Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F2D5C21216F511F086107D74C4F9AE02.roa
File:                     F2D5C21216F511F086107D74C4F9AE02.roa (raw, json)
Hash identifier:          ZuKywPCk/DkKyCpqoZBfyKV9L6QxTxAVdxmCPTDjvq8=
Subject key identifier:   02:E0:51:79:5F:AE:7E:9F:67:DE:53:45:05:FC:0A:97:A5:8D:77:3F
Certificate issuer:       /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial:       019C
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F2D5C21216F511F086107D74C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:22:52 +0000
ROA not before:           Thu 31 Jul 2025 05:42:04 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        103.190.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
                          rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
        Validity
            Not Before: Jul 31 05:42:04 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58f2c-257c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:12:cc:aa:28:c8:d7:4d:c1:ce:f8:13:59:
                    6a:3d:27:5b:f1:2d:8a:0a:56:5f:3b:41:8c:a0:59:
                    3f:2e:2c:ab:5b:a3:ac:95:58:5f:90:a3:41:f7:cb:
                    24:e5:03:3c:68:6c:eb:1a:b1:34:ad:83:9e:f1:b5:
                    32:9d:e0:1e:d2:08:27:e4:84:56:ce:71:c8:92:90:
                    69:5c:a1:b1:d1:4d:93:c6:a2:e1:25:9b:8c:f0:c3:
                    50:d1:58:28:37:76:f9:c8:8f:c6:19:dc:1f:00:43:
                    76:aa:de:af:b0:d0:2c:50:fa:51:08:e3:c5:6f:ab:
                    26:2e:90:bf:17:e7:77:c5:fa:bf:ae:36:06:2f:b6:
                    28:79:42:72:d2:2e:62:f6:97:dd:c4:ee:29:f1:9b:
                    cf:dd:e5:80:6a:22:78:90:3d:e4:6a:80:f0:7d:e2:
                    06:23:79:2e:fd:48:77:fe:49:0d:de:2e:b8:de:6d:
                    2a:a2:4d:57:f5:2e:1e:b1:d9:2f:8c:bc:7c:27:82:
                    ae:a4:e7:40:f7:5d:ee:c5:0e:f7:0e:9a:48:78:38:
                    f0:13:2b:7e:65:54:ae:69:0b:48:57:ea:43:24:14:
                    64:df:e7:3a:ad:96:7c:c6:fe:67:b7:6c:06:fd:d2:
                    01:05:8c:f8:ed:2c:c5:36:7f:c9:63:2a:66:75:fa:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E0:51:79:5F:AE:7E:9F:67:DE:53:45:05:FC:0A:97:A5:8D:77:3F
            X509v3 Authority Key Identifier:
                keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F2D5C21216F511F086107D74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:22:37:4c:26:b3:3e:55:86:92:7d:43:c3:90:d4:ac:08:44:
         23:98:e9:21:0a:f3:ec:86:6b:c0:98:ae:4b:86:33:2a:4c:34:
         b9:47:f2:67:98:5a:dd:cf:eb:9d:3c:f7:f6:bf:30:36:be:f4:
         13:1b:60:d8:65:f8:28:4d:aa:33:ce:ae:9f:b5:21:23:f9:44:
         16:1e:b7:c5:26:a9:a5:ce:7d:d9:e6:ab:c1:0f:6a:fd:62:91:
         b1:2f:a2:f1:6c:95:55:32:de:5c:e7:78:7b:55:08:e3:40:39:
         1f:e9:89:6f:f3:09:ca:73:72:4e:38:52:7b:7c:bb:ce:f3:46:
         62:59:9a:e2:6d:fe:47:49:c3:5a:13:af:9b:9e:56:c3:f1:e0:
         bc:8c:20:2d:55:22:13:ca:62:86:7d:4e:cc:b8:2e:00:cd:84:
         24:b4:8d:d8:60:0a:5c:15:ee:da:f2:e4:4d:f9:b6:ff:d7:92:
         2d:6c:ad:34:bd:31:a0:34:7c:3c:a3:86:3f:e0:33:06:54:64:
         0c:61:18:e3:c0:17:c0:ea:f9:80:fa:40:7b:01:fe:b8:80:cd:
         7a:eb:c5:8d:3a:69:0c:27:56:03:de:51:68:be:c0:98:b9:d3:
         af:03:64:ca:10:44:56:f3:21:e1:3f:5d:79:a7:fb:d9:9c:41:
         8b:37:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:21:53 2026 by rpki-client