Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa
File:                     7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (raw, json)
Hash identifier:          h2uMCBwNTFg6piL71Xpw5aeMHSrOsn6mAYZOypLUc88=
Subject key identifier:   77:E6:C9:4C:FB:80:3F:3B:AC:AB:0C:A1:36:8C:F3:35:D3:57:25:51
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       0296
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:14:52 +0000
ROA not before:           Tue 01 Apr 2025 02:58:29 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138687
IP address blocks:        103.86.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Apr  1 02:58:29 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4740c-5c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:aa:cc:8d:b7:c1:6d:0a:03:cd:cd:ed:7f:
                    49:c7:8b:26:69:fc:42:f7:f5:30:2a:65:c6:7a:c3:
                    cb:4f:13:21:79:a8:11:1a:c7:17:91:2b:1b:50:ed:
                    eb:10:6a:32:bf:99:f4:54:d5:e2:d9:d8:f2:ba:75:
                    ce:37:65:a7:be:b1:75:eb:fa:59:19:5f:6e:11:07:
                    00:7e:ac:b6:1b:5b:84:14:e0:c7:0f:22:49:11:8e:
                    eb:fc:d7:20:2d:d8:59:24:ea:62:5a:34:68:db:5c:
                    62:35:85:03:06:de:64:d8:ab:9f:87:8a:0a:00:46:
                    cc:cb:cc:11:28:7c:c9:8d:50:6a:30:ab:d8:7f:4b:
                    b4:78:d4:7d:82:bd:26:89:1d:ab:cc:c4:09:0d:f2:
                    ea:82:99:a1:86:71:4d:b3:4d:72:bb:05:ec:fc:eb:
                    a6:02:ba:37:5d:f7:a2:2d:04:43:cc:b2:77:da:c2:
                    bd:a7:72:80:a7:fa:67:3b:b3:46:ab:80:25:e1:00:
                    e2:07:5c:8d:86:e4:c6:54:eb:81:9b:e8:29:5a:0d:
                    f8:40:fc:64:db:cc:24:5b:34:b6:cc:72:4b:19:7e:
                    cd:e5:03:f5:20:f8:29:67:d6:d7:34:88:32:ff:f0:
                    b9:dd:1e:7f:48:dd:5c:d8:a8:f4:db:01:5b:c0:50:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E6:C9:4C:FB:80:3F:3B:AC:AB:0C:A1:36:8C:F3:35:D3:57:25:51
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4e:28:ac:02:29:be:94:d8:c0:e4:f0:d2:73:77:38:9a:44:
         0c:3c:63:06:02:6c:12:e0:6b:8e:1d:ac:e4:d1:9b:cd:48:67:
         97:7d:01:f3:ab:64:5b:a9:be:f3:e6:1a:0d:29:4c:33:66:6a:
         94:02:14:7f:09:2b:ad:e5:33:6d:40:0e:5f:58:70:d2:1f:10:
         f7:69:88:94:b4:6f:11:f6:04:32:f0:47:4f:1c:ed:5b:ef:7f:
         9f:2a:e7:50:c1:75:7d:80:70:68:ec:a0:11:8b:de:e5:d0:49:
         c1:2e:d5:61:df:0a:f5:47:48:91:dd:58:3c:61:e8:34:ee:89:
         7a:4d:b7:99:f0:8e:39:6e:c4:06:a3:9f:b5:da:78:c0:af:70:
         49:c0:56:17:56:b4:0c:37:75:d5:60:b0:14:9a:d2:69:96:c5:
         f5:39:46:10:11:13:8c:a1:95:c3:c6:e4:d2:fa:9f:32:18:0b:
         92:01:33:d4:66:bd:43:1e:ca:ac:00:59:70:b2:68:3f:4a:84:
         32:e4:0a:92:8a:1c:54:46:d3:25:a3:66:e5:b9:9c:62:e7:69:
         fe:48:7f:95:54:12:6a:b0:75:69:55:40:05:75:f7:bd:7f:38:
         eb:f2:b4:5f:f4:2f:7f:b7:3d:74:52:0a:8c:0f:e9:4b:82:26:
         f4:8c:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:11 2026 by rpki-client