Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/0A3DB3DCD0C511EABB9E0868C4F9AE02.roa
File:                     0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (raw, json)
Hash identifier:          /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=
Subject key identifier:   7B:99:B7:92:74:E2:5C:EF:93:E6:1D:FD:B5:93:AA:44:CD:B9:C7:8C
Certificate issuer:       /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial:       08D3
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/0A3DB3DCD0C511EABB9E0868C4F9AE02.roa
Signing time:             Wed 04 Mar 2026 20:27:14 +0000
ROA not before:           Wed 04 Mar 2026 20:27:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198381
IP address blocks:        103.255.128.0/24 maxlen: 24
                          103.255.129.0/24 maxlen: 24
                          103.255.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
                          rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 20:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259 (0x8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
        Validity
            Not Before: Mar  4 20:27:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69a895a2-4ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:70:b8:28:09:41:73:c4:a6:66:19:a4:bf:
                    7b:23:6b:a5:01:8e:75:f2:36:b1:98:df:ef:a0:bf:
                    90:84:97:79:86:e9:76:8d:c5:34:9e:5b:38:9d:35:
                    ec:41:87:6a:11:3e:39:34:14:bf:26:60:f6:44:17:
                    3b:57:92:67:09:4b:67:57:78:80:2a:88:67:c6:5f:
                    52:f8:0f:50:fa:3c:21:87:b3:50:56:4a:d8:8f:5b:
                    66:73:19:6e:78:68:d8:28:db:bd:01:da:e3:1f:80:
                    4c:21:e3:b8:4f:f4:4f:7b:91:87:b0:0d:f5:0a:46:
                    4c:95:29:4c:73:06:6c:e6:71:7b:b2:54:13:a2:0c:
                    37:fb:d5:66:4b:19:69:dd:5e:b0:fa:85:9b:4b:e7:
                    ea:39:71:f3:39:1d:00:38:8e:72:ba:38:7b:a3:ad:
                    a8:7d:9f:d7:2b:e0:09:0d:bc:b0:a1:06:55:20:cd:
                    6c:31:31:c2:95:82:a1:46:ec:20:38:90:1f:67:f8:
                    de:41:5d:40:6e:76:fc:af:28:fc:31:e2:d2:87:08:
                    6f:4e:5b:e7:1d:e2:83:24:89:8a:1b:3a:a4:df:2e:
                    23:63:37:fb:59:f3:f0:13:66:fd:8a:32:c1:4e:d5:
                    66:56:e2:b2:52:72:89:6b:13:ad:b9:b0:ac:3c:ed:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:B7:92:74:E2:5C:EF:93:E6:1D:FD:B5:93:AA:44:CD:B9:C7:8C
            X509v3 Authority Key Identifier:
                keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/0A3DB3DCD0C511EABB9E0868C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.128.0-103.255.130.255

    Signature Algorithm: sha256WithRSAEncryption
         68:9c:c2:5a:77:eb:65:c9:50:25:14:d9:fc:76:b5:4e:11:71:
         b7:e0:9a:0b:8a:3f:09:eb:53:bc:ca:36:63:ce:a9:81:e6:53:
         cc:32:8b:67:55:9a:d5:92:33:bb:02:9c:e2:24:93:41:b1:74:
         3a:b5:7d:ae:e2:1c:f8:d9:87:d2:82:25:df:ac:6f:a7:06:45:
         78:8d:c9:3f:03:89:de:5c:7a:2b:3d:27:66:35:96:f1:13:ba:
         29:bf:01:70:7d:bf:91:d0:ca:dd:35:19:a4:87:c2:89:13:d6:
         d8:c1:6c:0f:64:e1:75:fd:da:06:21:b8:44:16:e9:ca:e9:a3:
         45:b2:52:e4:3f:36:5b:e2:e9:d3:fb:6e:ea:af:3f:10:70:54:
         7f:05:76:3b:d6:27:ec:9d:ff:02:38:d9:93:a4:50:54:10:36:
         1a:85:bd:11:12:a5:35:af:e3:89:70:e0:c2:be:5d:5b:bd:a1:
         de:06:ac:ab:cd:e7:41:2b:43:5c:73:8d:2a:0d:ca:03:de:c2:
         bc:64:b6:fe:73:2e:a9:c6:9b:9b:c5:79:73:58:a8:31:10:21:
         2a:e6:23:00:b1:be:fd:ef:d6:51:48:45:6c:c4:71:49:fe:c2:
         0e:cc:ed:27:91:d5:8f:2e:1c:e9:b8:d3:1a:9a:f7:5d:60:8b:
         95:d9:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:39:32 2026 by rpki-client