Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
File:                     59DD05DA541E11EDB324CE7DC4F9AE02.roa (raw, json)
Hash identifier:          P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=
Subject key identifier:   3A:99:FA:62:9D:E4:AA:C6:AF:CB:83:63:D3:66:75:94:27:8F:96:A8
Certificate issuer:       /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial:       0284
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:19:01 +0000
ROA not before:           Wed 03 Dec 2025 00:30:43 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134372
IP address blocks:        103.103.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
                          rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
        Validity
            Not Before: Dec  3 00:30:43 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43cc5-9ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:b1:33:6a:30:e8:da:67:fc:8a:98:3a:28:
                    3b:1b:7f:ae:23:8e:ec:63:6d:62:1b:79:00:45:6f:
                    32:24:51:cb:e0:ab:5c:21:fa:cf:e0:13:34:20:6a:
                    3b:f6:5b:72:38:72:4e:dc:91:5a:cc:5d:8e:09:8f:
                    14:c8:05:9d:36:7f:7b:e8:60:3d:ea:76:5b:cc:47:
                    f5:3d:ef:70:60:16:8a:3b:2e:a2:5a:ff:c9:5e:e2:
                    e4:c2:8a:f6:3d:c9:9c:8f:a2:f5:e3:49:de:f7:f8:
                    a0:cc:63:07:62:f8:88:81:1e:2a:98:09:ab:6f:03:
                    4f:ad:05:fd:1d:bd:ab:71:22:c5:d8:07:64:00:22:
                    0d:8f:37:16:80:c7:0e:5a:eb:c2:18:d2:bd:c7:4e:
                    a2:25:ec:43:33:a1:95:86:e7:20:27:96:44:bd:95:
                    6b:71:f5:f6:d9:3d:a9:08:5d:b2:20:79:5b:b1:6a:
                    87:dd:87:f7:74:88:10:e3:b0:62:3c:b8:c9:93:72:
                    16:b5:63:6f:ba:25:6f:37:88:cc:88:ec:a4:73:e8:
                    bf:e0:2f:05:1b:9a:e1:d6:76:0a:36:f4:22:63:f1:
                    33:4b:d2:17:0b:bb:9c:0e:d0:c5:ed:b2:86:16:3d:
                    ff:fd:e9:14:17:42:80:04:2b:2d:fa:8e:3d:05:35:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:99:FA:62:9D:E4:AA:C6:AF:CB:83:63:D3:66:75:94:27:8F:96:A8
            X509v3 Authority Key Identifier:
                keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:00:d1:d6:d6:10:13:ae:e5:41:fa:30:23:b6:56:b7:30:47:
         a3:e2:fb:0e:55:4e:eb:ea:e3:f1:c9:97:46:66:38:38:18:f3:
         61:12:ad:1a:0d:66:7b:82:d9:88:11:5d:a6:d0:1a:4e:ed:e9:
         b0:7e:89:75:bc:bc:3a:0b:e1:58:f4:c9:2e:bb:31:65:20:0d:
         b5:b2:25:74:6c:9f:f5:9b:76:bf:12:cb:fc:1d:a8:b7:0b:44:
         ed:4f:4c:30:26:af:b3:f3:dd:b2:01:24:b3:e3:57:d2:7b:d1:
         00:69:9c:fc:89:dd:57:e7:31:a8:d2:14:77:fa:d0:c0:da:64:
         a7:ad:f9:06:61:45:12:f0:41:88:15:90:ed:f4:a8:82:cc:13:
         d3:57:a9:69:00:2a:56:58:ca:61:05:f7:1c:ee:8d:d5:7d:a3:
         83:7a:d4:de:a0:b2:b4:7c:91:18:10:74:9e:96:ab:d6:b7:fe:
         11:03:42:71:f1:13:2b:0d:55:9d:92:a0:08:99:18:9c:4f:b3:
         29:76:a4:c2:22:c8:c9:d9:1e:89:3e:8e:be:6e:1a:82:4a:d6:
         f1:93:77:39:51:ca:53:c6:31:e1:3e:0d:8e:d0:cd:f3:9c:56:
         55:8e:7d:89:81:df:f2:67:e7:b7:31:db:8b:90:63:ba:0c:ce:
         1b:1c:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:32 2026 by rpki-client