Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/234A6628299311F0B32D9F82C4F9AE02.roa
File:                     234A6628299311F0B32D9F82C4F9AE02.roa (raw, json)
Hash identifier:          /qsVaB9Ik2QgEaAelOskN07kdqvopeyP2GfAlI1Wn9w=
Subject key identifier:   5C:10:71:F1:33:E5:81:C3:B9:D0:02:46:3B:42:61:0D:75:EF:6B:0B
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1EB4
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/234A6628299311F0B32D9F82C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:58:58 +0000
ROA not before:           Tue 18 Nov 2025 16:04:16 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9541
IP address blocks:        103.76.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 15:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7860 (0x1eb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Nov 18 16:04:16 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47052-5770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:72:50:24:0c:7b:ae:92:41:3e:90:49:66:
                    34:e8:1c:6a:ee:ab:13:56:20:df:19:16:6e:41:ac:
                    66:30:3b:35:6d:ab:f6:8b:8e:7d:20:47:eb:56:cd:
                    72:e2:50:63:63:f6:6e:4c:41:5a:bd:a6:49:59:82:
                    c8:ec:25:a2:7d:c3:c7:5b:1e:44:6e:d0:cc:2b:c1:
                    a6:34:27:81:53:5c:3f:8b:9a:80:6f:14:a9:1c:8c:
                    2f:96:30:2f:6c:d6:96:da:51:a1:be:37:02:37:ca:
                    a2:b5:ed:21:58:e2:82:a5:f3:f5:87:55:5a:e3:f3:
                    c1:8b:5c:f1:01:02:aa:74:0e:06:ec:0a:1b:e1:27:
                    a5:f4:37:8c:60:fd:f8:5d:73:60:9e:e4:af:b7:3c:
                    51:8b:ad:18:81:e4:5c:bf:ce:48:8f:20:96:fe:35:
                    48:13:6b:50:56:19:37:96:e7:f2:80:bc:3f:c1:43:
                    7a:c0:c3:3d:cc:13:83:a8:09:d7:e9:61:fb:fb:a4:
                    ba:47:90:9c:3a:0a:ef:97:0f:dc:8e:12:21:3c:df:
                    d3:34:24:34:76:74:09:02:16:fc:8f:b8:a4:da:49:
                    f6:15:52:0f:1c:fe:86:e5:bf:8b:00:1d:50:22:a9:
                    b5:49:c6:6c:b3:cd:20:23:e0:b7:3f:ce:74:15:b4:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:71:F1:33:E5:81:C3:B9:D0:02:46:3B:42:61:0D:75:EF:6B:0B
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/234A6628299311F0B32D9F82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:e2:dd:95:59:5e:ad:05:e2:ba:cc:2f:7f:87:e1:e5:76:f6:
         ac:ad:1f:1e:0a:4c:fb:20:e0:dd:2f:1c:cf:df:66:db:69:4a:
         a6:db:73:f9:77:51:b9:17:87:bd:33:fc:55:8c:b3:05:86:0a:
         4e:9f:38:a4:aa:14:ef:11:33:71:e5:d9:54:d9:22:06:d8:df:
         06:41:cd:5b:57:67:6b:f1:d6:54:52:a5:13:56:f4:a5:bc:b1:
         66:38:28:8a:ba:94:3b:49:77:93:bf:ff:dd:bd:f0:1c:d9:4a:
         21:b9:31:45:04:c1:96:72:a1:52:3d:b7:9b:82:ad:bf:4f:85:
         bd:8e:cb:90:c2:c4:49:63:46:d1:42:01:7e:43:50:19:83:0a:
         68:d4:d5:1a:ab:31:b4:cc:17:9c:83:fb:a4:f3:d1:93:0f:8b:
         a9:e4:83:9c:19:1b:4a:8e:71:1c:4d:70:db:54:38:d3:e1:8a:
         5b:be:2d:e8:eb:fb:c3:01:74:f7:94:b5:57:a7:45:7a:92:85:
         0f:c9:0e:72:4f:b8:c1:33:60:9e:a1:bd:4b:d4:2e:d0:31:bd:
         b2:5f:de:0f:bb:9d:8a:ab:4c:12:cf:6d:85:f0:a4:16:74:a6:
         fe:a8:e8:7b:c0:65:89:97:8a:53:13:30:e8:23:5e:f5:82:fb:
         44:cf:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:23:55 2026 by rpki-client