Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/E4DFE77CD77E11ED8E33F181C4F9AE02.roa
File:                     E4DFE77CD77E11ED8E33F181C4F9AE02.roa (raw, json)
Hash identifier:          WYnjZsNu5jiuRKrMLvrdkCklYsmIm0eNnQ6iCSiMY3Q=
Subject key identifier:   1F:58:DC:42:4D:54:D0:95:4C:84:53:F4:E5:64:D8:41:BA:08:81:3E
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       0297
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/E4DFE77CD77E11ED8E33F181C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:14:53 +0000
ROA not before:           Tue 01 Apr 2025 02:58:32 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        103.86.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 01:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Apr  1 02:58:32 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4740d-ced9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:9b:b2:4a:d8:54:8b:ba:a3:35:d7:10:64:
                    35:95:5e:87:28:fe:eb:78:d0:d6:5b:4d:08:5d:77:
                    67:f4:76:93:25:a6:5c:5a:c5:84:09:98:d2:8a:de:
                    60:97:5f:a5:5e:14:48:d7:fa:83:60:48:0f:e2:78:
                    38:02:d2:6d:87:46:22:5e:53:40:90:80:bc:e0:dd:
                    2a:33:43:98:be:3c:17:b9:2d:44:4a:b8:7e:00:b1:
                    43:93:91:c6:c2:e6:12:18:c8:46:32:e3:d0:df:a7:
                    e1:f7:e7:d8:e1:50:47:d5:34:9f:c9:39:f0:05:ce:
                    b1:29:99:0d:9e:b8:b7:1f:d4:3c:7d:34:a7:fe:dd:
                    5b:b0:bc:d5:22:0e:16:fc:b0:17:32:1a:e2:dc:d6:
                    54:de:a7:31:b8:69:57:42:c3:fd:a2:f3:7c:07:be:
                    5a:2a:bf:e5:2b:82:0f:e3:83:1a:06:41:1f:38:be:
                    87:92:3c:2b:fb:65:c8:c9:44:6b:74:67:05:cf:78:
                    05:bd:fd:3d:5f:bc:59:ce:cc:55:07:f8:7e:75:84:
                    23:88:90:6f:c9:4f:48:39:41:4a:9c:05:a3:ca:34:
                    65:ca:49:ed:f3:6e:15:c9:ea:19:ed:f0:26:2b:ac:
                    4c:20:5a:b0:e3:ce:90:57:ad:7e:3e:b2:b9:06:5f:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:DC:42:4D:54:D0:95:4C:84:53:F4:E5:64:D8:41:BA:08:81:3E
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/E4DFE77CD77E11ED8E33F181C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:81:c7:c3:af:ae:11:b8:3c:48:b1:e7:44:8c:88:c1:04:18:
         54:df:1f:c7:a3:67:48:6f:09:65:ce:24:11:f1:d1:d1:e0:a4:
         e9:c6:50:4a:9d:4a:ba:6c:61:46:5c:cc:f0:1d:84:0a:fb:f8:
         7d:6f:24:57:a5:a8:93:f2:b1:8b:a5:0d:fe:1a:96:a8:4a:35:
         22:53:46:47:b1:dc:e0:3a:04:74:3b:22:77:9b:85:dc:b1:2a:
         0e:68:f7:77:00:9a:c5:4c:e2:78:53:e1:8f:b9:a1:c9:85:01:
         39:55:e8:a7:b9:74:b1:d7:ed:79:e4:fc:49:e7:71:b5:4f:1e:
         6e:21:84:8f:41:8d:19:03:f2:33:fe:18:5c:cd:c8:34:bf:ae:
         8e:35:45:34:e7:40:0e:5a:9f:cd:b2:3d:e4:6c:0b:b8:74:33:
         96:d7:ea:f4:8e:6e:72:ee:a6:69:89:5b:59:8f:74:1d:d6:34:
         50:b6:ec:24:69:66:0a:95:69:13:d9:1c:6c:99:ba:7f:ff:a3:
         ad:79:25:bf:aa:9c:8f:3a:af:0e:f4:3c:8f:93:bc:eb:cc:44:
         5c:8d:26:c4:ca:02:40:7a:5c:19:f2:1e:a9:de:c3:b2:8f:02:
         1c:89:c3:87:2f:49:83:86:68:c4:7e:7a:43:d3:61:71:52:13:
         9f:fd:22:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:50:31 2026 by rpki-client