Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/83882F7AF83B11ECB4154E31C4F9AE02.roa
File:                     83882F7AF83B11ECB4154E31C4F9AE02.roa (raw, json)
Hash identifier:          pfU114Y2kehr6zOU+odnnmxj4ocLDXqTejqW27FA8Uo=
Subject key identifier:   E5:4C:A7:DC:C4:2A:67:2D:BB:F3:90:61:2A:AB:1B:04:90:E9:83:33
Certificate issuer:       /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Certificate serial:       0B7A
Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/83882F7AF83B11ECB4154E31C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:19:24 +0000
ROA not before:           Tue 18 Mar 2025 19:39:35 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     55492
IP address blocks:        103.136.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
                          rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2938 (0xb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
        Validity
            Not Before: Mar 18 19:39:35 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a42ecc-1821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:ce:95:03:4a:94:7d:0b:af:05:7e:3e:59:
                    38:f8:6b:13:75:e5:e5:ef:f8:63:7a:db:2e:65:11:
                    37:55:86:9a:fa:28:90:9b:27:a1:aa:f4:b9:f5:a9:
                    07:ff:6c:e2:b1:c5:59:7c:ad:b1:81:d4:3b:20:e7:
                    c8:6f:5d:c5:1b:66:ba:12:3e:41:c7:c2:32:d8:94:
                    6b:1d:53:35:94:a8:14:4c:86:40:89:4c:8e:20:d4:
                    5a:86:ab:a7:a1:15:d9:f7:6b:86:e4:fb:8f:8b:f4:
                    d9:2e:ac:2d:b4:87:f1:94:e6:64:ba:8d:d1:bd:f6:
                    33:65:ad:a4:62:31:8d:b1:a1:9b:9b:6c:9f:ba:af:
                    7b:78:dc:b7:21:3b:7c:43:47:c0:71:b3:ee:a6:d3:
                    95:fd:3d:6b:1d:e8:9f:bd:d3:8d:e6:95:54:05:77:
                    c7:8c:bb:f6:a2:f9:e4:7a:f4:8d:58:56:78:7a:51:
                    13:c2:7f:83:0c:49:1e:27:5d:7e:4f:3a:8a:f6:9c:
                    c9:4f:44:d6:22:5f:0c:e9:1d:2d:42:be:3e:c0:9e:
                    17:09:20:7e:5d:bf:b4:39:b6:ed:fa:d7:37:90:cf:
                    5c:1d:f6:2e:28:08:08:f0:86:28:51:73:54:79:2a:
                    98:98:4f:b5:09:cf:a9:71:df:58:fc:6c:47:8d:48:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4C:A7:DC:C4:2A:67:2D:BB:F3:90:61:2A:AB:1B:04:90:E9:83:33
            X509v3 Authority Key Identifier:
                keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/83882F7AF83B11ECB4154E31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:ef:da:6d:ac:e2:b5:0f:17:07:ee:a3:56:43:48:c1:be:
         b0:c2:73:17:7b:bd:a9:ad:f1:5e:0d:ef:56:fa:aa:c3:5e:cd:
         e1:45:c8:a8:76:0b:4e:3d:9a:62:26:0b:56:a0:b0:1f:e6:14:
         4e:16:71:53:20:73:9b:3b:04:7d:14:8e:b1:a2:6f:c9:8d:6f:
         80:86:99:e7:5e:76:78:27:16:85:4d:60:7a:ee:9d:97:c3:ad:
         fa:b3:d1:14:0b:b6:81:83:c0:4f:67:7e:0d:ac:c1:5f:d4:88:
         a5:0b:61:96:50:32:b4:e4:8e:f6:af:eb:5e:fb:6c:93:74:0c:
         85:2c:e2:21:50:6f:32:4d:9a:9b:df:5a:51:73:ad:58:b1:2d:
         75:18:b2:68:5f:7b:c7:60:f2:5d:12:ac:40:6f:4b:d6:b7:48:
         f0:89:b9:a8:7c:c6:bb:15:4c:81:e9:3e:fb:6a:5d:ef:66:62:
         87:b1:71:e5:31:ad:bb:22:30:f5:3a:5b:70:06:ab:69:32:f3:
         57:b1:be:97:b0:78:f2:93:cb:55:a5:1f:8a:86:f3:c4:19:4a:
         82:29:c2:ac:2f:ea:8b:02:0a:d6:ba:44:30:f4:f7:54:26:8f:
         66:9d:37:fb:b6:31:48:50:dd:08:93:18:1c:da:d1:8a:a3:58:
         73:3b:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:44 2026 by rpki-client