Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa
File:                     C41C3B7C2A9F11F1AEE17D7A9B833773.roa (raw, json)
Hash identifier:          YVtrYDGmd8yOfEjEDc3TwfWzgRK6gay3J+4YbDTK/QU=
Subject key identifier:   D2:8B:C5:8B:36:8A:D2:E4:CF:18:A6:F7:6A:CE:F2:1F:41:23:20:B8
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       028D
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa
Signing time:             Sat 28 Mar 2026 12:15:10 +0000
ROA not before:           Sat 28 Mar 2026 12:15:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138385
IP address blocks:        103.113.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 01:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Mar 28 12:15:10 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69c7c64e-1859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:4d:84:c2:d5:8b:07:4d:30:42:23:e1:b6:
                    34:1d:c9:1e:54:7a:3f:e6:db:35:09:d8:54:c0:a7:
                    de:10:15:82:37:27:19:1d:d3:f6:c9:c6:e1:fa:40:
                    1f:54:38:26:52:dd:82:33:b1:1f:6a:94:4f:62:1a:
                    ef:5c:e7:51:60:02:be:c7:77:0c:a0:6d:f6:5a:47:
                    73:fe:b3:d8:ed:16:f0:2b:ae:9a:9f:09:9b:c5:a0:
                    15:72:4b:69:f8:f5:27:79:0b:7a:b6:a7:a5:bd:39:
                    99:d3:23:ec:57:64:d6:7e:cf:48:e8:a7:3e:f0:e4:
                    2b:69:4b:0d:b0:c3:9f:e5:2e:0c:56:f9:cb:f4:18:
                    75:3b:c1:c5:4e:aa:dc:56:31:8d:47:1b:1e:38:8d:
                    61:f6:a3:17:5a:d7:df:2f:f4:e3:c9:20:5b:77:29:
                    bd:40:21:12:92:46:90:92:ad:7a:2d:bb:51:65:f7:
                    e8:dc:91:04:f5:bf:14:6d:63:93:82:2e:f3:15:e4:
                    a5:ec:2d:ab:2d:b1:6d:fb:38:47:19:85:6a:95:2e:
                    b7:8d:c9:9c:df:25:87:d2:f7:8c:7c:52:9d:52:3b:
                    8c:83:a1:9a:ce:c8:e7:0f:c8:fe:a3:9c:a0:f6:04:
                    5a:a5:91:28:17:9f:5d:90:ad:5c:2f:4d:b3:9d:6e:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8B:C5:8B:36:8A:D2:E4:CF:18:A6:F7:6A:CE:F2:1F:41:23:20:B8
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:db:dd:a0:3e:82:2b:9c:37:a3:66:77:df:27:fe:d5:46:3a:
         9f:05:04:23:46:88:a7:6f:78:6b:9b:fa:04:72:72:59:b0:a2:
         89:39:61:a2:3a:6b:57:0b:e7:1e:b9:4e:4d:cf:e8:30:21:cf:
         40:41:e1:14:15:cd:e1:e5:26:5e:c0:95:c4:d1:35:ad:59:83:
         a7:02:a9:f3:a6:35:59:e4:a2:65:48:17:37:1c:df:34:c8:d7:
         b0:32:8d:26:ab:1a:b0:cf:63:39:96:17:34:33:a1:d0:9b:db:
         ac:2f:cb:d2:3b:2a:35:34:2e:b2:1d:47:d4:09:a5:ca:de:bf:
         57:e3:de:cf:b9:53:bd:77:f9:76:cd:d7:be:b0:5e:11:c5:d5:
         a0:6c:e4:d2:cf:88:1b:61:7f:e1:ad:43:3a:39:1f:cf:90:34:
         1d:5b:12:61:c2:ca:8b:80:98:e0:bb:a4:f2:ec:22:b6:ef:4f:
         ee:4e:c8:8e:83:4a:0c:a6:b6:01:28:61:22:b1:7f:f9:93:15:
         de:e9:22:14:f1:24:fb:01:db:7d:34:7c:c8:d8:53:c4:0f:91:
         68:70:d7:d1:91:12:7d:65:92:94:fd:ca:fa:74:52:f5:fc:c2:
         18:99:62:cc:55:01:16:1a:67:9f:f3:e0:ac:f7:a3:3f:f0:65:
         95:c4:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 12:03:09 2026 by rpki-client