Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
File:                     B5629336843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier:          0kNnzdVeh0Sh6Uho6EuziJV6g8jYacMqFFcOgtfoNRU=
Subject key identifier:   54:D8:10:EF:49:C4:6C:81:F5:85:9C:CB:14:0D:90:B1:F6:64:32:75
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1944
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:32:42 +0000
ROA not before:           Wed 30 Jul 2025 16:55:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     10145
IP address blocks:        203.98.69.0/24 maxlen: 24
                          203.98.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 16:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6468 (0x1944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jul 30 16:55:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5917a-48a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:1e:58:96:39:29:34:9d:eb:68:ed:b0:fd:
                    f9:76:81:bc:79:01:f4:6e:19:12:dc:dc:d7:5b:63:
                    3c:cd:2b:1f:26:dd:5d:ef:bf:d5:f3:26:7d:cc:65:
                    de:60:d5:26:9f:8e:d0:db:5e:c2:b8:96:d4:89:70:
                    7f:ff:95:5e:e9:4f:18:b2:a0:8c:ca:cb:7d:19:68:
                    2c:42:df:c3:d8:d9:8c:ef:63:15:f9:54:d5:99:9b:
                    fd:4b:dd:af:e2:30:76:38:40:a6:9b:48:50:e4:28:
                    15:a5:02:8c:ea:4b:72:90:f2:5e:ec:f0:4c:95:d2:
                    6c:e1:75:f5:75:85:52:99:d1:8b:05:4a:11:ad:b6:
                    2f:ef:f9:c2:78:83:1c:d5:39:6c:03:8f:94:a8:e9:
                    ff:c5:ad:45:73:44:54:eb:43:3c:cd:b8:e6:1c:80:
                    09:0b:92:54:38:16:bd:48:0b:7b:00:d1:1e:04:b5:
                    25:8c:ec:76:03:1a:20:53:cc:6d:6c:dd:87:78:b8:
                    11:06:dd:0e:c7:0f:12:b6:f0:9e:00:6e:61:21:ea:
                    9d:44:df:b0:29:5e:f4:c2:fa:6a:d1:22:4e:27:6b:
                    9b:48:0e:b6:ef:9b:a5:1a:66:5e:97:17:35:08:74:
                    b6:fe:7c:6e:c1:8b:52:32:5a:89:21:4c:b3:24:e4:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D8:10:EF:49:C4:6C:81:F5:85:9C:CB:14:0D:90:B1:F6:64:32:75
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.98.69.0/24
                  203.98.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:e5:57:91:00:bd:91:d3:88:ed:6c:63:d8:4c:36:69:8b:
         32:6f:67:f3:3e:47:fb:2c:95:76:0c:b5:ee:a5:7f:9d:ae:33:
         d4:ce:4a:c7:be:9d:19:31:16:6b:d5:1e:7e:92:92:70:90:17:
         b8:26:8c:35:0a:b6:61:4b:66:c3:07:ae:67:6d:d0:0b:c3:ef:
         d8:77:58:ed:bd:63:46:48:c3:ff:c2:83:dc:ac:70:43:26:5b:
         81:ff:ff:1e:fa:13:f5:cc:2a:4f:14:71:72:5c:db:97:8e:4d:
         68:00:7d:41:c3:94:71:8c:49:9b:4f:4a:70:e0:e9:62:00:dc:
         23:04:fc:06:0d:9f:c8:ae:e9:1d:ac:f0:fb:13:25:95:ae:b0:
         9c:0d:44:13:5e:8a:29:2d:31:16:97:1e:cf:5e:d0:c4:ef:fa:
         62:92:e5:7a:59:08:9c:db:59:5b:99:f9:42:e4:74:02:b4:19:
         be:ce:6d:5d:c5:73:cb:c6:9c:a4:55:71:3e:7e:42:d8:17:b8:
         d3:50:87:cd:95:e6:26:fa:52:ff:0e:17:7f:b2:1d:b5:96:fa:
         7b:d1:45:38:ec:bc:cf:cf:17:9f:27:29:8e:e5:82:9f:0a:a8:
         47:1d:33:00:af:d8:0f:88:7d:37:50:b4:dd:9a:7c:d6:32:ef:
         21:29:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:57:35 2026 by rpki-client