Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
File:                     82E0EA4AA98F11F0BFFFD266C4F9AE02.roa (raw, json)
Hash identifier:          hNeWZLMK+GfB4WxJKadmJOzLAqi6pUlx0i7I6EatF7g=
Subject key identifier:   BA:D8:D0:DD:76:3C:EF:06:B1:68:82:F9:CD:31:C8:3B:FB:3F:39:91
Certificate issuer:       /CN=A911793C/serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Certificate serial:       54
Authority key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:18:32 +0000
ROA not before:           Mon 05 Jan 2026 06:12:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     23664
IP address blocks:        103.208.208.0/22 maxlen: 22
                          103.208.209.0/24 maxlen: 24
                          103.208.210.0/24 maxlen: 24
                          103.208.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
                          rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
        Validity
            Not Before: Jan  5 06:12:35 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3da38-190d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:b1:72:41:63:fb:f1:8b:0c:5a:27:1a:05:
                    dd:f6:9f:4a:29:e8:e7:3c:77:d5:cf:22:4c:98:df:
                    cf:74:c2:bb:a8:1e:47:d7:bc:16:c3:aa:ce:77:8b:
                    f6:a0:a3:2a:9a:25:44:fa:6a:2f:ff:c2:ac:8e:21:
                    69:3d:c8:17:c5:d6:89:94:b7:5d:0a:4d:de:c6:c1:
                    d6:49:4d:6a:41:73:fe:6f:12:5b:77:6c:1b:ea:9a:
                    da:f6:cc:b0:e0:5e:3f:3e:8d:a0:a6:d0:81:6d:95:
                    50:2b:bb:00:78:49:2b:4f:6d:b2:b1:6e:11:a6:6f:
                    00:9a:7d:ba:ad:a6:60:2a:49:ab:6a:ee:93:f4:61:
                    87:39:92:e8:99:f3:71:60:a2:3a:0f:8c:dd:38:63:
                    6c:a3:14:b7:ea:52:5b:14:1a:fa:f5:01:4d:8c:52:
                    e4:a8:78:9c:ec:d9:af:d9:38:5d:d8:9c:43:c4:76:
                    b0:89:c0:3e:bd:55:48:b0:d4:df:b5:ec:64:2d:00:
                    26:58:39:66:91:68:f4:6e:29:6a:34:a7:b3:0b:1a:
                    16:e0:7a:f0:75:e7:de:0b:09:38:d8:32:31:20:83:
                    0d:c3:5b:f5:17:6c:32:65:81:27:33:6c:aa:05:68:
                    61:22:3a:cb:90:60:89:bb:89:bc:47:4a:9c:c4:0e:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D8:D0:DD:76:3C:EF:06:B1:68:82:F9:CD:31:C8:3B:FB:3F:39:91
            X509v3 Authority Key Identifier:
                keyid:0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:0c:01:ed:7a:a4:2d:b7:44:db:fc:d3:ad:b4:1c:c3:82:
         b8:d8:e5:b6:7a:f0:23:66:9c:9c:8b:ae:d3:4c:c2:4d:a4:f4:
         82:88:83:7c:17:0b:6d:c4:89:14:96:1b:01:36:53:d3:1b:43:
         d4:30:10:5d:e0:d1:5b:8f:5b:cf:38:31:79:bc:a2:03:18:a3:
         9e:fa:e1:72:c2:14:61:cb:1a:2d:b6:ec:6d:97:74:2b:62:3c:
         2c:d5:a7:9e:9a:82:aa:7b:61:41:35:5d:30:3e:93:aa:fd:35:
         4e:39:e2:df:f9:00:df:fb:e5:71:d3:d9:84:35:2e:7b:5d:96:
         ff:69:7c:96:62:4e:b9:f1:34:dd:81:fa:be:fb:59:2d:34:e0:
         b2:eb:51:49:2d:69:83:40:39:e4:f6:2a:5d:a8:9a:b2:52:a1:
         91:e5:f6:3a:3b:da:50:8d:ea:5a:9e:5a:b5:61:bf:ab:55:e2:
         08:e7:fe:a9:6e:af:0b:63:2c:18:b2:e3:ec:f8:5a:e7:d5:3b:
         6a:3d:9e:ac:3a:a6:fd:4a:8d:b9:93:61:95:4d:ec:46:dc:4c:
         b1:78:1d:84:27:87:49:6c:95:da:5c:ad:99:5f:6e:3d:49:84:
         f4:39:92:01:1a:21:11:53:f3:57:e8:26:d7:06:94:06:b3:9e:
         f6:8a:ab:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:25 2026 by rpki-client