Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
File:                     51D4585A89B211EE9ADA615EC4F9AE02.roa (raw, json)
Hash identifier:          mMNzjo+KW1b2ntUt0cKXNQz80BGQiuXIwjeasUtwgcM=
Subject key identifier:   F4:B9:76:81:FC:8C:FF:60:D4:ED:AC:B5:16:91:D7:77:E7:70:CC:47
Certificate issuer:       /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial:       01B0
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:41:16 +0000
ROA not before:           Tue 29 Jul 2025 05:12:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137923
IP address blocks:        103.117.81.0/24 maxlen: 24
                          103.119.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
                          rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
        Validity
            Not Before: Jul 29 05:12:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3ed9c-0878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:68:5e:ee:11:b9:27:2f:64:b9:84:e9:38:
                    47:45:6a:6a:4e:4e:24:d3:77:74:03:dd:bb:b6:26:
                    c8:71:9b:d0:5a:79:34:d1:37:6b:99:5c:af:42:f0:
                    1b:4a:e6:c4:86:20:ae:68:14:19:ce:92:31:80:0c:
                    0a:e6:78:89:c0:58:7d:22:72:ed:26:d6:c0:7d:73:
                    02:a3:77:16:92:82:98:fd:46:71:89:b9:ff:33:56:
                    32:e4:07:77:5d:40:67:1b:b9:99:22:9a:78:4a:dc:
                    d5:6e:98:0c:a3:ff:f3:0b:c5:15:b0:ca:5f:ff:31:
                    77:25:10:4c:42:14:c5:96:ea:13:0e:6d:01:b4:02:
                    d2:84:fc:d0:c4:94:8d:c1:0f:44:a8:a7:48:56:e3:
                    99:be:c1:fe:73:ec:95:c9:80:a8:b8:3c:74:0c:fe:
                    38:23:52:7d:35:aa:09:33:2c:ed:e7:91:55:e9:4e:
                    44:44:d1:53:1e:5d:aa:96:24:9b:a9:1b:30:41:01:
                    85:5e:89:26:69:ff:ca:1a:e0:a1:37:03:a2:c0:b8:
                    59:a9:b7:d4:af:be:d7:21:8b:5f:aa:84:92:c3:74:
                    9b:09:73:68:4a:39:3c:4d:57:31:ff:1d:47:cd:cd:
                    ef:1a:19:fc:ef:39:b7:65:81:70:c8:53:33:e6:de:
                    79:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B9:76:81:FC:8C:FF:60:D4:ED:AC:B5:16:91:D7:77:E7:70:CC:47
            X509v3 Authority Key Identifier:
                keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.81.0/24
                  103.119.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:c1:44:fd:39:1f:dd:9c:15:1c:a1:d2:77:4e:fd:3f:47:c7:
         27:fa:4c:86:81:70:b2:39:c0:97:64:37:4a:4f:cb:1a:00:53:
         8d:38:8a:68:e6:cd:4e:38:94:26:a2:f1:0e:ea:41:3a:44:67:
         c3:44:f3:a0:0c:8c:80:5f:df:99:f0:6d:3c:00:d7:e2:ae:5e:
         cf:a8:9b:68:9e:a9:f8:55:da:36:2c:4a:d0:86:08:db:d9:74:
         f7:30:40:6f:7b:a0:d4:aa:01:1a:39:a7:43:14:e6:55:0d:d2:
         4a:c1:ac:1a:3c:40:2d:8b:bf:9a:c7:17:27:43:3f:6c:89:6f:
         14:e1:77:73:4c:98:ed:ba:4b:00:63:51:4e:28:97:a5:a4:d4:
         51:9c:11:72:35:ba:68:f6:bc:58:f1:f3:23:d3:fd:f2:96:11:
         f7:cd:b9:3b:07:ec:32:54:2d:9e:e5:43:f3:c6:02:49:87:b2:
         10:e1:51:2b:41:d7:30:b0:cc:e6:21:30:93:a7:6b:91:b1:93:
         a3:47:b6:a7:a5:5d:4b:04:70:a2:e7:1e:dc:11:de:3f:e2:9b:
         11:50:50:38:e2:75:62:0c:b8:dd:e3:38:da:84:e9:bf:5c:df:
         14:af:a4:1d:f7:98:91:57:3c:13:78:04:b1:d7:6a:24:22:9a:
         ea:c6:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:12:02 2026 by rpki-client