Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa
File:                     968DFDCE973311EDBFD0B43CC4F9AE02.roa (raw, json)
Hash identifier:          SOZryTu4EW/bvslW0PH1vtDZItFz5w8nA9h/43Up0aA=
Subject key identifier:   65:8A:5B:59:80:04:E6:45:DF:3F:43:22:D5:22:17:34:42:AB:B0:49
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26FE
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa
Signing time:             Tue 10 Mar 2026 17:22:50 +0000
ROA not before:           Tue 10 Mar 2026 17:22:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     65533
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9982 (0x26fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Mar 10 17:22:50 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69b0536a-bdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:4d:4d:b6:0f:19:00:ee:e9:c1:47:e9:99:
                    41:cd:69:b6:e2:a5:e9:a0:b6:96:dd:0b:af:ba:d1:
                    0d:a3:a8:5a:5f:16:47:93:f1:84:17:8b:65:38:f6:
                    0b:46:5c:c3:04:bb:10:4a:1e:d4:1f:67:20:48:3e:
                    35:90:22:5f:48:ac:31:aa:42:4e:2c:9e:2d:d1:dd:
                    90:46:d9:8b:1b:dc:ac:a5:59:3c:c3:d1:dd:76:2b:
                    25:b3:4b:ba:24:27:7b:e4:04:f3:21:63:ec:ea:aa:
                    17:7b:05:e1:56:bf:95:d1:3f:a7:b3:b9:8c:db:d3:
                    d1:31:d0:83:01:1a:b0:f6:71:91:2b:c7:80:2d:05:
                    20:f7:42:0f:1b:2a:53:fa:40:64:2e:08:94:fd:02:
                    48:65:a5:22:0d:ff:a8:4f:dd:e3:c6:ed:99:95:17:
                    fa:cc:89:56:7f:93:62:99:09:06:c0:62:2c:45:b8:
                    f6:b1:d0:c8:61:3b:25:a8:3c:24:8a:6e:fb:5f:76:
                    1c:78:11:21:93:d6:30:00:0b:1c:65:8e:37:40:bd:
                    6a:84:a2:8e:e3:7e:5e:f4:a4:c9:ac:86:c6:fb:a0:
                    10:29:86:a1:93:f8:0c:b2:db:ff:f6:a1:a1:f9:02:
                    dd:39:28:27:0c:8b:0b:36:a6:c9:1d:27:c7:fa:2e:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8A:5B:59:80:04:E6:45:DF:3F:43:22:D5:22:17:34:42:AB:B0:49
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:b8:29:1f:c1:98:1c:cb:59:cf:5e:3e:12:cc:3a:fd:42:
         2d:93:6d:54:59:cc:5a:91:fa:ad:8d:d7:3b:58:64:65:eb:9b:
         4b:6d:e1:a5:88:6d:77:ff:96:c2:4a:9a:eb:6f:9d:b5:06:ae:
         ad:be:4d:e1:e5:30:09:a6:d9:37:b0:f2:16:2f:2c:2a:a4:88:
         8c:f5:38:ae:88:57:60:fb:a6:2a:f6:d9:95:c2:b2:ed:ec:bc:
         3d:8b:ab:cc:a3:20:3b:61:8c:0d:04:cb:47:08:df:64:f1:d2:
         6b:7a:d1:5a:81:5c:93:b2:4d:7b:fb:69:f0:e5:3d:7e:86:cd:
         80:c6:d4:94:f1:e3:cc:a8:68:32:99:26:cf:fc:8a:3a:92:74:
         36:f4:cd:21:09:53:6c:1d:1a:27:d9:99:74:05:a5:a0:c7:ed:
         8e:ba:52:34:0d:22:a5:6c:88:dc:b1:62:d2:9c:94:1f:7c:d2:
         d6:a0:d4:75:0b:e2:58:9b:be:aa:c0:de:4a:ab:41:5c:4d:65:
         d2:b5:e0:c8:a3:5a:5b:dc:ea:27:9c:1e:f5:4b:c1:63:f9:cf:
         0c:ec:e4:1a:e7:37:80:33:a2:7c:61:11:cd:e9:e5:58:c7:16:
         dc:60:55:45:1b:f8:73:cd:5d:63:b9:f9:1d:b2:d8:27:fb:e2:
         f2:a1:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:52:36 2026 by rpki-client