Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa
File:                     5284A644D3DC11EB9FCD6135C4F9AE02.roa (raw, json)
Hash identifier:          j5ZJEpzdtOEiGnvXhEWjzNgokm2dtSBgk89RWseZw8s=
Subject key identifier:   50:14:EB:81:A8:EC:96:D7:86:98:5E:C6:4A:75:FE:4E:3A:C3:94:CB
Certificate issuer:       /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial:       0635
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:37:53 +0000
ROA not before:           Fri 11 Jul 2025 00:05:47 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142542
IP address blocks:        103.168.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
                          rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1589 (0x635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
        Validity
            Not Before: Jul 11 00:05:47 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a43320-b2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:79:0e:b3:ec:7f:e3:2e:f2:96:dc:b9:db:
                    80:89:f7:24:2c:c6:b6:2b:20:e4:cb:33:ec:ca:a1:
                    6b:0f:a4:0e:31:b3:24:5f:f9:ff:ed:dc:a3:15:76:
                    72:41:d0:11:9e:4d:36:4c:0e:2a:9d:48:73:54:92:
                    a6:87:4d:b0:e9:f6:8b:1f:c5:28:9b:31:20:e5:e9:
                    52:da:68:ff:bc:b1:15:52:d4:31:85:4e:5a:38:aa:
                    eb:37:aa:7b:33:5b:79:fe:69:2c:1e:07:b7:4a:0a:
                    72:9a:c4:62:92:a7:c8:e9:04:22:f3:06:40:05:b1:
                    e2:4b:ad:4d:b3:56:66:fa:2f:ad:63:01:13:a0:57:
                    1e:08:65:59:c4:fd:6f:50:c2:3f:10:ef:6d:52:55:
                    8d:b3:15:de:fe:77:7a:9a:20:d0:6b:c6:52:d8:41:
                    a6:61:dd:3b:07:86:70:67:d6:89:ad:da:6b:37:17:
                    16:38:5c:94:40:40:d3:30:52:34:90:ff:d2:f8:58:
                    24:0e:3d:59:fd:da:7b:59:44:34:a2:9b:70:f9:a9:
                    1f:fb:52:40:bb:55:3c:fd:c3:ba:6c:c4:bb:62:d5:
                    18:06:39:3a:83:85:c0:80:6f:a1:f0:3e:fb:85:b2:
                    34:8f:d0:c5:4d:7a:df:ba:3f:c1:a3:b5:b3:6d:ad:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:14:EB:81:A8:EC:96:D7:86:98:5E:C6:4A:75:FE:4E:3A:C3:94:CB
            X509v3 Authority Key Identifier:
                keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:1d:0b:ba:88:bb:4a:a5:3a:d5:21:51:2c:27:4f:fe:89:
         ff:aa:15:21:65:e8:ba:ad:69:5b:54:92:9e:33:59:69:8a:c6:
         8a:69:7c:6f:db:0b:b0:07:97:2a:d8:ae:ae:37:e2:c4:eb:40:
         74:d3:3f:0c:df:1f:67:e7:bb:26:05:df:b9:cc:d1:e7:e2:14:
         e0:45:7b:cf:84:fd:0c:67:ef:39:b2:51:90:6d:55:87:0f:4a:
         ab:74:67:2c:7f:b7:f7:91:a1:43:8e:03:86:53:22:f8:bd:0e:
         67:33:24:f2:aa:7b:bb:30:4a:a7:d1:25:23:05:d2:45:21:14:
         88:f7:4d:ce:0b:a0:9e:b9:61:3c:c2:c7:2d:b2:01:c6:61:70:
         ee:50:c7:49:60:c7:17:b1:13:f9:71:e4:8e:00:38:a7:d0:aa:
         e2:23:ee:91:70:33:ba:54:2e:b1:af:b0:bd:b3:c6:76:f4:5d:
         3f:60:d3:1e:4f:6c:a8:c1:91:17:ec:68:4a:36:b3:a8:0b:bc:
         db:28:30:6f:75:eb:27:14:fe:9d:d7:2e:eb:5e:00:85:68:10:
         79:25:8c:5e:45:73:19:b5:16:e6:7e:83:89:57:19:17:5e:5f:
         bb:2c:bd:66:62:36:57:c1:a3:25:5e:c0:19:5c:89:32:bb:fd:
         fd:7e:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:46 2026 by rpki-client