Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/50448A72911411EF9CAF3E55C4F9AE02.roa
File:                     50448A72911411EF9CAF3E55C4F9AE02.roa (raw, json)
Hash identifier:          PUCwcVB7mOMKNLxgaPflJNHZ7wfZlaCCwrgkjtHbLlA=
Subject key identifier:   A9:46:D0:94:27:30:8B:B8:F7:A8:99:57:9B:4A:2B:C9:43:A8:B1:48
Certificate issuer:       /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial:       0C53
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/50448A72911411EF9CAF3E55C4F9AE02.roa
Signing time:             Sat 04 Apr 2026 19:25:03 +0000
ROA not before:           Sat 04 Apr 2026 19:25:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136907
IP address blocks:        103.84.110.0/24 maxlen: 24
                          103.198.203.0/24 maxlen: 24
                          2404:a140:43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3155 (0xc53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
        Validity
            Not Before: Apr  4 19:25:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d1658f-9a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:37:ea:38:b5:6f:74:18:13:02:63:f5:a8:
                    9b:4f:44:7f:cb:96:ff:98:52:18:c3:f2:66:66:fc:
                    c4:41:1d:f1:a6:1e:33:57:33:f8:be:23:47:dd:d8:
                    ee:a6:41:5b:0c:d5:63:c7:fc:02:cb:88:01:29:46:
                    d0:8a:bf:74:71:53:0f:96:84:c6:a1:37:97:0f:c1:
                    a5:48:d7:8a:10:6f:52:e6:25:45:9e:67:17:9f:99:
                    1d:02:71:17:74:83:1d:62:e4:e6:2b:16:c5:3e:0b:
                    17:8c:b1:9d:f0:c4:fa:d7:42:9c:ca:63:c2:84:7a:
                    f3:d7:7b:35:a1:f3:86:93:bf:84:1d:43:f0:26:3f:
                    26:46:66:db:e3:f3:b6:2a:42:ed:b7:04:c1:50:f4:
                    e5:d7:ea:70:8b:c2:cd:7a:10:89:0f:a7:8b:f5:3c:
                    10:1c:7f:69:04:6c:82:31:48:a1:65:3a:82:e9:dc:
                    a4:4e:dd:b2:49:2c:ea:14:32:18:49:13:2a:d6:44:
                    d0:02:de:32:68:10:3e:b1:8c:fa:ed:d3:a0:ac:d5:
                    5a:6e:6e:34:7b:f9:05:04:8c:c5:77:72:77:32:80:
                    bb:00:ce:b0:ba:18:7d:db:5c:98:de:b0:ac:e2:99:
                    e2:34:d5:a3:87:dc:5b:9a:56:21:0d:35:71:1b:c7:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:46:D0:94:27:30:8B:B8:F7:A8:99:57:9B:4A:2B:C9:43:A8:B1:48
            X509v3 Authority Key Identifier:
                keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/50448A72911411EF9CAF3E55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.110.0/24
                  103.198.203.0/24
                IPv6:
                  2404:a140:43::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:28:6c:84:1e:5a:06:c5:0f:5d:9d:75:df:b9:e2:aa:e6:89:
         23:66:5d:fe:7a:a1:54:9f:44:13:c7:96:e1:e4:77:27:d4:74:
         e9:27:66:f3:ef:6b:2c:b9:dd:f1:9b:1e:37:ea:e7:85:97:c1:
         d3:6d:f3:a8:08:5f:b9:db:d5:71:6a:87:2b:a5:bd:ee:2d:4e:
         c8:44:81:fd:bf:68:3a:ff:90:da:82:af:b1:36:9b:70:27:93:
         d4:50:65:79:13:2b:62:17:eb:bb:ba:4d:7a:ab:de:74:bb:2f:
         1a:68:70:24:21:5f:bb:16:fe:49:60:05:4f:51:81:17:6b:09:
         94:11:d5:c4:4b:ab:36:7f:48:4c:bb:a1:db:e2:2c:a9:c6:d1:
         f2:23:f3:4e:9c:e0:e8:17:c5:87:1b:5a:7a:e8:bb:68:5f:bc:
         5e:cf:3c:5b:db:48:1b:18:cc:f5:38:ec:2d:3d:a2:89:81:ea:
         03:e8:f2:6d:37:dc:0c:da:01:3a:1e:bb:38:48:31:34:db:a8:
         09:a7:e1:92:79:89:9f:e6:7a:eb:19:98:b4:46:1d:1b:34:f9:
         4d:c2:fd:62:29:ad:36:5e:53:50:5a:26:fc:37:0d:1f:38:1f:
         6e:54:ca:91:3e:49:b0:a4:81:60:af:b1:50:d5:6b:13:8f:f4:
         c1:f3:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:49 2026 by rpki-client