Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/5035F194413211EDAAFCC96EC4F9AE02.roa
File:                     5035F194413211EDAAFCC96EC4F9AE02.roa (raw, json)
Hash identifier:          kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=
Subject key identifier:   59:E6:01:1E:C6:C7:E1:19:03:4D:71:6C:53:04:15:D3:07:03:E4:72
Certificate issuer:       /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial:       08A2
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/5035F194413211EDAAFCC96EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:53:24 +0000
ROA not before:           Wed 10 Sep 2025 21:33:01 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137182
IP address blocks:        103.155.8.0/23 maxlen: 24
                          2406:60c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
                          rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 20:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
        Validity
            Not Before: Sep 10 21:33:01 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a517c3-1cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:eb:66:25:bc:53:5f:82:40:5d:cc:ed:af:
                    33:eb:26:a8:e4:75:87:47:14:08:aa:df:d4:e2:51:
                    5e:9a:ae:fc:26:d2:e7:6f:3b:8d:6c:d7:fa:24:55:
                    0f:f2:84:9f:55:b2:99:85:30:e4:7b:8b:c9:7e:f7:
                    2e:42:83:1c:24:b2:70:57:65:30:d0:7f:d1:70:30:
                    98:6d:a1:ba:04:16:89:64:01:f0:14:46:59:ae:bb:
                    23:64:67:8a:d0:ed:7f:b4:d8:bb:af:6c:f8:d1:91:
                    67:a9:4e:0a:4f:7f:53:a6:22:25:a2:6f:d4:2b:f2:
                    bf:31:8f:ac:bc:88:86:8a:af:c7:37:37:46:87:1a:
                    ff:10:d5:dc:31:48:e4:2b:f2:27:dd:33:52:84:bf:
                    93:b6:d1:a1:c1:77:42:ca:74:a0:91:28:0a:5c:45:
                    77:ce:7a:05:84:f4:78:6e:9b:82:62:60:4e:7b:be:
                    34:6c:9d:99:de:df:dc:05:6d:54:da:55:e7:95:84:
                    dc:d5:d4:68:c1:c6:3a:94:11:f0:6a:7a:d9:81:30:
                    2d:c2:7b:e7:7b:dd:d0:3a:6d:af:d1:9e:e0:a2:98:
                    5d:10:74:16:67:25:ae:b1:38:d7:2c:3c:f0:a6:5f:
                    b4:aa:cc:47:0b:1b:df:13:a9:a4:48:75:bf:b4:5f:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:01:1E:C6:C7:E1:19:03:4D:71:6C:53:04:15:D3:07:03:E4:72
            X509v3 Authority Key Identifier:
                keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/5035F194413211EDAAFCC96EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.8.0/23
                IPv6:
                  2406:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:61:45:e0:1d:c7:ee:0b:c1:fc:99:05:4a:a3:d9:ed:b1:51:
         a5:f6:6c:cf:e8:0d:5c:4c:98:bd:9c:34:07:e9:de:c7:cc:db:
         2b:a5:3f:0f:a1:40:a6:32:fb:8d:ad:af:70:bf:bb:55:76:7d:
         da:6e:53:11:83:6f:e0:10:d0:c5:7a:f4:f6:90:e7:66:e1:ac:
         c2:1f:30:c9:7e:f3:ac:aa:ae:41:b9:91:df:81:66:42:28:78:
         a1:72:71:d9:48:bb:de:d4:df:0b:8c:02:74:94:da:66:5b:17:
         4d:24:f9:79:e3:c4:38:1d:d3:c6:cd:a9:6d:ea:af:62:85:5d:
         e6:12:f2:83:ea:3e:83:fd:a7:5d:5e:c5:06:f0:58:7a:bf:e0:
         fc:c2:d4:db:5b:c2:61:55:8a:e2:85:fd:06:ce:03:2d:81:03:
         b1:6b:c6:6a:c9:73:40:6d:97:80:e8:83:21:bf:65:21:cd:64:
         f1:fc:b7:a0:58:91:42:ed:16:63:ae:5b:c6:31:ed:8e:86:f8:
         bf:2a:cd:bd:e4:93:0e:64:cb:d2:03:f6:20:a9:83:83:f6:cb:
         6f:04:17:e3:df:49:05:d6:45:92:73:54:4a:97:e7:a7:9a:20:
         14:76:d7:c8:70:46:26:57:48:29:87:45:ed:0d:eb:c8:37:d9:
         55:1a:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:42:45 2026 by rpki-client