Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/D4378BBA268311EE9BB21413C4F9AE02.roa
File:                     D4378BBA268311EE9BB21413C4F9AE02.roa (raw, json)
Hash identifier:          TiDr6WpJL+EOMyHz0B6+gBTfSVybvdd71lcd+PZGQoA=
Subject key identifier:   83:FB:EB:F2:61:27:1B:35:F0:E0:C3:D7:D4:22:EC:7A:00:08:7F:B6
Certificate issuer:       /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial:       0A72
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/D4378BBA268311EE9BB21413C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 20:24:18 +0000
ROA not before:           Mon 02 Mar 2026 20:24:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141342
IP address blocks:        103.82.252.0/24 maxlen: 24
                          103.82.253.0/24 maxlen: 24
                          103.82.254.0/24 maxlen: 24
                          103.82.255.0/24 maxlen: 24
                          125.62.88.0/24 maxlen: 24
                          125.62.89.0/24 maxlen: 24
                          125.62.90.0/24 maxlen: 24
                          125.62.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
                          rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674 (0xa72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
        Validity
            Not Before: Mar  2 20:24:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a5f1f2-0a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:ea:7f:00:a1:65:67:82:78:db:d7:b8:8f:
                    14:25:a9:4e:3b:56:1f:2e:50:1f:0e:58:e7:ed:c6:
                    da:95:a0:62:94:b8:0a:68:33:65:a2:66:1d:57:6d:
                    77:a5:05:4c:62:f4:32:ea:b6:4a:f2:0f:42:b1:f7:
                    a4:f0:02:2a:fd:6a:4a:66:d6:da:ad:7e:10:d6:2b:
                    fe:de:6a:6f:d6:be:b2:07:5f:29:01:bd:22:08:bf:
                    97:04:1e:f3:32:41:b5:dc:cf:bc:07:ae:d1:e8:21:
                    51:73:24:db:8e:85:b5:72:25:2c:d9:0d:d3:29:43:
                    52:25:1f:99:30:3f:aa:b7:3d:4e:64:cc:c1:f9:5e:
                    99:0c:3a:e9:0d:f5:d1:ec:4f:06:3f:de:15:3d:35:
                    d5:e7:6b:44:b6:1d:bc:4f:04:73:1b:1a:d9:89:6f:
                    0f:86:cd:e3:80:b3:c9:36:5e:b6:d7:d7:f9:9c:c2:
                    9f:bf:03:99:a1:08:ff:bb:72:3a:ca:99:31:64:91:
                    1b:d4:05:87:0d:72:53:6c:32:18:b3:00:04:35:a5:
                    61:06:1c:87:44:3c:15:54:c1:2e:18:0e:9c:cb:64:
                    30:0b:42:d9:0f:13:28:96:62:c9:63:26:20:84:5d:
                    a4:f8:e9:48:1d:e9:b4:3f:5b:57:8f:c6:6e:b7:fc:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FB:EB:F2:61:27:1B:35:F0:E0:C3:D7:D4:22:EC:7A:00:08:7F:B6
            X509v3 Authority Key Identifier:
                keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/D4378BBA268311EE9BB21413C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.252.0/22
                  125.62.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:66:c0:44:8d:33:a2:8e:d6:c0:60:a8:1d:66:93:ac:c6:30:
         33:fe:7f:5c:0c:5c:07:db:e7:9b:7b:07:77:63:7a:29:ea:3b:
         0d:a9:81:14:de:65:50:89:49:33:3d:14:1a:89:97:4f:60:7c:
         f1:02:af:7e:fd:9b:75:51:20:c7:8b:72:13:a1:17:6e:d6:be:
         09:6b:87:a4:4a:41:95:b6:7b:a2:9f:bc:3b:ed:b3:56:d2:72:
         7c:d3:bd:36:50:9c:03:84:51:be:42:b5:08:2e:e5:8c:b4:b4:
         48:14:9b:b5:9c:42:d9:13:9b:8b:7e:8a:4e:bb:18:fa:53:bb:
         2f:36:19:21:aa:56:58:12:df:d2:f9:34:90:d1:bc:02:78:ad:
         89:c9:dc:d1:8c:a4:9f:b1:b1:89:c2:71:4f:b3:8f:cd:91:4e:
         86:1c:13:24:b8:6e:73:9e:bb:ec:a9:d3:a2:a4:93:d6:c6:6a:
         db:b2:92:ca:f5:59:82:5d:bb:31:73:ae:72:6d:3d:3e:4a:5c:
         f3:c5:29:b0:70:14:16:8d:ec:0b:34:48:31:ab:6f:b4:b0:b1:
         c9:ee:46:d2:a1:92:ab:89:1c:11:6e:77:1f:cc:87:84:ca:4e:
         78:fd:85:88:14:b4:1c:f2:31:ab:09:3f:ee:1d:18:f6:b1:f8:
         19:1f:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:03:31 2026 by rpki-client