Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/F307B7F4912A11F0B418B448C4F9AE02.roa
File:                     F307B7F4912A11F0B418B448C4F9AE02.roa (raw, json)
Hash identifier:          Sn67Wsq1d2oCfy6pDGrSn0YDKV0xfK/wnuR+TWYyUN0=
Subject key identifier:   E5:79:45:2A:34:D9:CF:8A:F4:DF:54:D9:D7:FD:CD:DA:CB:26:BD:D5
Certificate issuer:       /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial:       05C7
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/F307B7F4912A11F0B418B448C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:13:21 +0000
ROA not before:           Fri 19 Sep 2025 00:06:09 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     146961
IP address blocks:        103.172.81.0/24 maxlen: 24
                          2001:df7:6680::/48 maxlen: 48
                          2400:8da0:ea00::/44 maxlen: 48
                          2400:8da0:ec00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
                          rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
        Validity
            Not Before: Sep 19 00:06:09 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a473b1-b142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:69:d2:09:bb:5a:d3:5f:60:66:a6:f7:20:
                    bc:31:1e:cc:f0:93:35:cb:6f:d9:23:a3:08:bc:1b:
                    cd:da:1e:6d:75:22:4c:34:76:15:10:51:f7:a1:43:
                    56:c6:58:91:d3:e0:56:a3:e3:5b:0b:83:12:77:07:
                    e9:85:a8:b7:29:af:07:7d:0e:2a:3d:a8:ca:63:eb:
                    a4:51:f4:b7:7a:3a:fe:0f:59:64:ec:01:d7:39:e3:
                    15:1f:e3:31:05:25:90:30:6d:f6:b6:6a:54:ec:0c:
                    16:ff:19:03:eb:4b:c5:ce:7d:21:be:b1:c8:da:74:
                    bb:c1:3c:16:e4:c3:97:75:da:8e:fb:ea:61:e3:ea:
                    9c:62:ba:e5:4b:07:94:b4:44:ef:6f:d4:ed:ff:28:
                    d7:81:d1:3d:cb:d7:ee:82:29:99:63:5e:14:75:14:
                    57:1d:40:92:e8:76:68:d6:09:f9:fc:24:e5:fe:52:
                    4e:a9:ab:66:57:95:92:c2:20:87:37:6d:b2:08:7d:
                    74:98:3d:6c:a1:0f:2b:25:70:a1:7c:bb:3d:60:77:
                    d9:7f:24:70:11:ae:1b:8b:6a:a3:21:41:49:7c:af:
                    cd:82:19:65:1d:6c:b8:fd:7c:ef:15:68:e3:c1:4b:
                    df:37:b8:29:7f:72:02:d8:37:c8:dd:79:d3:3e:25:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:79:45:2A:34:D9:CF:8A:F4:DF:54:D9:D7:FD:CD:DA:CB:26:BD:D5
            X509v3 Authority Key Identifier:
                keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/F307B7F4912A11F0B418B448C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.81.0/24
                IPv6:
                  2001:df7:6680::/48
                  2400:8da0:ea00::/44
                  2400:8da0:ec00::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:57:ae:62:bd:dc:91:05:c2:d4:46:33:9a:11:26:22:70:
         a0:ab:e3:cb:8a:cf:5e:09:f7:cd:28:7a:2b:bd:e4:b7:36:f8:
         54:88:32:27:36:8f:95:4f:7b:5d:59:16:ce:0e:7e:7b:94:e2:
         58:cd:b7:20:a2:96:29:52:69:d0:32:c0:70:5e:3a:0b:84:0d:
         b0:76:75:e7:82:48:37:e0:09:3a:78:78:ea:e8:58:84:03:f9:
         36:fe:7f:22:9b:14:6b:b1:49:c1:87:24:3b:38:12:1c:9b:18:
         44:46:94:55:c3:11:8b:76:78:b4:5b:8b:f1:85:4a:af:31:56:
         f8:ae:ca:e5:19:74:55:f2:93:b4:0a:12:65:28:ea:25:fc:4b:
         1e:65:52:30:e4:57:f5:d1:8c:43:60:2f:09:8b:20:c7:89:30:
         e1:fb:33:50:f7:59:63:96:44:95:c9:15:ae:cb:d5:b9:23:ee:
         8f:38:96:cf:c8:f0:05:c5:c2:84:54:4c:55:1a:1a:f1:7b:99:
         ed:78:e8:24:19:c7:0f:56:34:11:69:cd:ab:03:0a:a7:96:16:
         a6:7a:37:c3:30:25:15:fa:af:f7:e1:2d:0c:97:75:7a:d6:91:
         cf:df:5b:88:1d:91:24:58:0c:c5:62:86:ab:d7:70:46:2b:a9:
         2d:44:d7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:47:08 2026 by rpki-client