Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/5D21607ADDF211EDA14C0C56C4F9AE02.roa
File:                     5D21607ADDF211EDA14C0C56C4F9AE02.roa (raw, json)
Hash identifier:          s6Qyv+Kjm6U8zsIA5gW9AT3/QCQSXrLitcN0Qq9EJLg=
Subject key identifier:   48:76:FF:21:F1:67:7D:DC:76:3C:52:AB:26:EC:F1:EB:E9:48:D7:15
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       0295
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/5D21607ADDF211EDA14C0C56C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:14:51 +0000
ROA not before:           Tue 01 Apr 2025 02:58:28 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135377
IP address blocks:        103.86.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Apr  1 02:58:28 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4740b-9990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:b9:65:5b:1d:85:4c:b3:73:1a:0c:3c:1c:
                    b8:ab:59:1d:92:fb:9e:1f:18:66:08:77:28:1e:e1:
                    ec:c3:a0:eb:9c:04:c1:61:60:76:9c:71:7c:a7:68:
                    0a:f1:50:ae:04:6c:95:df:09:52:04:2f:2e:f7:3b:
                    84:4c:2c:28:1b:81:72:c4:99:4d:be:53:bc:6b:5d:
                    1a:af:fc:65:d2:02:56:43:25:43:00:4d:62:31:78:
                    76:d9:3f:f8:dd:7e:76:e4:1a:72:18:13:82:ee:a9:
                    60:34:63:33:75:b4:76:4e:76:2b:c4:27:22:17:b0:
                    bb:c9:c4:8a:3a:3a:f8:4a:eb:3b:4b:05:7c:20:1e:
                    06:9c:fa:87:f2:f5:e3:86:d5:91:ad:41:ba:6c:78:
                    28:41:7e:c6:52:4d:0f:27:a9:98:23:1e:f4:43:2c:
                    fd:ed:91:ad:54:fa:41:c9:c6:02:1f:99:db:9c:f3:
                    48:50:f6:50:55:07:78:ab:22:31:de:e7:02:16:b0:
                    0c:91:99:cf:53:93:d1:67:b3:9b:ef:a5:9b:db:3e:
                    81:7c:52:80:79:5a:e6:1c:64:e7:36:6d:6f:38:b2:
                    92:40:97:8f:07:33:c7:70:a2:12:dd:92:66:c0:ac:
                    55:24:ed:50:74:15:7e:d1:4c:2f:c8:dc:d6:19:a1:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:76:FF:21:F1:67:7D:DC:76:3C:52:AB:26:EC:F1:EB:E9:48:D7:15
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/5D21607ADDF211EDA14C0C56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:25:aa:aa:c6:21:c4:57:c0:d4:b0:61:bd:9c:a4:b7:c6:6b:
         26:9e:50:25:6c:05:bf:ab:99:d7:aa:9b:f1:7a:54:b4:92:bc:
         7e:3c:e9:83:aa:21:ff:37:80:fd:93:16:b9:51:b7:84:d7:21:
         69:99:5a:87:3d:18:7d:3b:58:da:59:b9:43:61:62:2d:fb:76:
         77:1f:f1:d2:a5:61:72:48:7a:86:3f:15:40:97:59:9c:b0:72:
         68:d4:40:cc:20:1f:64:51:83:40:70:42:df:a9:d4:b4:df:a3:
         45:f9:ae:b0:c3:24:76:4e:bd:79:35:8a:51:ae:24:34:b6:35:
         67:e0:a8:3f:d6:0d:98:19:c0:35:2e:05:4a:3e:0f:f4:e3:32:
         21:21:ec:10:12:91:62:2f:f6:2d:ce:f2:6a:35:2f:37:c4:97:
         f0:42:9b:51:f8:25:42:8a:c1:e7:dc:cf:e8:86:1f:2e:eb:a9:
         94:ac:8d:2b:c3:7c:25:df:c1:f3:96:5c:8b:52:a9:0d:0c:25:
         68:65:f6:5d:b5:84:5e:c8:b6:52:41:2b:da:bf:00:a4:dc:3d:
         a1:29:79:65:1e:47:e6:0b:89:65:e6:f4:0d:67:d4:8e:4e:c2:
         48:22:c4:35:df:9c:90:3f:df:fd:76:f9:a3:f4:2b:91:42:07:
         fd:5d:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:23 2026 by rpki-client