Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa
File:                     B0EE80B28FBB11EAA0855C73C4F9AE02.roa (raw, json)
Hash identifier:          axE8boHX8yd5f+z+47p5pFgyCJbzp0ULGAKyGmC4lXA=
Subject key identifier:   37:AC:9A:D2:D1:ED:5E:38:75:5B:95:0B:93:2B:E6:58:1B:AD:7C:D0
Certificate issuer:       /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial:       0A34
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa
Signing time:             Wed 18 Mar 2026 20:26:28 +0000
ROA not before:           Wed 18 Mar 2026 20:26:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     136030
IP address blocks:        103.85.128.0/24 maxlen: 24
                          103.85.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
                          rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2612 (0xa34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
        Validity
            Not Before: Mar 18 20:26:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bb0a74-3db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:5d:dc:aa:12:ce:50:23:ff:76:e6:cf:40:
                    94:9b:31:9e:72:42:9b:15:32:ae:a8:6b:9d:12:7a:
                    6f:e3:5f:d1:af:35:bc:fe:94:7e:7d:ef:12:50:3b:
                    fd:76:fe:1b:40:f3:22:2c:c8:3e:71:26:d3:25:ed:
                    4b:ed:d9:2f:e7:f4:90:a9:2e:e0:a6:1e:86:03:53:
                    67:0a:c0:56:e1:69:a9:da:ad:c5:5d:46:30:30:94:
                    16:25:98:d8:d7:f8:cd:68:a7:c9:a5:56:61:2c:6b:
                    f8:02:17:f5:92:7e:7a:33:3b:a3:6d:8e:89:b1:23:
                    20:7f:0b:74:36:44:bc:c8:46:dc:94:34:d5:19:b8:
                    c5:aa:5c:4b:19:d9:97:77:15:b4:ae:8b:80:d2:46:
                    6e:fa:e0:0d:c7:76:f4:ce:48:87:87:5e:44:f8:95:
                    a3:96:4b:b7:72:65:36:91:d0:08:37:5a:d0:af:8e:
                    21:fb:a3:09:2f:b3:b9:3a:6c:27:a2:3a:52:36:89:
                    c9:41:8f:ef:44:e7:f8:9a:e6:7a:f2:32:9b:fa:70:
                    c6:a1:27:ee:fe:94:0f:09:83:aa:9b:db:57:9a:88:
                    24:bd:b2:6e:44:4b:77:35:3a:6b:f3:df:d6:62:f3:
                    a7:2d:2d:77:16:9c:6b:9f:65:ce:22:49:bd:38:96:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:9A:D2:D1:ED:5E:38:75:5B:95:0B:93:2B:E6:58:1B:AD:7C:D0
            X509v3 Authority Key Identifier:
                keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.128.0/24
                  103.85.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a3:78:26:c4:dd:80:3a:29:6f:f4:47:6b:ab:78:95:66:aa:
         6a:bc:db:b1:f2:ea:a2:8f:40:c2:f1:07:b8:26:9b:e6:61:f9:
         c8:82:a5:ff:37:65:4f:e4:a5:3b:f3:1d:e9:70:cd:34:01:2f:
         c1:2e:4e:5f:50:3d:12:7b:74:0e:4d:80:9e:62:01:44:55:63:
         a0:92:ed:eb:35:22:62:66:9a:df:0d:a5:90:99:d2:41:db:a8:
         df:21:d5:c4:fe:cc:d5:9d:62:22:bf:8b:13:a8:b4:4d:42:f5:
         93:39:76:9d:89:67:5b:1d:96:1d:56:e3:d0:bb:9c:0f:9d:e8:
         f7:ee:57:a5:1f:f5:77:7d:77:5b:14:2b:dd:f5:96:80:51:5a:
         24:53:a6:0e:60:aa:fa:4e:c1:3e:6a:34:6b:31:7f:d2:7e:fe:
         41:74:8b:fb:ab:2f:4c:6d:f8:e1:2a:9c:77:7f:dc:9a:8c:8b:
         d1:1c:fe:65:4f:0e:4b:41:24:44:39:20:0d:fa:75:a4:f2:0c:
         12:39:85:5b:0c:19:cf:8b:4d:14:28:4d:89:a0:32:c8:ce:4d:
         07:bc:4a:fd:9c:63:ae:c6:1c:ff:7f:d5:15:77:2d:6b:cd:76:
         49:be:29:02:e1:9f:88:f1:72:db:2d:6d:1a:28:46:23:86:f0:
         c7:61:0f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:34 2026 by rpki-client