Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/CDA4E0082E6511F19AB402C39E833773.roa
File:                     CDA4E0082E6511F19AB402C39E833773.roa (raw, json)
Hash identifier:          rh39GitPC7cxp3eJsYGmMJX7W8w6fDSBPZHHe7mWb+M=
Subject key identifier:   D9:71:40:63:DC:FF:D2:65:F5:BE:BB:7A:FE:D1:9F:EE:76:75:96:F0
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0E4E
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/CDA4E0082E6511F19AB402C39E833773.roa
Signing time:             Thu 02 Apr 2026 07:39:04 +0000
ROA not before:           Thu 02 Apr 2026 07:39:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133854
IP address blocks:        103.111.13.0/24 maxlen: 24
                          2402:76c0:5020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3662 (0xe4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: Apr  2 07:39:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ce1d18-66e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:94:f1:cd:3e:04:75:7b:3a:06:04:a0:45:
                    ca:02:7d:41:d0:53:2d:5b:8f:b4:4b:eb:50:4b:1f:
                    4c:f2:ff:46:b9:6a:b4:be:d3:cf:28:a1:e4:21:2f:
                    da:e1:f2:56:5b:0f:d7:7e:94:cb:1b:ec:79:19:d3:
                    07:5e:f0:72:dd:fa:7c:15:91:b0:25:47:ce:f2:33:
                    02:dc:b7:bb:81:54:d3:6d:7d:4b:6c:84:8c:cc:83:
                    22:d5:68:cf:48:3f:c9:ec:9f:b1:ec:b7:2e:4f:9c:
                    d5:ba:8b:32:4a:34:cb:84:25:6d:82:9b:55:de:4f:
                    13:c1:0b:ee:8b:d8:d8:0c:d4:50:35:37:a7:1b:12:
                    e7:25:e7:f1:cb:50:00:1f:65:0e:8d:e2:7e:c8:d1:
                    bf:43:82:a0:84:e3:7c:61:29:d3:22:d4:f0:5c:37:
                    4f:37:80:83:f7:01:f0:c2:29:66:f1:f4:43:b1:90:
                    80:87:6a:90:d8:40:94:ab:cd:c7:f2:eb:92:fb:91:
                    7c:51:57:f2:39:54:44:a0:5a:f0:04:3c:1a:a7:1c:
                    3b:af:3c:00:e1:14:e1:bf:59:70:33:f1:45:a8:eb:
                    3d:b7:aa:8e:9f:29:e8:16:2d:39:b9:b3:12:e1:45:
                    87:bb:88:20:ac:25:c1:9b:2b:f9:b9:e8:4b:44:da:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:71:40:63:DC:FF:D2:65:F5:BE:BB:7A:FE:D1:9F:EE:76:75:96:F0
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/CDA4E0082E6511F19AB402C39E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.13.0/24
                IPv6:
                  2402:76c0:5020::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:15:db:4f:d2:d8:fe:a9:9d:ba:9b:75:8c:4d:db:f9:fa:b3:
         1e:50:e3:79:fe:eb:0a:1d:84:be:77:15:4a:df:8c:b0:64:6f:
         91:9a:16:db:73:9e:7e:a0:2b:7d:6d:ae:4b:b7:8c:8e:a9:05:
         3b:59:c3:7f:d9:12:88:69:c2:85:85:0f:4b:5a:3e:b2:e6:c0:
         13:62:d9:c6:c2:ba:94:df:48:5b:c6:d4:38:d4:7f:12:37:be:
         89:24:41:6b:5c:f2:29:18:8f:23:b9:bf:e2:82:64:b6:3b:3b:
         a6:b2:47:4f:60:60:43:60:dc:0f:df:f3:53:67:11:61:b7:61:
         17:fa:2f:f9:f1:3c:c0:c8:02:eb:8d:57:49:df:a0:86:4e:ce:
         30:36:34:5e:4d:c1:c5:14:08:9f:1e:7b:81:c8:21:4e:b6:12:
         6e:22:02:35:d3:7a:6a:1d:90:f7:31:43:36:38:4f:ef:41:aa:
         21:1c:36:21:b5:ae:e5:b7:88:2b:6f:c5:3f:3b:84:f7:5e:cb:
         d9:5d:f2:ea:28:0e:dd:6d:dd:b9:c2:cf:9c:e5:db:07:45:b4:
         2e:fd:2c:34:cf:aa:30:7c:0e:bc:da:c7:67:13:7f:66:d1:fe:
         6f:8c:02:93:7b:da:af:f5:94:c1:9c:96:c8:1f:76:5b:eb:b7:
         4a:90:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:40:46 2026 by rpki-client