Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
File:                     3D8F78D8772511EEA2E37420C4F9AE02.roa (raw, json)
Hash identifier:          vXtCnwP0/IBHbxeworI8u9Bbw73TO07w64H/BbUCqCE=
Subject key identifier:   BA:72:2A:28:BB:40:8A:7D:81:B5:6A:5F:72:4F:67:18:37:60:90:83
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       01DB
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
Signing time:             Sun 05 Apr 2026 03:37:53 +0000
ROA not before:           Sun 05 Apr 2026 03:37:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142271
IP address blocks:        103.121.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Apr  5 03:37:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d1d911-6ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:d2:80:e9:d6:77:dd:5c:a6:3f:26:53:35:
                    2b:23:25:d1:12:4a:c2:39:16:26:08:e4:ae:f4:8a:
                    c6:64:28:95:96:ea:73:1f:99:a5:02:55:8d:a4:09:
                    c5:6f:8c:77:77:9f:4d:6f:da:f3:07:9f:6b:22:63:
                    a9:17:52:22:4a:5e:15:0a:ca:15:ae:e2:a6:d3:55:
                    e8:40:da:bb:81:30:95:7e:5e:e5:ad:55:bf:5e:97:
                    40:f3:14:5f:97:73:6f:56:81:4a:cf:c1:df:18:ab:
                    e6:60:8a:e4:54:86:2c:a3:50:17:69:c5:c1:51:b0:
                    3d:b5:39:3b:df:d4:e6:59:38:a2:34:8d:b0:52:e9:
                    b7:e4:ba:49:96:5a:b5:1a:57:ff:8e:d2:2c:cc:d5:
                    da:5a:77:e6:0f:22:71:e9:e3:67:11:3f:ce:42:97:
                    80:25:5a:a3:20:92:c8:3c:fe:b5:06:99:d5:ed:ee:
                    c9:9d:fa:d3:d2:30:8f:ca:45:c4:98:5d:43:72:57:
                    ee:5d:bd:ca:26:ba:9c:57:ec:b6:c6:0e:41:6d:fd:
                    59:34:05:ab:0e:eb:c6:30:27:e0:f4:8c:aa:b7:70:
                    e2:fd:f6:78:14:0d:1d:3f:42:91:f6:76:8f:e7:94:
                    e5:53:5c:8f:53:e5:15:fc:88:61:fc:30:f0:07:e5:
                    f8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:72:2A:28:BB:40:8A:7D:81:B5:6A:5F:72:4F:67:18:37:60:90:83
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:cc:a0:db:26:33:c9:7e:ec:8b:30:ef:4a:5c:27:9a:7b:d5:
         66:8a:ef:c9:f6:52:5c:f8:d7:5c:62:31:23:d6:a3:43:40:66:
         06:61:83:ff:e9:73:1d:19:83:4b:5b:df:1a:0f:0e:82:06:08:
         98:3a:1e:be:0f:ca:b7:c1:84:10:95:2b:87:a6:1b:ad:68:78:
         d6:ba:07:43:64:ec:0c:d2:d1:62:37:04:64:97:c7:da:fd:cf:
         c6:ac:23:29:4a:88:df:b8:5c:c8:b4:f5:84:46:92:20:81:71:
         a0:6c:68:ed:d1:f0:43:16:85:b5:cf:83:43:7b:63:22:57:7b:
         cb:84:4c:21:16:dc:94:70:cf:c5:f9:a1:da:55:15:ae:aa:3d:
         89:99:bf:35:22:5f:50:c3:9f:46:13:67:3f:e2:4a:29:8d:26:
         3b:3a:95:c0:22:15:81:a1:57:f7:53:44:60:d5:53:69:eb:2b:
         59:8c:11:cb:bc:08:ed:27:66:4d:ed:ab:68:21:58:1e:24:23:
         cc:16:a9:6f:e2:b1:86:e6:fd:73:8e:b5:78:4a:0e:07:e4:af:
         33:c6:e3:16:16:29:f4:ab:3c:02:20:ca:f2:21:7e:de:ac:22:
         c6:d7:06:c5:af:78:12:7c:34:86:f2:1b:4d:d7:ac:81:d7:b1:
         16:3e:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:25 2026 by rpki-client