Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/E0A5F584DFAC11EE8C281B42C4F9AE02.roa
File:                     E0A5F584DFAC11EE8C281B42C4F9AE02.roa (raw, json)
Hash identifier:          ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=
Subject key identifier:   9C:74:CF:35:B2:F1:A4:98:99:0F:FC:E8:FA:1A:51:44:40:3B:75:46
Certificate issuer:       /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial:       05C8
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/E0A5F584DFAC11EE8C281B42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:13:22 +0000
ROA not before:           Fri 19 Sep 2025 00:06:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     5068
IP address blocks:        103.172.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
                          rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 22:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
        Validity
            Not Before: Sep 19 00:06:10 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a473b2-b53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:f8:1d:ca:a1:bd:be:a0:74:af:3b:7b:74:
                    8b:1a:31:6f:9d:3a:93:37:eb:b3:7e:5e:46:9e:61:
                    c8:65:93:ad:36:52:88:6d:fe:91:74:b7:01:bd:e7:
                    07:6c:b3:29:49:c4:48:a3:17:3a:cd:5b:78:f5:b1:
                    b0:fb:1b:89:15:1c:62:67:52:98:93:ef:4e:ed:bf:
                    d6:40:de:16:a9:3f:b8:fc:8b:34:90:65:87:ea:66:
                    3b:58:43:38:47:f0:ed:20:29:ae:da:04:ed:4f:e6:
                    c2:12:d1:bd:f9:ca:92:40:f2:f2:5f:3a:1f:07:32:
                    8d:f8:ee:54:e3:9e:15:86:ad:78:ac:98:88:f7:40:
                    17:6e:89:4e:92:82:38:d5:3a:74:d9:e9:f1:05:0e:
                    17:74:94:36:1e:0f:8b:1d:7b:fe:67:35:ea:5a:98:
                    fb:9b:4e:36:6b:ed:83:a2:46:36:a3:e7:32:af:4a:
                    73:fd:76:10:a6:1d:d4:46:0b:fa:bc:a5:14:b1:3a:
                    5b:21:0e:c7:3a:6e:53:60:98:4b:28:72:14:60:10:
                    85:76:7a:a6:2d:fe:44:c2:d5:98:2e:c2:0b:f2:90:
                    cd:e3:2b:74:5e:03:6f:b1:ae:43:27:23:60:6a:cf:
                    d9:48:78:f8:19:cb:59:29:ff:26:cf:95:0a:5c:32:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:74:CF:35:B2:F1:A4:98:99:0F:FC:E8:FA:1A:51:44:40:3B:75:46
            X509v3 Authority Key Identifier:
                keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/E0A5F584DFAC11EE8C281B42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:55:cf:97:07:f5:5e:e6:c9:bb:3a:82:fd:7c:cb:b7:79:
         c2:f1:3f:92:8d:b9:0c:05:b7:ae:2d:7d:6c:be:6f:56:8a:a0:
         ce:7e:80:ac:9b:31:f7:8d:7e:d9:ae:45:61:2a:a4:14:24:e6:
         f5:ad:41:84:01:fb:50:a6:da:98:1d:26:6f:58:61:db:eb:b8:
         4c:00:99:79:c9:f4:f5:99:54:d1:fa:3d:a1:32:00:60:9d:df:
         89:e7:0d:ba:47:f8:a7:fd:77:ab:dc:5f:8d:b3:fc:12:93:fe:
         3e:e5:f5:a4:5a:4d:73:99:02:54:9a:4f:7b:cc:e2:1d:5e:4e:
         72:3a:4e:24:7d:0b:ff:f7:e7:78:53:56:37:bf:44:d9:ff:04:
         05:0f:8d:56:b1:e5:5e:e8:a9:a5:47:36:3e:6a:98:3f:fc:01:
         39:d4:ad:88:75:75:1a:fb:ec:10:e2:9d:99:8d:5b:d4:c8:aa:
         fa:de:db:f1:8c:58:f3:bc:f2:e6:1f:ee:d3:89:2b:86:85:44:
         8c:1c:4d:39:f7:75:83:8f:3f:61:40:b2:f5:dc:76:f0:b1:86:
         41:4d:43:04:cc:fb:e9:24:43:31:af:a3:86:9d:5e:3d:87:64:
         9e:3f:e5:94:32:a5:4d:19:f1:92:bd:12:ee:04:a8:b8:f1:46:
         ae:0d:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:53:51 2026 by rpki-client