Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
File:                     D08850D2B71411ED98AFCC20C4F9AE02.roa (raw, json)
Hash identifier:          A2CyKDYZ86uo2gMdQ3gEpA0HjmMVcr+W92QQ9aO63X8=
Subject key identifier:   8C:02:DD:0F:17:4A:63:E8:C7:EB:EE:2A:DE:C9:7B:E7:A5:E2:56:39
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26F6
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
Signing time:             Tue 10 Mar 2026 17:22:36 +0000
ROA not before:           Tue 10 Mar 2026 17:22:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24242424
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9974 (0x26f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Mar 10 17:22:36 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69b0535b-61c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:54:81:48:15:5d:3a:f7:87:03:38:7b:60:
                    5d:e6:95:d3:74:f6:84:b8:02:23:ec:55:f7:51:12:
                    62:2c:a2:95:61:e7:10:e8:f5:b7:79:fb:a9:54:7a:
                    f1:4b:c6:16:0b:64:7a:bc:a9:49:26:35:78:ab:45:
                    7b:3d:64:82:c0:e1:c6:d3:b9:03:75:f8:c6:d6:53:
                    a6:a5:66:ca:7b:ff:ae:ec:f6:55:2d:63:4d:00:43:
                    c8:d4:43:10:26:0b:13:31:2a:f0:d2:45:e4:32:60:
                    3b:5b:06:f5:dd:6f:0d:e8:53:a1:ae:c4:b8:e9:49:
                    9c:a1:84:4d:59:78:59:99:ee:23:63:0a:07:db:e4:
                    c8:37:2c:2d:f5:8e:4d:c7:9b:db:61:3e:d8:6b:36:
                    3b:8c:1c:bf:02:00:53:e7:ad:88:1f:a8:60:05:a9:
                    1f:4a:6a:67:ad:ca:f3:15:f4:3a:b1:dc:02:c4:7c:
                    73:61:d7:83:a5:14:b0:d5:78:30:2a:10:4b:21:74:
                    5a:9c:b1:28:5a:e7:10:6d:4b:fc:c7:d4:f8:89:51:
                    f0:47:b4:7e:5c:c2:b6:78:5c:22:9d:ba:6b:c8:d0:
                    8d:65:c7:ff:95:b9:0b:a8:17:78:90:fb:90:e2:e7:
                    83:b0:2b:61:e6:30:4e:57:75:09:7f:21:2d:17:88:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:02:DD:0F:17:4A:63:E8:C7:EB:EE:2A:DE:C9:7B:E7:A5:E2:56:39
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:40:fa:4f:af:71:5c:88:ad:59:8d:4c:84:cc:ab:f2:bc:17:
         d0:f1:92:39:e9:6a:0d:63:36:60:31:3a:19:0d:71:c0:04:19:
         01:77:29:7a:b3:d1:79:ae:c7:4b:a4:ae:d1:0a:80:b3:df:81:
         5b:ef:31:e2:3b:92:5e:9b:f2:f4:f4:7d:c4:f4:9a:50:95:53:
         4a:16:95:c0:9a:43:a1:b4:b3:0a:76:43:1b:bf:a2:94:82:7d:
         80:35:5c:8e:32:d6:45:91:60:32:29:37:0e:01:46:f9:e5:18:
         eb:15:04:c4:2a:0c:58:1e:0c:49:e7:b6:1d:de:6e:b9:2b:8d:
         a1:98:26:90:b7:79:33:3e:70:d3:26:7b:ea:4b:6d:11:1c:0f:
         a2:ff:25:1a:cb:83:eb:0b:99:ea:ee:82:85:77:04:34:6c:96:
         ed:0d:53:3a:58:b9:86:8f:6a:61:48:9f:94:bf:81:5e:3e:c3:
         57:c5:f8:f8:7e:41:e9:bb:35:86:d8:e7:fa:f1:8c:3e:d9:97:
         65:a2:0e:8b:7b:59:59:18:ee:1c:50:c0:99:ae:db:ec:06:52:
         df:5f:2f:1d:9c:4b:42:8e:7e:67:44:5f:2f:f3:20:cb:19:34:
         3e:c6:86:c4:7c:a1:49:f2:12:70:95:24:e2:01:98:27:f0:24:
         ea:f7:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 11:43:23 2026 by rpki-client