Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/5147C064FFE611F0819299B6756F56BC.roa
File:                     5147C064FFE611F0819299B6756F56BC.roa (raw, json)
Hash identifier:          PbQ4AYnQxtghraD/LEsa/Ll3mQLAruMXQgHBWCuOIN4=
Subject key identifier:   F2:AB:69:A0:D6:4E:E9:68:D8:F4:96:05:67:63:E1:03:48:B6:85:D9
Certificate issuer:       /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Certificate serial:       2E
Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/5147C064FFE611F0819299B6756F56BC.roa
Signing time:             Sat 11 Apr 2026 08:42:56 +0000
ROA not before:           Sat 11 Apr 2026 08:42:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4686
IP address blocks:        103.19.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
                          rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
        Validity
            Not Before: Apr 11 08:42:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69da098f-1e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:d3:45:41:44:04:d9:c4:72:4f:a1:53:1e:
                    97:16:8f:a1:2d:6b:d4:32:99:45:c5:df:2d:44:cc:
                    33:21:3e:b3:6b:d5:ea:04:0c:0a:b7:28:cc:87:be:
                    43:d8:2a:f2:64:e6:c9:5f:4b:c5:35:06:f2:89:ca:
                    57:0c:ad:7e:87:4b:bb:c2:09:b9:dd:00:51:86:ac:
                    0d:2b:bb:cd:72:ef:ff:83:46:b4:26:08:2c:d0:3f:
                    44:28:e5:72:c3:4a:8a:55:a4:ac:93:2b:ff:bc:64:
                    d1:27:00:42:5a:cb:62:b1:2b:89:86:d3:8d:0d:a2:
                    ed:e0:77:32:88:38:21:ea:b7:66:18:06:2b:70:08:
                    39:64:bd:9e:26:d7:b4:8a:f5:8a:d1:89:68:ad:0d:
                    99:3d:43:21:a7:a0:11:10:ae:b8:77:01:c9:13:3b:
                    a6:7e:9e:6e:19:a0:ed:2f:a6:ef:70:25:ee:4d:75:
                    85:69:ff:34:db:c8:8b:8e:5c:5f:e5:62:a8:ff:c0:
                    92:e5:4a:84:83:6f:e7:e0:00:07:6b:17:df:d6:a7:
                    9e:fe:fb:b0:fa:0c:d1:cf:44:7b:3f:d7:7d:9a:d3:
                    1b:82:4e:a9:4c:47:8f:cc:66:49:1a:a6:09:3d:9d:
                    89:95:7d:f9:b4:eb:4b:4c:5b:74:5b:41:99:c3:28:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AB:69:A0:D6:4E:E9:68:D8:F4:96:05:67:63:E1:03:48:B6:85:D9
            X509v3 Authority Key Identifier:
                keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/5147C064FFE611F0819299B6756F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:d4:7d:7c:2c:a8:29:e6:d5:2f:27:2d:a7:ba:ea:88:fa:89:
         eb:6e:7e:3d:89:69:4c:1a:60:99:c2:ad:3e:8a:a5:24:d6:c1:
         7a:27:84:91:56:30:11:c3:5f:c5:a3:f4:62:f6:6c:b7:12:b6:
         85:8d:24:71:c8:5d:a7:e4:8d:49:2e:a0:96:c1:85:e5:e0:c9:
         fc:e0:2c:6c:ee:cb:cc:3a:30:84:b8:34:63:cb:a5:f8:a6:bf:
         10:1f:6f:24:b4:70:8e:fe:53:7f:f5:a4:8c:2b:33:2c:f3:b2:
         33:3b:da:82:6a:c1:f4:fb:a9:2a:c3:1f:be:49:3e:de:1e:f1:
         b3:b3:f7:09:2e:bb:b0:1f:59:fb:c7:15:75:77:96:2b:f4:92:
         38:6d:69:cd:39:95:08:35:78:c7:bc:e9:bb:b3:ff:0d:a2:d5:
         de:0a:5b:66:a9:d3:fd:26:67:85:1d:13:fc:94:27:0b:6c:7c:
         55:57:f2:93:42:6d:33:45:3f:90:eb:6a:f6:0e:09:03:16:96:
         b3:5d:b5:2f:71:7d:ae:93:08:12:f6:5c:83:88:69:3e:09:4d:
         c2:ae:78:19:1e:04:cc:f3:ec:bf:e0:5d:44:5e:2c:2d:7d:53:
         4a:19:04:a5:84:28:75:2a:e3:12:e3:4a:d2:18:6d:22:4d:ea:
         1c:8f:3f:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:39 2026 by rpki-client