Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C19EC984774811EFB2DF8983C4F9AE02.roa
File:                     C19EC984774811EFB2DF8983C4F9AE02.roa (raw, json)
Hash identifier:          FRQ+DT10D+zkaCvxI+Qd7phB0uQvPJfA96uHFNE/wXA=
Subject key identifier:   C3:75:43:43:20:4E:A9:14:D2:36:58:0D:BD:E0:96:C0:82:7A:19:D4
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       1445
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C19EC984774811EFB2DF8983C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:27:22 +0000
ROA not before:           Wed 18 Jun 2025 17:38:21 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152700
IP address blocks:        103.116.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5189 (0x1445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Jun 18 17:38:21 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a476fa-73b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:ee:3b:ee:d5:00:68:81:a7:6f:c0:7c:1c:
                    6c:68:b5:1b:7a:1d:9e:44:7c:53:12:ba:f6:cc:80:
                    45:b4:a8:84:e1:60:d1:69:63:c6:fc:4c:21:cf:b8:
                    38:de:79:c6:a3:80:8b:d8:35:62:9a:e2:bd:2b:c4:
                    03:1a:db:6d:d2:f9:b0:6c:f9:9d:37:3d:07:d6:09:
                    20:9c:88:c3:d5:a2:37:3e:01:76:e7:ee:b8:ea:34:
                    2e:e3:16:1d:42:f4:ce:4e:13:7f:0a:6f:51:7d:4e:
                    51:d1:22:36:97:8f:f5:73:95:c4:45:65:d9:92:ea:
                    a4:24:3c:fd:60:9d:2c:95:8f:0d:e3:fd:d4:9f:63:
                    60:90:6d:dd:12:9a:28:75:08:3c:2b:86:22:a6:7e:
                    8d:bd:42:be:08:9e:fa:4b:d9:ab:d4:5d:23:ff:25:
                    47:5c:94:09:08:02:2a:01:1e:a2:e2:e9:dc:52:91:
                    54:5f:d3:83:21:67:8b:34:a3:8a:0d:7c:e0:cf:3a:
                    c0:f8:f6:ca:50:3c:c9:e3:b2:d4:b4:8a:05:cb:ec:
                    b1:58:2c:66:b5:25:d8:84:9f:a1:0c:ac:84:a3:b9:
                    75:7c:b5:62:5b:7b:e9:e0:ce:66:2e:03:8d:62:9f:
                    73:72:85:3d:3e:aa:8e:d5:8f:20:35:ee:e0:a3:b2:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:75:43:43:20:4E:A9:14:D2:36:58:0D:BD:E0:96:C0:82:7A:19:D4
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C19EC984774811EFB2DF8983C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:eb:82:f9:8d:8d:e1:dc:d3:25:67:62:50:1e:27:37:c8:
         26:2d:b2:77:1c:5d:23:27:49:f3:4e:3c:7d:8a:88:b7:53:13:
         aa:05:d2:76:b1:4e:00:dc:d0:1e:86:20:ba:7d:56:e9:b3:63:
         fe:da:16:19:c1:82:b7:59:26:bf:5d:ef:56:31:c3:d2:1c:21:
         47:f3:5b:d9:7d:e6:fc:8b:b1:bb:e4:96:18:9d:9f:fd:8a:cb:
         a9:d3:54:8f:4a:58:e1:c8:bc:ae:de:d6:73:88:9b:4a:bb:e5:
         57:ac:10:24:3b:63:39:41:e7:9a:08:cb:35:1f:f0:4e:fc:c9:
         85:78:54:cc:3b:e0:7c:8c:64:8f:cf:26:fd:2b:de:6a:a3:40:
         a0:8e:02:9f:d6:4e:bf:44:5f:20:ee:67:cf:3b:11:98:ff:32:
         d2:17:e5:a6:4c:20:a3:df:35:8a:54:41:91:3d:d8:b3:cc:d4:
         44:6b:33:7d:75:7d:21:2e:3a:86:3c:e6:89:9d:8e:b9:56:31:
         af:ff:64:ef:21:69:cd:d4:29:cb:53:21:98:cc:91:bc:a6:ac:
         28:6d:20:4a:1a:98:53:80:5c:c0:42:fd:93:9a:43:75:a1:fa:
         2f:42:a2:59:d5:3c:7c:16:7d:32:71:e1:aa:ef:e7:87:ce:52:
         3f:7f:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:24 2026 by rpki-client