Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/C5BEEE3EFDD111F08B1371286C6F56BC.roa
File:                     C5BEEE3EFDD111F08B1371286C6F56BC.roa (raw, json)
Hash identifier:          rcIhh7g5hXM82KFlHwCan0iopbyoGn97DZTUQmAf6PA=
Subject key identifier:   3D:25:BE:4B:2D:DE:E8:AD:1D:2F:0D:DE:5F:77:87:60:61:52:3F:EE
Certificate issuer:       /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial:       0292
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/C5BEEE3EFDD111F08B1371286C6F56BC.roa
Signing time:             Fri 30 Jan 2026 11:49:46 +0000
ROA not before:           Fri 30 Jan 2026 11:49:46 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138043
IP address blocks:        103.24.16.0/23 maxlen: 23
                          103.24.16.0/24 maxlen: 24
                          103.24.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
                          rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
        Validity
            Not Before: Jan 30 11:49:46 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=697c9ad9-85d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:b6:dc:e6:12:9e:dd:8c:6b:46:12:e2:c8:
                    72:0c:c4:f6:ae:c1:a0:b2:90:fd:3c:2f:0d:3e:e3:
                    17:db:b2:ef:12:24:3e:ee:8d:01:cf:a3:45:a4:71:
                    4f:eb:c8:00:6d:1d:8a:cd:51:05:78:22:82:42:6e:
                    c6:1f:36:a2:19:e6:f8:5c:de:da:e3:f2:08:75:66:
                    6d:88:e7:cd:8e:99:82:ea:11:fd:6c:d6:2b:1b:6b:
                    43:cd:d5:50:8c:da:12:fa:da:c3:1d:3a:5a:bf:ea:
                    63:31:d6:ac:c3:7d:dd:e3:5f:fc:55:80:e8:dc:55:
                    77:8f:86:29:f0:ff:e1:d5:c5:22:c7:e7:3f:c9:e7:
                    06:1a:83:d7:ef:d3:7e:3f:aa:e4:d9:53:54:dc:a5:
                    da:4d:04:42:08:fb:3e:b1:26:9c:9e:cd:b8:82:db:
                    b4:66:12:16:55:32:69:5b:65:b6:37:df:29:42:32:
                    67:2f:2d:c6:8b:da:74:62:ad:99:f1:28:56:b6:28:
                    d4:5a:be:1d:c0:7f:94:98:5c:e2:18:d0:51:69:95:
                    0a:4f:ad:cd:6e:93:97:17:27:39:c3:d5:55:2a:9e:
                    b9:70:25:f1:35:85:e5:ee:72:1e:2d:cf:9d:15:ee:
                    5f:67:c3:95:d3:a2:f4:35:64:87:27:05:74:2e:fe:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:BE:4B:2D:DE:E8:AD:1D:2F:0D:DE:5F:77:87:60:61:52:3F:EE
            X509v3 Authority Key Identifier:
                keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/C5BEEE3EFDD111F08B1371286C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:55:aa:00:da:46:95:97:e7:6f:68:34:dd:a7:90:c6:0d:2b:
         62:ee:38:46:a5:2f:06:fb:aa:53:12:c9:37:16:2f:78:86:a4:
         88:4c:20:d6:24:43:ee:77:6a:ae:17:10:93:f3:05:3f:30:c7:
         f6:dd:c6:a1:ce:99:ed:0e:d1:fc:e0:ec:8d:bd:61:9a:00:55:
         4b:e4:c2:11:28:f6:2b:e4:d5:99:29:8e:5e:2b:82:ab:ed:c4:
         bd:d7:f5:ea:20:15:3e:43:38:a4:d3:41:29:d2:23:07:fb:ff:
         f4:f2:77:33:78:eb:88:aa:64:91:14:09:dd:57:80:0e:ab:c1:
         82:de:36:de:6b:89:a8:11:b0:c1:02:0a:56:e9:2a:75:73:70:
         ed:27:cb:47:21:c1:de:fb:58:4b:84:fb:55:25:ee:35:8a:55:
         17:93:56:8f:74:51:6e:2c:28:60:78:c0:cb:1a:7b:71:4c:db:
         3d:45:11:5f:91:00:fa:29:fd:40:ca:bb:5f:21:48:d0:b5:af:
         45:26:47:d4:33:dd:c8:90:e9:47:fe:d1:7a:14:82:ea:f6:99:
         b7:71:8b:0a:93:38:de:b4:75:16:74:30:a4:ae:a0:ef:1e:e2:
         83:62:d9:1d:dc:6d:71:ab:e5:77:86:29:90:a6:10:17:91:c3:
         43:90:fe:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:23:00 2026 by rpki-client