Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A7544A6E1A7711EAA20A077FC4F9AE02.roa
File:                     A7544A6E1A7711EAA20A077FC4F9AE02.roa (raw, json)
Hash identifier:          UhaA00QO71FGTQUD0VWs3wxmVzGoJFHHyhM7eiJ49EM=
Subject key identifier:   DD:21:5E:46:C2:1B:8D:8E:41:AC:E0:40:61:D5:5D:D1:EF:AC:0E:B0
Certificate issuer:       /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial:       0C75
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A7544A6E1A7711EAA20A077FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:42:17 +0000
ROA not before:           Wed 26 Mar 2025 18:58:17 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.85.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
                          rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3189 (0xc75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112B4C, serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
        Validity
            Not Before: Mar 26 18:58:17 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a42619-1fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:06:b7:37:f5:85:b1:ac:dc:7e:92:a2:89:43:
                    6e:48:1d:af:c8:6b:29:33:d4:ff:cb:e9:2f:49:84:
                    34:fe:d5:a4:ea:cd:23:b2:c9:29:91:d5:b3:91:56:
                    aa:9a:fd:4f:a6:06:05:9b:ef:0f:32:49:75:02:db:
                    89:e4:d2:3b:c2:16:b3:87:0c:e7:45:6d:b3:c0:70:
                    c0:1e:c9:0c:ce:cf:2d:a8:ee:3e:81:88:da:1c:96:
                    e0:72:fa:9c:d7:e2:85:7f:e4:9f:45:bb:c5:b4:80:
                    20:a0:45:f9:04:db:b2:ce:88:cd:eb:eb:f3:6e:c7:
                    46:60:8b:4a:c2:93:c1:22:f5:6e:8e:3f:ee:24:b8:
                    3c:2b:04:9b:54:c7:a2:80:49:31:11:cb:b7:7a:15:
                    15:59:0e:38:0b:af:90:a0:ca:7d:e1:7b:8f:7e:14:
                    31:6d:18:7b:b0:29:fc:df:bb:2b:0a:f5:77:f3:86:
                    38:44:b5:91:bc:c8:19:51:55:7a:8f:29:18:5d:b4:
                    a0:18:47:92:ed:4a:85:35:39:e8:12:01:be:b1:37:
                    53:3c:46:ee:82:f8:b9:02:98:ed:dd:04:88:27:11:
                    35:28:0d:7e:51:86:6a:51:fa:54:f2:aa:07:cc:fc:
                    40:9e:22:1f:75:a6:bf:6c:32:c4:7f:33:1f:9a:ca:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:5E:46:C2:1B:8D:8E:41:AC:E0:40:61:D5:5D:D1:EF:AC:0E:B0
            X509v3 Authority Key Identifier:
                keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A7544A6E1A7711EAA20A077FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:17:1b:b2:06:9c:3a:d0:05:45:5b:09:d2:04:cc:87:45:
         7b:82:8f:f9:6a:21:66:3f:de:e5:94:f5:d1:17:d6:ee:18:9c:
         45:6b:49:26:5c:6c:bd:9c:84:a4:ef:ee:1c:dd:64:e4:c0:a1:
         19:ae:51:00:b9:ac:0b:64:4a:97:4d:ca:0d:64:ac:cb:95:3e:
         13:71:78:28:15:ce:a6:f9:19:38:27:db:47:9e:c9:0a:8e:87:
         5c:7c:70:ca:c0:d7:ef:84:99:bf:01:23:54:f7:cf:48:fa:e6:
         aa:e9:5e:c7:fb:e2:6b:45:c1:9a:ae:98:c3:7b:e0:a8:0a:1f:
         76:9f:74:1e:4a:c9:55:e5:30:e3:cd:bc:14:b4:7e:81:cc:8e:
         42:26:4e:ed:12:80:1b:16:63:49:85:44:f4:74:ba:5e:45:f7:
         b8:b6:cd:95:67:97:29:27:4e:42:b3:7c:41:45:b5:b7:dd:08:
         9d:af:3a:f8:92:e5:e1:7a:dd:6c:dd:4b:9b:b0:dc:06:7d:c0:
         1e:06:8c:3e:94:d6:38:e0:3f:8a:a7:6e:58:15:b4:14:73:4a:
         2c:36:e3:4d:c7:f2:9f:c2:ea:d8:05:fc:94:14:30:f8:b4:18:
         27:54:c2:69:b5:4c:50:33:6e:63:fe:1c:00:1b:8e:7d:85:ff:
         f4:d2:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:31 2026 by rpki-client