Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
File:                     4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (raw, json)
Hash identifier:          EallfebufLqCAlBL3bBaT81E7nzyVBFM7pNeDJRtgKw=
Subject key identifier:   FE:06:38:33:1F:14:A0:4D:23:D1:8A:34:D8:5A:11:80:54:E6:0A:53
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1ADE
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
Signing time:             Tue 20 Oct 2026 16:29:20 +0000
ROA not before:           Tue 20 Oct 2026 16:29:20 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     135523
IP address blocks:        103.70.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6878 (0x1ade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Oct 20 16:29:20 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ad796e0-740b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:64:e0:0d:5e:f7:d3:ed:6c:b2:64:0a:fc:
                    b6:e3:72:67:38:49:bd:c9:c4:64:04:59:39:52:42:
                    5f:0a:b6:65:2a:c6:4c:33:bf:1e:22:24:52:79:94:
                    16:f1:b9:2c:4a:3a:21:e5:b1:26:b4:64:86:30:69:
                    d3:37:a4:6e:fb:14:62:06:ca:b2:01:35:21:4e:7d:
                    61:fc:61:51:8c:8f:f7:84:9f:ff:f4:18:1c:60:cb:
                    33:45:c4:0d:2c:28:f5:90:90:05:99:41:67:ed:84:
                    92:0e:cf:3c:26:16:ac:0a:d4:f0:c8:c3:0c:09:80:
                    c5:3e:52:0c:d7:b1:43:ab:74:c7:62:88:d3:57:38:
                    05:e9:e8:62:a4:c8:fb:ca:d2:f8:1a:c2:a0:37:9e:
                    a6:a4:84:35:51:77:ce:eb:83:b3:fb:b0:25:d7:c5:
                    00:dd:63:e6:98:76:ee:7a:b7:3e:c6:e9:08:9b:ac:
                    fc:0e:ae:fa:11:8f:fe:f7:42:69:41:01:fd:de:52:
                    37:f1:34:55:a5:18:a6:95:cb:75:22:e0:fd:f4:4a:
                    6a:61:57:be:19:cb:17:2b:18:b7:7b:e6:dd:08:ea:
                    72:e1:29:81:c1:c4:a5:f7:a7:67:75:38:fa:c7:91:
                    bc:e1:40:bc:4a:82:55:c6:71:fc:22:97:44:54:1c:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:06:38:33:1F:14:A0:4D:23:D1:8A:34:D8:5A:11:80:54:E6:0A:53
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:d6:69:a6:1c:db:28:ff:44:50:36:e3:98:0f:c3:a9:87:53:
         c5:28:20:be:b1:93:86:84:dc:12:4c:21:89:0f:f1:b2:49:b3:
         2f:65:6b:67:0e:26:1b:9a:ad:49:c5:c5:c8:b0:12:75:bb:d6:
         0e:f1:62:45:d5:d0:9b:0b:63:f0:41:96:7a:ec:4c:a6:a4:c8:
         40:f9:e6:16:4c:51:49:34:a1:e8:90:49:67:e1:15:43:4d:94:
         17:0a:c5:f9:2f:51:a6:46:9c:64:ff:d5:34:56:7a:89:ee:c1:
         cf:fb:69:f3:fe:d3:37:ed:80:bd:05:d8:15:a1:b7:da:91:c7:
         3e:ae:28:25:24:27:e5:f8:dc:e4:57:e6:48:cd:bc:76:4a:50:
         b5:91:0b:77:89:7d:91:83:19:5a:6a:d2:6d:11:78:ee:de:f5:
         55:01:2b:0c:44:09:6a:f3:33:17:f9:16:05:36:bb:65:f0:ec:
         5d:ab:12:af:85:73:42:9b:08:14:f0:ca:11:16:2f:43:c3:24:
         12:ff:f8:82:b6:74:a1:2f:36:17:77:33:34:79:7e:00:b0:b5:
         24:29:22:49:d0:07:0c:ef:5f:73:45:3b:c0:b9:e3:2b:13:66:
         1c:44:70:ac:26:53:a4:73:c8:47:0f:15:10:31:5f:06:27:eb:
         66:79:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:58 2026 by rpki-client