Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
File:                     64720824EF6611EB9A7EFE0EC4F9AE02.roa (raw, json)
Hash identifier:          LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=
Subject key identifier:   60:92:EC:CF:5E:E5:D8:62:99:2E:89:A3:6D:D6:DF:12:15:77:A8:13
Certificate issuer:       /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial:       05E9
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:58:26 +0000
ROA not before:           Fri 14 Nov 2025 22:13:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9790
IP address blocks:        103.252.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
                          rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
        Validity
            Not Before: Nov 14 22:13:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45412-058a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:4e:90:57:87:d1:4e:fd:65:f2:bb:30:08:
                    94:fa:88:ac:7b:8f:f2:64:70:37:a2:83:85:18:2f:
                    d0:54:c4:fe:e3:c9:2b:51:a4:0d:fc:7a:9b:07:a2:
                    97:ed:c6:c5:c6:07:fc:62:87:a0:ea:8e:7f:14:b0:
                    42:4c:ef:5e:c7:71:fc:40:29:17:57:bb:b9:c5:0e:
                    b8:84:47:79:be:f9:54:a6:a6:b9:90:53:0f:c4:58:
                    1d:b5:91:98:37:2c:d8:34:49:33:75:cb:da:b8:2e:
                    b4:bc:7a:09:55:e6:a0:79:fc:19:ba:50:dd:1d:4c:
                    2c:35:30:32:93:0a:22:e0:b3:c1:bb:69:42:a5:b4:
                    0f:97:e4:fb:75:9f:c4:c4:f4:31:80:da:cc:6f:bd:
                    d6:b7:78:61:79:25:cd:33:56:60:2d:93:0f:2b:f2:
                    09:30:6a:0e:39:80:80:2a:5e:9d:8b:c2:f0:68:1a:
                    56:a5:c7:9a:73:78:6c:fe:e4:e5:e4:2a:bd:ed:26:
                    66:48:10:fd:df:fb:2b:50:d9:12:bf:a4:7c:3b:3e:
                    42:55:ac:f1:ec:6b:bf:b7:dd:e8:e8:0b:dc:5c:50:
                    ed:97:8f:a6:2f:41:97:e3:33:55:c8:bf:d6:69:b0:
                    59:8c:13:6b:69:77:37:83:da:ce:1e:86:9d:80:b3:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:92:EC:CF:5E:E5:D8:62:99:2E:89:A3:6D:D6:DF:12:15:77:A8:13
            X509v3 Authority Key Identifier:
                keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:f9:44:60:7c:20:29:65:f7:6c:c3:66:58:48:d9:6d:f6:cf:
         28:d6:f2:d6:f9:db:f5:31:03:3f:e4:12:17:d5:2e:79:6d:3b:
         0e:75:33:1f:74:b3:63:f5:4b:0d:72:9e:ad:7f:70:c7:c7:f1:
         43:cb:ec:fa:20:1e:a5:b7:67:14:f0:9a:98:31:13:73:40:50:
         07:fd:b6:ca:64:1a:65:6c:d4:8b:d2:32:df:48:8c:6f:86:1e:
         28:4f:5f:c7:42:75:f6:34:ae:5b:9c:44:8a:69:3a:40:2c:0a:
         0a:55:a5:51:1d:6c:dd:ea:62:ab:ac:de:a3:a8:72:5f:d6:36:
         16:75:ee:22:55:27:fb:4d:95:bc:39:27:d1:2d:19:fe:cb:52:
         c1:69:44:81:55:50:2f:2f:28:5f:91:32:2f:ed:99:49:e6:2c:
         8f:8e:09:70:6e:65:3c:a9:19:3f:0e:1a:d7:51:be:5d:25:9d:
         ad:3c:36:4f:54:e8:ea:61:f8:be:f0:d0:20:2f:66:c9:9b:2e:
         6d:64:d6:95:7d:ca:dd:68:26:ec:f6:12:c8:92:f2:99:49:4a:
         be:57:a3:3f:73:36:7e:9f:57:70:be:62:6a:54:3f:bb:9d:8c:
         e2:f5:f7:cc:05:ef:d2:ff:7a:4e:2f:cd:36:ea:82:03:9f:1a:
         c6:8d:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:17:22 2026 by rpki-client