Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
File:                     2F5D72E695EC11F0BF295042C4F9AE02.roa (raw, json)
Hash identifier:          IquZlt5lfhcsaKAcex7emT9MmUtyhWwyhAr1ZZXgoW8=
Subject key identifier:   51:48:EF:34:30:1E:36:29:41:BF:89:99:F6:D6:B8:3B:8E:CC:DD:40
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       0270
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 02:54:20 +0000
ROA not before:           Sat 29 Aug 2026 02:54:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     215607
IP address blocks:        103.135.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Aug 29 02:54:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9249dc-88c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:09:99:b5:1e:4a:e2:1c:93:d9:eb:ec:60:c1:
                    bc:50:9f:b7:38:50:0f:b1:d6:6e:1d:61:e0:dc:b3:
                    d5:89:16:cc:28:d4:51:d4:e4:b4:06:f5:78:64:fa:
                    33:e8:aa:3e:d4:54:5a:cd:c3:bd:23:82:0b:87:85:
                    29:bd:3c:9c:52:a0:21:09:ac:01:f2:11:f4:b6:24:
                    24:da:f2:96:0d:3e:12:04:42:0a:72:68:50:5b:01:
                    26:1b:3c:35:b0:d2:3f:87:3d:66:97:36:59:bd:a4:
                    04:09:d7:74:8c:4b:93:4b:78:0e:e0:07:33:bd:bf:
                    35:c1:dd:47:6d:a1:15:52:69:59:22:9a:ad:a1:41:
                    02:d8:20:33:f2:ae:e2:e4:cf:e7:37:ed:09:ca:f1:
                    69:98:7b:1d:3a:58:c7:94:57:a5:e7:42:82:3d:53:
                    8b:9d:ba:d8:41:b5:cb:cd:cf:63:e9:f9:a1:88:02:
                    d1:2f:be:15:c5:54:15:73:3d:80:45:e1:dc:ea:50:
                    06:ff:cd:e0:f2:15:20:e8:bc:2f:8a:fb:75:90:d5:
                    55:6d:f2:b9:ad:42:11:26:0e:37:f0:8e:c3:f6:ed:
                    21:5a:14:b4:08:e7:68:dc:f9:79:2a:8e:95:3e:5d:
                    32:c4:23:43:26:16:2f:a0:90:ca:02:80:f8:3b:69:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:48:EF:34:30:1E:36:29:41:BF:89:99:F6:D6:B8:3B:8E:CC:DD:40
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:7e:7d:d3:e8:45:75:05:21:6e:5f:6f:56:06:25:b4:00:
         73:20:4b:db:ae:69:3a:67:3b:0d:24:24:a1:e5:84:d7:8b:c5:
         a4:ec:47:95:c7:ed:60:a2:5f:bb:f6:80:ba:29:db:2e:db:64:
         93:ab:1e:eb:02:7b:72:f9:ee:13:33:7c:b6:b2:fa:a5:4c:14:
         ea:85:de:27:ae:46:c2:aa:bf:d2:d4:d3:28:fe:a6:21:2d:fd:
         a5:c4:d6:8d:75:e7:52:ed:cd:c4:a3:9c:26:af:f8:24:1c:52:
         02:c6:76:7f:14:d5:bf:a5:87:c8:71:f6:7b:c9:97:d6:34:52:
         2d:65:a1:5d:a1:40:49:fa:6d:cd:40:a1:7e:8c:05:0f:a4:b6:
         b6:6d:78:b9:28:ea:22:5b:6f:b4:8e:9b:60:7f:c3:b9:85:63:
         33:5c:29:c5:3d:72:0f:84:5a:d0:f0:d2:ee:9d:5c:5a:e8:18:
         7a:ba:4c:d3:a6:09:45:2f:0b:2b:80:44:e0:27:75:5a:e6:a7:
         e3:4d:fb:d6:71:a7:c4:4e:74:d1:c1:d6:db:29:ec:71:ef:13:
         01:0b:21:c8:1e:31:b1:de:fd:b9:68:82:d1:27:64:1c:39:d0:
         8e:d3:b0:8f:4c:81:12:7b:7c:94:77:b0:d4:3f:4a:7a:1b:09:
         61:88:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:34:06 2026 by rpki-client