Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
File:                     4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (raw, json)
Hash identifier:          8hPdJ+q+s4j61afe+3Feh7lBjaDcubwrfYqwZ4evmJc=
Subject key identifier:   DA:24:EF:3D:4C:F6:36:68:E1:44:96:A4:4F:A8:1E:4D:D6:36:F4:EB
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1A78
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
Signing time:             Wed 22 Apr 2026 17:20:46 +0000
ROA not before:           Wed 22 Apr 2026 17:20:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135523
IP address blocks:        103.70.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6776 (0x1a78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Apr 22 17:20:46 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69e9036e-0e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:70:e8:b7:de:9f:31:34:23:0e:1f:dc:24:c1:
                    36:d5:c0:61:c8:a2:47:01:53:7c:a2:d5:3a:b6:57:
                    95:91:39:95:8b:f0:4b:eb:6f:68:84:25:7c:f2:77:
                    da:07:9d:3b:ac:dc:7e:48:d9:0c:01:c8:77:8f:60:
                    d6:5c:74:fa:d3:8a:23:bb:12:9e:ff:ec:4c:75:b9:
                    eb:d3:c0:49:a2:d1:b0:a8:17:85:77:58:7f:ab:00:
                    97:7e:5d:d8:23:7f:44:d5:c4:11:17:b9:e3:55:ea:
                    78:c0:d7:16:3d:b2:84:54:47:f1:40:58:c1:70:af:
                    4a:97:d0:66:3c:a9:f5:fb:15:0a:2e:1e:74:11:62:
                    5c:88:77:ca:9d:bc:7d:f3:21:e2:14:c9:d2:f5:35:
                    d9:59:63:a2:f9:1f:8b:36:34:2b:4e:93:56:4e:14:
                    48:75:f1:3b:e7:90:1b:83:c9:5f:7f:fe:19:03:11:
                    07:6d:5e:24:04:c7:69:26:b5:c7:87:50:d2:cd:b4:
                    c0:34:2d:41:6b:90:18:9a:5a:bd:f5:e6:5c:e0:f8:
                    c0:fa:59:3c:c3:c3:e5:9e:14:26:a5:39:e2:0a:9d:
                    11:cc:e9:f3:31:4e:a5:04:7d:1d:b1:e3:49:f8:af:
                    6e:ab:f2:23:f7:43:41:cc:84:5b:56:b1:33:9c:a1:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:24:EF:3D:4C:F6:36:68:E1:44:96:A4:4F:A8:1E:4D:D6:36:F4:EB
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:e9:36:06:9c:b6:5c:0b:b1:91:3c:cc:05:a4:ff:7b:93:6c:
         a3:e8:11:a0:f5:8c:48:13:37:11:27:ba:55:0b:2d:f5:aa:d0:
         65:0f:fc:bc:74:66:ad:00:0d:9f:ec:6a:98:60:3c:84:28:db:
         45:c2:dd:1b:f7:17:42:f6:83:ad:4c:50:f8:e0:a6:2d:92:19:
         76:df:00:7e:e4:17:e5:0b:cc:b2:20:6b:77:f9:39:14:7b:79:
         15:66:9c:27:5a:33:40:b9:e2:e6:a6:5a:bf:bd:79:27:eb:65:
         8e:69:ca:bc:24:73:5f:85:cb:34:34:c5:0b:00:87:42:e7:6b:
         fc:97:0c:15:e6:43:09:62:3a:07:a7:be:9c:cf:b0:4b:c9:36:
         cd:80:5f:5b:71:07:50:86:0b:72:7e:58:f7:93:02:11:0d:be:
         76:60:a0:61:3a:b0:9c:01:de:2b:49:00:6c:fe:9c:4c:fb:8c:
         4b:e1:68:f2:fc:9f:dd:fd:2e:25:95:47:9d:ed:d3:7d:b3:be:
         d7:c4:54:77:9e:9c:93:d6:88:02:72:ec:5c:76:42:ba:80:96:
         f8:57:2e:68:b0:b7:63:7f:6f:86:5e:63:fb:af:b6:03:1f:ac:
         a6:a1:ba:19:a8:af:fb:c9:fd:9d:e6:44:d3:2d:f6:84:6f:e2:
         ca:c5:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:27 2026 by rpki-client