Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/A48F17F6406411EF96445E28C4F9AE02.roa
File:                     A48F17F6406411EF96445E28C4F9AE02.roa (raw, json)
Hash identifier:          D/cAvWNWTmPwXLmScRIEG1LBNudgkixYFznvw6pGA48=
Subject key identifier:   5D:55:21:D9:39:A8:40:72:F4:62:68:EE:34:99:1E:A5:32:61:1C:17
Certificate issuer:       /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial:       013C
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/A48F17F6406411EF96445E28C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:45:58 +0000
ROA not before:           Tue 03 Mar 2026 05:45:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     56067
IP address blocks:        103.30.124.0/22 maxlen: 22
                          103.30.124.0/24 maxlen: 24
                          103.30.125.0/24 maxlen: 24
                          103.30.126.0/24 maxlen: 24
                          103.30.127.0/24 maxlen: 24
                          2404:8240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
                          rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
        Validity
            Not Before: Mar  3 05:45:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a67596-6d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ca:17:04:4c:b4:98:7e:a6:8f:3d:20:31:4c:
                    00:05:70:a6:3a:47:aa:63:c4:2d:a6:0a:2b:5c:9b:
                    24:73:1a:03:cb:c6:af:4d:c2:3f:42:1d:1a:0c:3d:
                    61:e2:8a:28:78:a0:5a:5e:93:b8:5a:d1:88:eb:5c:
                    10:a9:3a:3a:42:f3:6b:69:d5:d1:29:ee:0a:e4:c8:
                    b4:2e:85:eb:fb:99:7a:c2:aa:ad:44:64:3c:69:86:
                    29:63:59:35:5e:ac:ba:db:0e:2f:f2:3c:fa:58:88:
                    5f:96:04:d4:7a:19:05:68:6e:7c:4c:52:3d:f9:a2:
                    14:5b:4e:c4:21:40:73:4d:fb:4f:fc:23:3d:c6:c5:
                    6c:51:1b:9b:1f:58:a1:bb:49:01:bf:47:33:63:68:
                    29:5e:0c:10:0e:53:ff:da:0e:85:0f:2b:df:85:ea:
                    ef:83:f9:79:18:9c:32:64:60:57:b4:a5:fe:74:2b:
                    25:96:1b:0e:30:0d:8a:a6:50:90:21:64:7b:7e:3b:
                    02:43:96:15:b8:8a:db:b9:51:fb:de:d5:93:22:0b:
                    14:33:67:a9:c0:76:bd:b3:7a:98:33:b0:3e:10:91:
                    ac:2f:d7:93:ca:f6:33:9c:58:09:81:5a:66:e9:88:
                    a6:2a:fb:a3:9d:2d:8d:95:a7:0b:33:4b:5b:a7:41:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:55:21:D9:39:A8:40:72:F4:62:68:EE:34:99:1E:A5:32:61:1C:17
            X509v3 Authority Key Identifier:
                keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/A48F17F6406411EF96445E28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.124.0/22
                IPv6:
                  2404:8240::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:80:c7:66:ff:5b:be:06:de:78:76:a9:6f:f9:78:72:89:c0:
         24:ea:2f:b9:d8:14:04:77:c1:91:d3:ea:73:7f:60:64:7f:29:
         c7:f0:40:d7:59:dc:ff:1d:96:41:5b:b2:85:9d:1f:3e:f4:f9:
         db:fc:13:d8:2a:c8:e9:cc:3b:79:3a:9f:fe:8f:b3:c0:0e:c6:
         83:2e:a9:ef:42:b8:b0:29:de:67:2d:9d:d2:37:74:91:09:b7:
         c7:d3:6b:18:08:0c:06:3d:63:d7:20:ec:86:5a:c3:d7:f3:41:
         47:9b:de:10:ae:68:39:0c:e9:96:fa:55:06:44:e4:78:68:09:
         b6:04:bf:08:33:8d:06:9f:2a:5f:f4:e6:f1:33:73:c3:eb:e5:
         a8:15:ff:c3:45:d7:d7:0d:27:a5:dd:9b:88:4a:49:40:96:6f:
         15:2c:1c:5a:c9:89:f4:de:00:81:ef:20:df:8c:e9:06:93:65:
         df:8b:16:78:ed:ed:ff:50:a2:48:1d:0d:c6:19:b9:ae:10:81:
         63:2f:42:e6:26:81:f1:5a:72:af:55:2d:ba:e2:f4:e0:69:a3:
         3b:22:d7:d9:b1:df:a0:ba:dd:3e:47:89:8f:68:43:bb:9b:e3:
         6b:76:fc:1d:70:51:d9:e3:48:de:1e:42:8e:93:65:96:0e:b4:
         48:74:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:50 2026 by rpki-client