:29:44:27:9D:45:EC:48:2D:A3:47:93:DD
            X509v3 Authority Key Identifier:
                keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ff:6e:6c:5d:84:d0:a4:ba:c8:0b:db:3a:c2:72:21:4a:29:
         b9:48:d6:14:54:67:71:fa:6f:05:2b:97:5f:b4:c3:cb:d6:a0:
         49:fe:ce:66:f9:3a:d5:cf:a3:b2:69:8b:64:28:74:a7:6b:cc:
         28:19:a9:30:2f:ad:7f:e7:97:72:5d:a4:c6:b0:c8:f9:92:1a:
         ff:cb:d5:94:ac:38:57:d1:6a:50:b7:84:ee:2b:98:ca:3f:52:
         7f:b3:1e:17:aa:70:f6:16:f4:fe:f6:c3:3d:46:90:df:b9:0c:
         1c:02:5e:d4:11:20:98:26:39:c9:5c:f9:1a:13:c2:86:49:45:
         96:0d:20:f2:75:68:a2:1b:5e:c8:43:c2:02:f9:64:8d:e0:47:
         3d:0c:54:fc:30:91:75:05:a8:b3:0f:da:3b:44:3d:2c:ba:33:
         63:8d:e6:8d:64:b3:27:0c:3b:ff:61:32:e5:b1:ff:1e:7c:d6:
         b7:04:5d:69:36:8e:9e:7a:15:7b:70:2d:b7:5d:4b:26:fc:9f:
         ba:c9:db:25:92:56:66:72:4e:1f:5e:fc:a3:c4:a4:bb:86:f1:
         4c:5a:6a:8a:a5:0a:76:a7:49:b8:e0:79:4a:85:53:7a:63:7d:
         ad:89:bd:41:47:f4:f7:73:0e:f2:7b:24:3d:df:30:ad:62:3d:
         39:45:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:34 2026 by rpki-client