Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
File:                     670793E8F0EC11EFB7FBC612C4F9AE02.roa (raw, json)
Hash identifier:          dqWOzU0Hk4FU69te54sGPE+inxaGG4JuV2n7is/nqYI=
Subject key identifier:   51:B4:0A:14:BA:03:A2:7D:9B:4F:35:3D:AA:C5:53:3B:3A:E5:C2:ED
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26F3
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
Signing time:             Tue 10 Mar 2026 17:22:30 +0000
ROA not before:           Tue 10 Mar 2026 17:22:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9971 (0x26f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Mar 10 17:22:30 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69b05355-060c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:27:00:4d:b9:c1:62:8e:64:1e:5c:37:0b:
                    27:ae:1f:3c:a4:76:15:85:66:ca:9e:e6:e1:1e:99:
                    7e:f2:b8:f8:a7:57:18:60:88:55:98:eb:ce:b3:e5:
                    79:d7:cd:55:7e:61:93:6b:f3:45:37:33:21:e3:b2:
                    15:96:1d:9a:2f:c3:90:81:07:a2:27:eb:1f:74:e0:
                    ec:65:22:ec:23:a9:93:e3:b2:a0:e1:ee:d5:31:6b:
                    a7:2e:ef:ac:21:65:dc:0f:fe:e6:18:34:f6:07:98:
                    87:e0:eb:0c:d1:3d:8b:ab:b6:19:76:e5:6d:4d:f5:
                    6b:c0:1d:0a:21:31:d2:d6:a0:8f:28:5c:84:8f:e8:
                    d9:05:25:24:ce:d1:a4:38:3a:55:e5:df:e0:0a:d8:
                    87:97:fe:6f:ea:e5:74:64:33:f7:dd:28:73:e8:7c:
                    44:03:20:99:1a:78:0c:32:c4:2f:52:57:c2:f0:00:
                    b4:10:0b:bf:7f:05:58:58:44:dd:6a:48:42:76:d5:
                    9d:bf:df:35:99:07:41:78:64:d0:f3:43:33:69:da:
                    49:eb:62:28:b7:7f:c9:55:1e:37:d7:18:da:f4:83:
                    0d:16:09:49:e6:87:32:6d:90:ff:73:b8:ea:e2:aa:
                    ce:58:43:eb:ed:d7:52:e2:dd:ed:00:84:82:21:49:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:0A:14:BA:03:A2:7D:9B:4F:35:3D:AA:C5:53:3B:3A:E5:C2:ED
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:f8:f2:6d:6f:88:17:86:22:d0:34:43:4e:3e:61:13:eb:
         c6:6e:f1:2e:bf:1b:2c:33:27:aa:48:e0:dc:6d:84:e0:0c:89:
         7b:27:bc:ea:41:31:6f:ac:ce:93:6c:4c:64:24:59:e7:95:ee:
         98:c1:4a:8e:0a:f7:17:7a:3f:3c:02:3e:79:f7:90:33:9f:63:
         a1:78:65:e3:f0:71:ff:aa:d7:55:c0:f1:f3:45:86:e7:be:57:
         8b:6b:9d:24:f0:91:23:06:6a:85:4e:10:14:14:a6:cb:8d:61:
         72:ef:fd:fa:d7:2b:94:e7:13:47:25:56:9a:23:d8:fd:5c:8b:
         c3:37:b5:d4:61:7f:3e:85:3e:77:13:64:06:29:e9:3e:f6:59:
         06:82:97:4e:5e:ee:d4:ea:a8:19:58:91:9e:61:a9:17:ca:76:
         d4:4f:d2:9d:54:1d:18:b5:10:ab:46:cf:1a:22:2a:70:9f:0f:
         3e:1b:5f:db:5e:7c:17:39:17:28:fe:a8:0d:a9:0c:2e:88:c4:
         40:83:b0:09:0d:59:75:a0:7a:af:c3:df:33:46:20:4d:26:58:
         2c:b6:45:d9:f3:32:b3:25:cd:07:45:19:ec:e8:64:31:5f:e3:
         c7:48:b3:42:90:eb:df:00:7f:1a:bd:65:bc:86:fc:70:67:bb:
         b6:00:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 11:40:53 2026 by rpki-client