Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
File:                     4CBDBA5E3F0011F18130B663C8833773.roa (raw, json)
Hash identifier:          MYIZdYIrRMX8GOTnK8Yq+Fr2Q47kM6T/tbwrjmOwZ2A=
Subject key identifier:   50:EA:F5:BD:86:2F:FF:83:C8:51:04:35:1C:E5:56:19:47:F9:F4:C9
Certificate issuer:       /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial:       1D9D
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
Signing time:             Thu 23 Apr 2026 10:36:35 +0000
ROA not before:           Thu 23 Apr 2026 10:36:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138640
IP address blocks:        103.239.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
                          rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 23:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7581 (0x1d9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
        Validity
            Not Before: Apr 23 10:36:35 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69e9f632-0eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:f4:fc:37:c4:6e:ac:9f:74:d5:35:d9:2c:
                    15:35:30:f1:62:ce:ee:d9:7c:69:32:8f:75:b8:c5:
                    37:2b:e6:af:2b:77:47:d7:b5:5c:8f:4d:38:a2:b0:
                    21:b6:06:e4:c4:da:86:3a:fd:95:65:ef:81:77:73:
                    09:5d:06:7f:a9:4d:50:06:2e:d7:37:c5:b0:2b:c1:
                    14:01:b8:30:71:aa:ad:25:0f:14:3d:b8:dc:62:f0:
                    e3:07:c1:48:67:72:98:ff:56:d2:96:61:6e:5f:51:
                    f3:aa:03:9b:e0:63:16:79:d5:05:69:3f:10:2f:aa:
                    d0:8a:b9:c2:01:18:19:f8:20:9f:20:00:3e:a6:cc:
                    e5:a6:b3:f5:6d:ee:06:95:b8:93:7d:f7:a7:86:0a:
                    1c:23:a8:91:32:19:cc:e6:44:b4:f0:85:b2:a5:f0:
                    04:16:e8:b3:72:e6:5e:f4:c5:22:60:75:7c:6c:1d:
                    37:5e:cc:3e:14:ff:8e:ee:ff:36:f7:15:c7:76:e5:
                    16:85:77:37:9c:82:fd:d9:25:7d:88:bb:7d:6a:6b:
                    30:92:b6:a9:15:fe:ef:1d:29:33:be:44:d9:35:80:
                    3c:4c:23:19:1d:f3:64:9c:df:36:ff:cd:2d:d9:29:
                    1e:21:cc:02:cb:8a:52:43:e0:21:c9:ae:87:74:98:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EA:F5:BD:86:2F:FF:83:C8:51:04:35:1C:E5:56:19:47:F9:F4:C9
            X509v3 Authority Key Identifier:
                keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:26:a1:ad:5f:7b:dd:39:47:c2:45:e6:12:eb:90:8a:3e:93:
         a7:c2:9a:30:da:08:4e:86:fa:72:50:43:2e:91:61:ab:5c:30:
         32:e8:78:ed:47:cc:d6:8a:23:1e:d0:3b:a1:b6:9f:90:09:2e:
         5d:35:9b:e1:7d:3b:de:6e:42:b6:8e:d0:15:c9:41:f9:62:25:
         c8:23:45:df:67:58:13:e3:3a:70:47:bb:78:e9:00:eb:8f:58:
         f6:fc:d9:a9:7b:ab:49:87:f8:fe:2a:f5:47:1c:32:04:01:e1:
         53:65:c5:52:30:27:da:48:fb:68:e6:7e:6e:22:fd:22:be:2f:
         3f:03:e3:b0:16:50:64:bc:14:06:45:0e:83:b5:5e:f9:77:33:
         1d:ce:5a:c5:0f:a0:82:97:8d:32:7a:4e:fa:25:cd:fb:6c:38:
         5c:74:2c:3c:b3:9e:ec:f9:a5:9e:42:f6:a0:0c:84:84:71:0b:
         6d:65:84:3c:8c:df:9e:e0:d9:15:43:64:46:19:a7:df:3c:7b:
         39:1c:cd:13:3b:dd:92:cb:5b:b6:42:19:78:55:fe:7f:eb:49:
         2e:0a:29:45:a2:06:71:71:df:84:27:9e:78:0a:c9:4b:ca:4c:
         03:fe:43:51:c7:cb:04:00:7f:7c:1b:1f:8a:14:6c:88:91:36:
         81:b7:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:34:10 2026 by rpki-client