Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C54C42C04D7611EEA69CE262C4F9AE02.roa
File:                     C54C42C04D7611EEA69CE262C4F9AE02.roa (raw, json)
Hash identifier:          bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=
Subject key identifier:   27:FC:83:85:6B:26:9C:97:FD:F2:31:93:01:F8:E8:88:A7:D2:32:BE
Certificate issuer:       /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial:       0601
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C54C42C04D7611EEA69CE262C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:06:19 +0000
ROA not before:           Wed 12 Nov 2025 22:14:10 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     35478
IP address blocks:        103.31.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
                          rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
        Validity
            Not Before: Nov 12 22:14:10 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a463fa-eb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:c9:fd:4c:74:5b:da:f7:dc:a4:1c:0f:0f:
                    39:2e:b2:d4:18:55:a3:bd:da:97:de:42:cb:4d:99:
                    5f:56:58:c6:15:6f:49:87:2b:8a:71:4f:fc:8c:2b:
                    77:0d:7e:e0:0a:6c:37:e6:6e:35:e8:7c:f4:85:79:
                    d9:2f:ab:b5:dc:8c:02:9d:e0:f4:a8:11:02:fd:7a:
                    c7:5c:60:0e:b5:4e:f9:c5:1f:6f:24:89:4d:3f:e9:
                    d0:8d:c2:c0:0f:20:8c:d6:c6:70:c4:52:0c:01:7d:
                    c7:c5:5f:8b:74:94:92:e1:b1:5a:48:f5:74:da:f3:
                    36:67:f3:d8:29:e3:1a:01:f0:e6:d8:3f:76:56:4e:
                    f7:d4:a0:c8:4a:1d:ee:6d:53:ae:d1:c4:d8:6b:f4:
                    82:6b:44:48:fc:ab:38:81:ce:58:66:f9:f7:b3:6f:
                    3f:ec:8a:58:0a:1e:bd:d4:84:ef:ba:d1:14:9b:bc:
                    84:6e:b8:6d:dd:bc:09:43:65:24:11:8d:82:ea:a2:
                    b0:fa:67:a5:1d:43:11:81:28:81:fa:9e:0c:69:c9:
                    52:b0:8f:e3:4e:07:ee:32:12:a1:52:0b:30:66:e2:
                    6b:85:bd:3d:36:60:6d:99:bc:99:29:92:66:28:62:
                    73:dc:b6:11:c3:ca:43:f7:d7:b7:b4:02:79:95:fa:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:83:85:6B:26:9C:97:FD:F2:31:93:01:F8:E8:88:A7:D2:32:BE
            X509v3 Authority Key Identifier:
                keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C54C42C04D7611EEA69CE262C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:6c:c4:82:e9:da:e3:4e:c8:66:ce:7f:da:00:84:53:ff:
         16:11:9c:84:cd:e9:28:fc:72:5c:8e:48:90:71:ff:d4:91:94:
         c2:8a:48:ab:cc:a9:26:cb:77:33:31:4d:07:d5:3c:ef:36:36:
         0c:0f:67:e7:b9:56:bf:47:51:d9:32:80:f1:59:fd:66:95:13:
         a0:2a:a1:d1:d6:48:ad:6f:6e:3b:f9:c5:08:09:16:38:82:1b:
         12:5a:2d:4f:e7:5a:a5:c5:74:55:77:29:f9:58:38:8f:17:e1:
         cd:f0:eb:99:d7:f3:8e:46:de:48:aa:09:f8:e3:1a:a2:09:90:
         e5:b0:10:25:5d:b3:19:1f:c8:f5:dc:76:3b:3c:f6:fb:1e:f4:
         18:d4:7b:6f:95:10:4a:5d:ed:6b:bc:62:06:4f:ce:04:8d:bf:
         5d:17:7b:b1:67:65:ac:cf:a5:81:a9:d9:89:ac:c8:a6:78:e3:
         14:f7:99:3e:8c:a9:ca:62:3d:33:8b:02:b4:88:38:44:be:b2:
         72:46:7b:20:3f:05:a9:2b:de:7b:b0:c5:4c:13:ab:bd:7f:6d:
         76:54:10:a7:9c:cc:41:92:ab:f8:85:a0:d1:61:95:1c:15:d8:
         2e:c0:fa:21:fc:d3:14:8f:73:45:d1:83:c1:c7:84:9a:76:b8:
         92:c1:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:15 2026 by rpki-client