Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
File:                     73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (raw, json)
Hash identifier:          cj0uIogezd0yWwaHnlYBF13kTbwkCk4qf3kI26mN/jI=
Subject key identifier:   B7:19:D1:E6:B0:B6:69:C5:22:7E:11:1B:F0:C6:81:2F:57:A7:13:89
Certificate issuer:       /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial:       0A4A
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
Signing time:             Thu 30 Apr 2026 20:25:45 +0000
ROA not before:           Thu 30 Apr 2026 20:25:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40513
IP address blocks:        103.88.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
                          rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634 (0xa4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
        Validity
            Not Before: Apr 30 20:25:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3bac8-fd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:93:03:dd:72:36:03:20:2a:62:ca:ab:af:
                    b6:50:c2:ae:78:89:11:b7:7a:a1:77:62:10:68:23:
                    d7:87:8d:c7:cf:1e:7c:1a:12:30:6a:b1:01:35:e3:
                    3f:46:bf:df:98:a6:f7:e8:88:fe:9e:e5:50:f5:50:
                    06:c3:33:c7:99:d7:38:d8:70:86:2b:8c:9b:ac:5d:
                    00:a6:63:6c:09:58:06:ee:10:d8:cf:d5:eb:d7:04:
                    24:6d:b2:28:74:2d:be:74:c0:09:56:4c:b1:15:aa:
                    eb:b7:1c:80:ec:56:06:3c:d8:af:e9:f1:61:3f:cb:
                    b6:66:a8:81:0d:5c:2a:41:c9:a7:a4:7e:04:a6:f2:
                    ce:d8:b0:27:ee:5f:80:e1:8d:34:3c:8d:ad:87:20:
                    03:13:12:06:88:59:2f:99:e7:19:91:1c:6e:8b:8c:
                    0f:eb:fd:14:0c:42:a4:2d:e0:a2:1e:8a:f6:6d:a0:
                    69:ea:36:bc:27:4f:18:39:11:b6:37:5c:d5:09:22:
                    60:a4:e9:a4:74:20:69:aa:e6:74:81:4b:a5:3c:a6:
                    ca:e1:df:84:e8:f4:a8:dd:23:c6:40:e8:9b:4c:77:
                    65:3c:6f:18:db:b4:15:44:0d:ba:76:f4:a5:79:0b:
                    dc:e2:0e:96:e2:4a:16:61:3a:d6:2c:3c:43:f2:41:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:19:D1:E6:B0:B6:69:C5:22:7E:11:1B:F0:C6:81:2F:57:A7:13:89
            X509v3 Authority Key Identifier:
                keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:3c:d8:80:40:06:71:e9:27:6f:f9:24:31:69:ef:1e:f6:
         b5:c4:74:60:fd:09:3f:28:a4:45:e7:2d:2f:66:ed:34:74:04:
         3c:b0:58:6e:e8:07:4e:80:61:99:f8:11:04:54:33:51:bb:de:
         08:50:56:19:f6:ff:08:46:61:68:b1:03:5d:a4:d4:0b:a1:2b:
         0d:db:40:69:32:01:ca:7f:82:3b:03:17:90:69:e1:c5:27:c8:
         8b:e8:eb:d1:bd:9b:ec:ca:fb:dc:97:aa:be:c8:4d:66:be:c3:
         93:a1:5c:90:21:7e:8c:57:6d:a6:f2:2c:3c:e0:eb:89:c1:cf:
         09:18:81:f6:ef:36:b9:c2:d4:e0:ae:66:47:5d:f9:d8:1b:59:
         dc:d5:42:0a:14:7b:92:51:08:9c:ab:db:3d:66:ae:1b:bd:d8:
         0f:39:78:1b:fe:3c:3b:d8:4f:01:f6:e4:2e:a9:fa:bc:83:ac:
         0f:36:1c:51:6f:ad:0a:3c:e7:45:df:b7:42:42:e0:b8:3c:06:
         1b:5d:37:ee:79:fd:a1:48:b5:a3:6e:01:dd:bc:6d:e4:8f:44:
         04:8c:cc:5f:7a:8c:a3:3b:52:f2:20:9d:bb:2f:2a:1a:ae:ee:
         19:ac:76:29:ac:e0:91:a2:c0:10:8c:61:bd:ea:b1:f1:5c:00:
         55:a9:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:53:07 2026 by rpki-client