Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
File:                     98657342132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          4PEXYHFWz5mZtCJTbXMqZvp/LxT3XQAOG9EeoF5GdjI=
Subject key identifier:   05:B1:8E:72:38:1A:F5:25:C1:AA:88:43:C5:75:42:EA:A7:C3:2C:F2
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       0837
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:11:44 +0000
ROA not before:           Mon 08 Dec 2025 20:32:02 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141023
IP address blocks:        103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Dec  8 20:32:02 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a47350-15be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:26:f4:82:fe:66:23:e5:e4:30:76:8b:a9:
                    0e:07:87:2c:a9:d0:1d:64:a9:aa:74:63:60:92:09:
                    a6:2b:c2:29:b3:86:df:1d:fc:ea:06:92:25:1e:33:
                    60:aa:22:72:65:3a:6a:80:d5:03:c0:5b:ce:e3:58:
                    1e:b3:30:38:4b:1b:31:42:8c:4a:09:3c:5a:94:7e:
                    c2:06:0c:bd:4e:d6:70:dc:3f:7f:fc:5e:8c:30:79:
                    cf:43:e6:ff:7d:4e:b1:c2:db:65:22:bb:4f:f4:d2:
                    b8:53:0d:9f:3d:98:44:a2:7a:c7:42:97:4f:6e:b4:
                    d6:05:a2:d1:1b:a3:2d:d9:b5:cd:81:b1:25:4b:5f:
                    a0:00:a0:bf:84:5d:27:db:ea:31:e5:43:88:75:e7:
                    2e:0d:9b:cc:99:10:f8:c7:53:f0:39:0a:32:77:6d:
                    10:2e:be:b4:7e:02:31:5c:63:ae:1f:b3:24:74:1e:
                    49:dd:49:ed:4b:32:a6:c2:a3:d2:44:3a:7c:94:47:
                    12:dc:0d:01:a7:d3:7e:18:55:14:16:cb:f2:21:de:
                    a8:24:c3:36:18:fb:ce:7e:d8:83:fc:23:30:8e:e7:
                    1e:da:df:9e:6b:b5:f7:76:2f:e3:50:f1:e5:06:fc:
                    de:35:c9:98:e4:cd:3b:6d:ef:7f:a9:2b:f1:2d:fa:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:8E:72:38:1A:F5:25:C1:AA:88:43:C5:75:42:EA:A7:C3:2C:F2
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:17:f2:bc:82:4d:22:a5:f3:0b:14:26:ba:67:0a:0f:d5:
         59:7e:7b:6e:11:11:28:4a:4e:f7:d2:9b:98:ce:c5:41:48:a3:
         b6:96:40:3a:c4:a9:ed:8d:c1:a3:57:29:ad:8c:07:81:98:de:
         22:c4:32:24:22:1e:d0:fe:26:d8:f3:29:f1:2e:18:fa:16:a8:
         c7:ce:29:09:29:f3:f9:fa:29:74:e7:a5:14:f6:ab:f1:ef:8d:
         b2:a0:d7:d1:8b:ee:f5:72:e3:e9:e3:a5:11:b5:eb:9e:53:98:
         c4:c7:93:e2:97:91:0c:13:b1:71:5f:44:f1:05:8a:c0:4b:71:
         bd:53:12:30:10:3b:f8:8c:cf:4a:79:47:42:9f:6e:66:81:94:
         39:6b:1f:7e:1c:7e:7e:44:71:57:1a:b7:d5:a6:c4:36:63:e9:
         78:51:c5:9a:cd:c9:93:3f:4c:33:d8:1a:dd:80:1e:55:66:27:
         b2:99:63:2e:fd:8b:fc:e5:74:91:95:dc:b0:07:35:e9:35:11:
         86:cd:48:da:68:42:17:e1:a4:f2:cd:fc:7b:7f:42:99:12:df:
         0c:89:bd:98:e8:e8:d1:68:80:d5:19:c6:da:9b:3b:17:9d:9d:
         cf:31:6b:ab:61:38:a9:4f:a6:98:bd:d3:13:12:b6:bf:fc:52:
         a6:10:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:03 2026 by rpki-client