Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A2C289B63B0E11F1ABA6C37BA3833773.roa
File:                     A2C289B63B0E11F1ABA6C37BA3833773.roa (raw, json)
Hash identifier:          jmWcCNtWVugfcNe6D5Skhd/Vluv6OV5nBx2KESd91tA=
Subject key identifier:   92:A9:4C:2A:72:6D:70:64:6B:8A:08:4D:30:AC:B9:74:56:97:91:27
Certificate issuer:       /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Certificate serial:       01C7
Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A2C289B63B0E11F1ABA6C37BA3833773.roa
Signing time:             Sat 18 Apr 2026 10:09:07 +0000
ROA not before:           Sat 18 Apr 2026 10:09:07 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55832
IP address blocks:        103.14.181.0/24 maxlen: 24
                          103.14.182.0/24 maxlen: 24
                          103.14.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
                          rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 03:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
        Validity
            Not Before: Apr 18 10:09:07 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69e35843-a0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:bd:42:b5:c5:09:56:2d:c4:44:a3:30:4f:
                    a7:83:7a:10:5f:2b:01:33:9f:3f:e2:48:55:31:c1:
                    4a:d2:e0:2b:b3:96:f6:6d:55:4a:f2:ca:77:a1:09:
                    dd:a5:8a:9e:21:02:97:1e:17:ac:d4:da:78:ff:5c:
                    bd:f5:b9:a5:46:d9:b3:de:0a:d2:07:30:c9:8a:8a:
                    12:b1:b1:ba:86:5a:ac:72:b3:45:75:8c:ae:51:f0:
                    92:ad:c7:83:50:97:89:c2:54:88:12:97:b6:fc:32:
                    21:5f:c7:ee:7b:90:a1:9e:91:47:e8:df:9a:94:cc:
                    ee:15:1c:0d:11:19:f3:17:f9:a4:27:59:2c:95:14:
                    b4:10:53:60:fd:f6:8f:23:1e:e3:dd:27:ca:ce:63:
                    bc:43:1b:64:37:18:45:d1:04:f6:b5:60:7a:ce:35:
                    bd:b5:93:de:09:61:24:39:32:b2:73:4e:98:e6:c3:
                    bd:fc:a4:1b:02:32:2a:7d:a9:88:40:61:27:69:c5:
                    74:a4:db:e2:97:39:af:16:46:17:f5:e6:00:f7:74:
                    27:c4:2f:5d:42:e1:e9:4a:5a:30:65:5d:4d:cb:5f:
                    c1:0b:1f:5c:eb:bf:ad:21:40:ca:ce:48:97:b8:1e:
                    2c:7e:fa:6a:73:ae:d9:19:5d:0f:e3:fb:45:8c:15:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A9:4C:2A:72:6D:70:64:6B:8A:08:4D:30:AC:B9:74:56:97:91:27
            X509v3 Authority Key Identifier:
                keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A2C289B63B0E11F1ABA6C37BA3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.181.0-103.14.183.255

    Signature Algorithm: sha256WithRSAEncryption
         88:df:06:d4:db:9d:0c:f8:7a:40:fd:66:fe:e5:da:51:0e:9d:
         6b:23:3b:f2:2c:f9:34:1c:e9:b9:b8:79:a3:c0:b8:5c:18:2c:
         a9:d1:65:1e:1e:e2:b2:24:d9:b5:f9:e1:f8:5f:a5:a4:a6:94:
         9c:08:40:f3:26:27:4e:a4:50:b5:70:64:75:54:a0:94:94:64:
         9a:c3:c1:27:4c:2e:32:06:8a:eb:9c:7e:75:7a:09:7c:1f:59:
         88:3a:a9:de:48:df:d5:f5:d9:cd:ba:61:59:e7:76:7f:69:9b:
         04:c1:07:15:24:48:ec:f8:7e:e8:8e:dc:2b:ea:d0:0a:4c:9a:
         09:f5:b3:58:43:e4:67:6d:c1:e0:f8:8e:ac:d8:75:5c:32:fd:
         cd:e2:f2:9f:95:9b:10:23:12:52:5d:2b:50:11:af:da:1f:2a:
         90:3d:0c:f6:ca:d7:18:c3:35:fe:93:e9:28:19:21:9b:b7:65:
         90:b3:60:71:67:5e:20:97:51:54:26:65:83:bc:a3:11:10:80:
         57:e6:98:a4:cf:d7:dc:4b:44:10:5e:05:67:62:95:59:9c:5a:
         9f:1c:08:6e:91:f9:87:af:83:c7:e4:ab:6d:64:34:eb:fc:cb:
         5c:1d:dd:dc:c2:78:18:f7:b0:44:af:aa:14:28:62:14:9f:36:
         0d:a9:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 07:13:04 2026 by rpki-client