Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
File:                     985276043B6D11F0AFFFDD4DC4F9AE02.roa (raw, json)
Hash identifier:          T3ZNiVnesGJpryRivylJyU8MVl8VVN9RqH654rVhbKQ=
Subject key identifier:   29:CF:0E:76:96:DB:DE:51:D0:5B:F6:73:73:5D:D3:05:FF:16:93:4E
Certificate issuer:       /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial:       0464
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 06:34:24 +0000
ROA not before:           Tue 31 Mar 2026 06:34:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        103.63.102.0/24 maxlen: 24
                          103.207.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
                          rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
        Validity
            Not Before: Mar 31 06:34:24 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69cb6af0-1c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:07:b9:67:bc:55:d8:04:b5:7a:82:a0:2a:43:
                    65:fe:92:4c:48:df:a7:f6:45:9f:9e:07:fa:70:0f:
                    89:10:1c:e3:af:0c:6d:63:20:b1:f8:9c:d6:c6:50:
                    3f:db:4b:1c:cd:cb:f3:2f:0f:d2:05:5d:1e:88:75:
                    a6:1e:16:06:39:43:b7:2d:da:9e:7f:fe:82:c8:d9:
                    ab:5f:10:73:83:8a:3d:a4:5b:f5:5a:55:d2:ab:58:
                    1d:64:a4:ac:1e:20:5e:7e:a1:78:f0:d3:30:c2:8b:
                    e0:db:b6:37:c0:3f:47:bb:94:1e:c4:32:17:39:a1:
                    6b:b3:5c:24:ed:63:98:5b:1f:df:f2:9a:5d:ed:09:
                    ad:6a:5f:f9:c4:bb:a1:37:d9:3d:e5:23:fc:e8:72:
                    b0:79:f5:eb:1f:cd:9f:87:c7:a9:4c:4a:3e:46:4a:
                    6c:30:87:2f:48:4b:6e:74:79:e8:d8:d3:78:f2:da:
                    10:dc:b8:11:b5:67:7c:59:4b:71:6c:28:98:6b:f7:
                    e5:b7:55:2e:8c:db:98:f4:c1:21:c3:da:d8:a9:3c:
                    8c:2e:3d:73:88:27:85:71:5f:f6:ca:e3:29:52:85:
                    cf:2c:6c:89:65:4d:a7:35:0d:48:6c:af:6d:11:d7:
                    01:28:1f:0b:7d:aa:6f:b5:bc:f7:59:ac:0f:d2:8b:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CF:0E:76:96:DB:DE:51:D0:5B:F6:73:73:5D:D3:05:FF:16:93:4E
            X509v3 Authority Key Identifier:
                keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.102.0/24
                  103.207.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:11:12:9a:4f:0b:c4:1b:10:a2:fd:53:da:86:64:b2:0d:3b:
         ce:2d:66:5d:0f:67:9a:27:0b:66:28:df:3a:dc:3d:7b:4a:90:
         ed:5a:39:e2:56:8d:ad:4e:95:41:a8:d6:48:be:8b:92:17:b0:
         97:5e:86:9c:0d:0a:0b:7d:ee:12:d4:42:da:b6:75:f1:c0:89:
         51:79:f5:6f:db:86:19:fb:c4:3b:b1:bd:a6:29:dd:62:e6:09:
         86:0e:cc:76:64:fa:f5:4a:3b:d3:c8:42:25:22:66:c1:8b:54:
         c3:ff:f9:78:16:c9:5b:f9:be:4a:3a:a8:86:34:e0:79:35:6e:
         dd:34:6d:9c:24:4d:87:75:23:e3:ce:db:4c:93:50:5e:e1:a4:
         c9:5a:a5:ce:80:f4:7b:c1:16:0f:4f:37:5a:34:f0:44:79:84:
         6c:bf:10:71:23:e4:de:54:16:6b:c5:a5:51:97:42:d2:d6:58:
         6e:ad:c3:ff:2b:c4:fb:82:23:1c:44:91:46:f2:fd:2f:3f:f2:
         a4:fb:33:2b:77:84:53:fd:ee:43:64:83:72:6a:67:8e:51:71:
         68:cc:7d:7c:e1:ae:e1:68:13:3d:38:26:1e:75:6e:19:dc:74:
         d8:35:3f:b5:e5:b3:89:04:66:a2:28:d5:7c:21:10:e4:54:64:
         46:9e:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:58 2026 by rpki-client