Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/E3D288CA6BC311EDB9791958C4F9AE02.roa
File:                     E3D288CA6BC311EDB9791958C4F9AE02.roa (raw, json)
Hash identifier:          ZcRLBxk/Q866NeF+jJVHP1VCi2fP9N3TlKCJBZZM0ng=
Subject key identifier:   EB:0D:66:F4:9D:08:D4:13:EF:BF:1F:93:5C:FC:E6:32:FC:12:A1:1C
Certificate issuer:       /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial:       0B67
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/E3D288CA6BC311EDB9791958C4F9AE02.roa
Signing time:             Wed 04 Mar 2026 19:25:25 +0000
ROA not before:           Wed 04 Mar 2026 19:25:25 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     55020
IP address blocks:        103.148.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
                          rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 18:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2919 (0xb67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
        Validity
            Not Before: Mar  4 19:25:25 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a88724-4f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:d2:e3:d9:ed:35:89:4b:35:8f:53:8a:2f:
                    f6:a0:15:19:eb:5e:6c:44:13:98:b7:d2:7b:fd:d6:
                    c0:57:63:41:22:a8:c8:ef:e7:cd:7f:c8:40:d2:3d:
                    37:c6:27:22:0b:93:b7:a1:41:ea:3b:a9:ef:86:68:
                    4a:8a:0d:a8:f9:c8:6b:08:88:0d:a2:96:57:bc:aa:
                    50:13:c0:83:97:ff:28:36:d3:fd:3b:81:12:4f:dc:
                    6d:e5:d9:5b:91:c6:03:eb:70:14:12:51:38:f3:bb:
                    ad:80:01:78:da:21:75:b6:e3:43:f8:ef:31:6e:86:
                    fa:1d:16:b3:01:77:d2:02:7f:10:b5:7a:14:42:b8:
                    14:08:50:3a:2b:77:e1:8e:81:66:79:70:0f:8e:8f:
                    25:1e:da:71:7a:5e:13:71:c8:61:78:2a:d3:f1:49:
                    7d:bb:29:88:68:03:f0:81:34:0d:96:bf:72:48:88:
                    35:10:5b:1b:bc:4c:7c:6a:53:7a:1b:03:06:1a:98:
                    b2:c4:f8:74:26:cd:7c:11:2f:bc:e5:41:54:cf:bf:
                    44:7e:4e:a7:58:b2:29:cc:f5:18:42:d4:13:27:53:
                    51:0b:5e:64:ca:b3:43:d3:76:ef:69:86:59:0e:80:
                    ee:d0:12:39:4e:1e:3b:9c:31:4c:d1:82:2a:5d:e9:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:66:F4:9D:08:D4:13:EF:BF:1F:93:5C:FC:E6:32:FC:12:A1:1C
            X509v3 Authority Key Identifier:
                keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/E3D288CA6BC311EDB9791958C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:0a:13:3d:75:98:27:21:d2:31:3d:e4:42:5e:60:c5:6d:
         b0:b1:53:16:93:8e:c4:61:b2:b4:06:99:ed:b4:b0:70:33:55:
         9b:00:38:17:75:42:6a:50:bd:85:85:f2:59:25:0e:64:dc:5b:
         09:5f:e0:da:03:c7:54:61:48:95:da:3b:f7:c9:fd:83:26:0a:
         74:b5:bc:f1:61:32:d6:54:d8:31:ea:d6:b6:79:12:ea:1e:c6:
         2e:13:dc:26:19:51:33:6e:64:d7:58:bc:81:8c:6c:4c:8e:aa:
         4a:12:6f:dc:52:53:6f:1e:f9:3f:85:da:ab:7d:53:17:79:53:
         8b:9f:f5:bd:90:0b:d6:8d:78:84:c5:99:57:91:6a:07:1f:07:
         1c:66:4c:d0:e3:10:47:a5:ab:01:fe:98:2f:ff:94:d1:bf:e2:
         04:5a:a1:06:ba:95:31:75:2f:13:8b:0a:97:63:83:7d:3e:d2:
         ea:aa:b2:c6:93:f7:e9:e7:f3:00:ac:14:a4:6b:0e:87:f4:28:
         1e:79:be:5f:69:eb:f7:61:e9:a3:45:06:b8:84:90:f9:96:4c:
         44:ed:4d:13:09:f4:97:7b:3f:7f:71:ad:c4:4c:4d:e6:83:4b:
         0c:a8:9f:12:1a:a4:c2:b8:1f:bf:49:cb:0e:14:2f:70:2b:03:
         71:64:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:05 2026 by rpki-client