Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/26010A0605EF11F09181F913C4F9AE02.roa
File:                     26010A0605EF11F09181F913C4F9AE02.roa (raw, json)
Hash identifier:          ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=
Subject key identifier:   11:52:6E:B7:49:E5:4C:5A:7C:00:AF:66:A1:77:3D:FE:34:82:9F:33
Certificate issuer:       /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial:       0BB3
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/26010A0605EF11F09181F913C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:44:46 +0000
ROA not before:           Sat 02 Aug 2025 19:30:28 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        103.13.212.0/24 maxlen: 24
                          103.13.213.0/24 maxlen: 24
                          103.13.214.0/24 maxlen: 24
                          103.13.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
                          rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2995 (0xbb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
        Validity
            Not Before: Aug  2 19:30:28 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a426ae-a986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:72:d0:54:a3:03:e4:b4:3a:1d:b7:bf:cc:
                    4a:5b:c7:8c:56:9e:92:c4:25:23:94:d7:e5:15:40:
                    89:0f:b0:0e:6e:50:a6:e4:b4:fc:2a:b5:92:b7:f4:
                    ee:23:c8:94:99:12:65:b2:d2:70:5c:d4:9f:e2:4b:
                    ff:db:54:a1:51:de:28:4e:1e:b7:62:06:82:ac:86:
                    ce:b5:08:13:a3:87:9a:4f:3d:14:37:b4:a8:ea:4e:
                    a5:31:e4:20:75:1e:a3:fc:99:70:40:b4:52:fe:62:
                    90:e7:bd:40:12:41:60:e6:52:36:78:ec:16:ec:9a:
                    85:08:84:ad:6f:2f:69:ed:d5:ea:20:8d:80:aa:16:
                    e4:c7:d2:e4:35:25:fd:89:c6:4e:70:37:eb:4d:9b:
                    9d:3c:67:90:b9:45:0e:e1:54:e9:49:15:21:fa:ba:
                    f1:8e:36:4e:78:b5:17:20:d2:d5:c9:b0:22:a1:15:
                    64:af:50:f2:c4:96:7e:55:0d:3d:4a:d0:dd:ea:ac:
                    41:18:67:c4:30:1b:11:ac:a1:67:75:a4:8d:77:85:
                    d7:bf:cd:22:30:55:a8:98:ea:f1:55:e5:e3:e3:9d:
                    45:aa:53:ff:cf:e9:64:e4:b0:ae:36:07:55:cd:fd:
                    23:a9:72:51:ab:f9:2a:8e:17:d8:a5:18:77:9f:aa:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:6E:B7:49:E5:4C:5A:7C:00:AF:66:A1:77:3D:FE:34:82:9F:33
            X509v3 Authority Key Identifier:
                keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/26010A0605EF11F09181F913C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:a4:c8:fd:44:67:76:29:fb:9f:aa:c8:12:ed:44:0a:66:
         1e:04:ed:3d:22:8c:53:7c:03:96:63:45:23:08:d4:6b:04:dc:
         95:c5:3c:e6:00:8a:d2:cb:56:40:64:10:cd:fd:29:36:59:2c:
         1a:e8:92:49:38:a9:66:85:13:0f:25:0b:57:79:9f:5b:85:d5:
         5b:a1:de:fa:3d:ef:bc:2e:9a:79:f1:d6:df:ae:7f:c7:b2:ed:
         1e:02:9f:c1:ca:55:11:8b:31:7e:cb:23:47:f6:1f:a4:4f:4c:
         b3:c4:77:1c:be:43:89:a7:f4:17:42:f0:75:3d:0a:3c:72:e6:
         e9:80:d6:24:bc:0f:7e:52:6e:72:f4:ca:7c:c6:d2:09:02:7d:
         2a:87:b8:b3:41:ab:75:22:64:40:5f:74:4b:b4:18:7d:6b:71:
         2c:a4:dd:b7:81:70:46:57:68:72:ad:d6:dc:2f:84:1f:bb:c5:
         3e:f4:f4:db:19:8e:0e:c9:16:2f:96:7c:2d:54:6a:d0:e2:8d:
         91:35:7e:30:3f:07:1d:b7:e6:bb:00:f8:2a:ae:99:ba:0f:0f:
         89:15:76:09:06:de:f0:87:19:4f:a0:f8:a3:22:14:8d:27:33:
         c9:09:41:dc:8e:25:99:68:93:be:b0:8f:ac:de:bc:04:0b:aa:
         70:6c:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:10 2026 by rpki-client