Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa
File:                     10581DEAC75D11EBB00EBD1AC4F9AE02.roa (raw, json)
Hash identifier:          VIm0ODfqTfFmRg9V+F457gZoxXABY0nagImzXC9FXiI=
Subject key identifier:   5C:37:F9:53:D8:85:D2:CB:DC:AC:9E:D2:DB:AE:0C:CF:1D:E3:32:4E
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       0646
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:49:03 +0000
ROA not before:           Thu 06 Mar 2025 23:14:17 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134555
IP address blocks:        203.2.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1606 (0x646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: Mar  6 23:14:17 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3fd7f-80fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:9e:03:3b:9d:08:3f:47:d8:1a:c6:ed:b2:
                    46:80:80:a3:98:c7:6c:70:7e:f7:db:cf:f6:24:86:
                    bd:b8:3b:48:75:9c:f1:71:22:22:89:9c:0c:61:f9:
                    4e:91:fa:a6:fc:dd:46:1e:1d:91:70:6a:db:8e:97:
                    1c:9c:92:0f:fd:6d:fc:c8:60:d0:78:38:ce:6e:f7:
                    57:52:20:a9:84:9d:dc:91:02:b8:ca:0e:91:82:38:
                    46:3c:35:ec:5a:7f:b6:4f:3e:0f:db:b4:4b:db:15:
                    39:89:c4:c9:ec:2e:eb:c2:19:91:fe:d0:c2:6f:46:
                    50:c1:b5:6e:d9:13:b2:26:80:4e:4e:58:df:66:37:
                    0c:26:d9:c2:2c:20:aa:33:91:da:f1:38:b5:aa:bc:
                    a9:d2:3a:3b:e1:29:6d:b6:c1:1c:fa:3d:00:8b:73:
                    e7:05:13:ae:d7:95:e6:e2:9f:5c:3c:df:10:3d:80:
                    27:d4:58:c0:b4:d2:74:26:04:7f:fc:42:b1:cd:4e:
                    b3:2a:47:e3:bd:78:da:a8:2e:4d:4a:cc:65:97:8d:
                    56:9a:f0:40:14:00:7a:cf:84:97:8a:ad:98:59:7f:
                    33:c4:06:0f:e5:4c:ef:5e:19:e1:7b:65:61:13:74:
                    41:f6:f4:61:ec:e6:c8:0a:30:bf:13:80:3f:08:41:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:37:F9:53:D8:85:D2:CB:DC:AC:9E:D2:DB:AE:0C:CF:1D:E3:32:4E
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.2.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c0:44:b1:28:cd:72:35:57:1f:35:42:71:e6:4b:4b:fb:75:
         75:9d:2c:4f:18:ca:d8:74:43:51:86:48:e1:4e:14:92:5b:01:
         0d:66:f4:de:2b:a5:94:24:37:d1:34:b2:95:a7:54:f7:b0:c5:
         e9:59:d7:e4:fc:4e:96:f0:ca:91:e8:4f:40:40:f4:5d:e8:36:
         95:94:ab:10:d6:e2:8e:c6:cf:80:e7:8a:63:0f:b4:ae:f1:2a:
         5f:89:6f:4e:8b:51:2f:68:26:f3:f9:36:06:47:7f:0b:3a:b7:
         25:6e:2f:c3:2d:99:6c:00:02:75:1d:94:58:ea:04:23:7d:da:
         64:61:a2:65:e1:a2:a4:ba:2d:3d:68:fa:42:fb:55:cd:67:e9:
         c2:2c:ef:1f:7b:3b:f2:f1:2a:68:7c:69:95:c7:72:76:8c:ca:
         92:73:df:d0:95:e0:ad:10:ce:4a:70:2b:39:b6:38:3f:78:7c:
         f2:ba:c2:35:dc:fe:ed:48:01:b4:7e:51:4b:a4:4c:5a:1c:c4:
         31:81:bc:75:0e:36:94:2f:d4:a3:7a:01:04:69:4f:bd:da:37:
         f4:eb:20:cf:91:be:c2:34:2d:81:ab:91:21:89:ad:1d:18:db:
         27:9f:d1:bf:fa:b3:b2:49:c9:a8:03:ee:89:ff:69:fc:a7:5a:
         a2:44:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:13 2026 by rpki-client