Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FE1C0C348E9211F0B9F46F41C4F9AE02.roa
File:                     FE1C0C348E9211F0B9F46F41C4F9AE02.roa (raw, json)
Hash identifier:          jUlzv+BPveVCQ4DOQfVrNZRZohUrZQ5kxaV6qLf2VRw=
Subject key identifier:   85:6E:EC:1F:2A:9A:EC:A7:60:3F:B8:59:34:12:70:9E:A1:78:FD:F1
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       01C3
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FE1C0C348E9211F0B9F46F41C4F9AE02.roa
Signing time:             Sun 03 May 2026 04:36:52 +0000
ROA not before:           Sun 03 May 2026 04:36:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33667
IP address blocks:        103.111.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
        Validity
            Not Before: May  3 04:36:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6d0e4-a06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:0c:42:35:71:a2:e1:2d:d6:b5:4b:93:13:
                    06:fe:8a:d5:73:f5:5c:7c:e0:93:c0:0b:cb:61:7b:
                    44:ee:f9:47:a3:71:b4:af:b8:59:18:7f:a6:f6:81:
                    47:8e:ac:96:ce:0e:e8:48:f3:f0:48:b3:c2:d6:95:
                    12:1a:16:75:d6:20:37:be:10:a6:58:37:63:68:ae:
                    37:84:c2:72:d5:8d:2a:c8:e3:fb:04:0a:1e:28:d1:
                    80:6f:6d:92:4d:88:d4:a2:21:e7:36:47:d6:ac:8b:
                    12:fc:3e:f1:44:57:e5:94:47:88:5f:25:c2:dc:c5:
                    d0:86:02:16:73:7b:04:78:b3:98:1d:a1:21:dd:6b:
                    b4:d3:35:73:a5:9e:f5:73:c0:78:c4:d7:2a:a3:5e:
                    d2:78:3a:83:38:10:2a:da:30:89:1b:87:bd:9b:89:
                    ee:5c:a2:ab:bb:d2:23:15:7d:9c:bc:9b:09:00:9d:
                    b8:2b:50:f0:fa:4c:a7:10:eb:9e:4b:a5:4d:44:0c:
                    70:15:01:ac:e8:1c:89:28:8f:c8:ff:a3:67:67:7a:
                    fe:af:21:c7:20:1d:fc:8c:bb:ed:54:93:66:37:f7:
                    70:db:28:3e:fa:f1:4a:21:94:28:dc:15:44:ef:d2:
                    6c:e3:85:19:3c:89:87:94:c6:c6:50:24:99:6d:5b:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6E:EC:1F:2A:9A:EC:A7:60:3F:B8:59:34:12:70:9E:A1:78:FD:F1
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FE1C0C348E9211F0B9F46F41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:5c:1f:ca:6b:a2:96:11:85:e1:bf:65:3e:9c:cb:74:fb:
         25:d8:3a:67:71:27:fc:17:d2:13:b2:cd:08:20:14:29:00:72:
         41:3e:b4:5a:1f:33:f6:49:36:77:62:aa:ca:a7:91:67:c5:9f:
         2f:6b:b7:29:cd:d8:57:0c:c3:af:d1:d6:30:ff:89:72:b0:d3:
         c6:7e:7f:e3:bb:5b:31:d8:57:47:4f:34:5f:b3:08:b7:e3:99:
         74:ce:f6:d8:fd:da:5c:9a:43:53:b9:a2:0c:44:d3:fd:a1:ec:
         17:4f:c4:33:51:43:02:3b:c2:61:a9:89:59:d4:6b:51:40:8e:
         f8:f0:e3:22:72:d2:3a:18:a9:1c:d3:e2:f2:72:24:ff:44:fa:
         cc:10:23:d9:54:99:1d:a5:a3:7f:fa:3c:cf:ca:c6:66:eb:df:
         de:3e:83:5f:6c:5f:b8:83:18:bf:f8:d1:d5:aa:fc:be:29:84:
         22:0e:41:6d:ec:25:43:cb:b6:b0:34:01:a8:f2:35:e7:91:fe:
         c5:b2:8b:0b:54:84:dd:57:1a:cd:5f:29:e6:56:d4:b9:bb:5b:
         c1:cc:f9:5d:ab:9f:e5:5f:30:4e:a5:62:1d:53:2d:c4:c0:44:
         99:57:78:ad:7c:3e:10:76:74:d9:27:4e:67:14:f5:4e:45:f0:
         b9:c9:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:15:24 2026 by rpki-client