Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/1E9D1268B3E011ED98356A75C4F9AE02.roa
File:                     1E9D1268B3E011ED98356A75C4F9AE02.roa (raw, json)
Hash identifier:          5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=
Subject key identifier:   00:06:B6:17:19:62:BC:87:82:96:C1:E1:F6:29:3E:B4:8F:C8:64:02
Certificate issuer:       /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial:       070C
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/1E9D1268B3E011ED98356A75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:35:41 +0000
ROA not before:           Wed 31 Dec 2025 22:18:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7492
IP address blocks:        103.157.244.0/23 maxlen: 23
                          103.157.244.0/24 maxlen: 24
                          103.157.245.0/24 maxlen: 24
                          2001:df2:3340::/48 maxlen: 48
                          2001:df2:33c0::/48 maxlen: 48
                          2001:df5:3680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
                          rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804 (0x70c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
        Validity
            Not Before: Dec 31 22:18:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46add-1083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:3f:57:9d:d6:f7:25:a6:4c:a2:79:de:6d:
                    34:d2:d7:58:c8:7c:63:c2:09:63:54:27:6f:c7:73:
                    00:6f:bd:ef:75:42:b9:10:bc:bc:c4:6e:d7:a4:6e:
                    7e:75:c4:c6:45:8c:22:ca:3c:85:11:0b:aa:dc:a6:
                    52:9f:17:b9:ac:8c:9b:7c:1c:a8:62:c5:28:39:43:
                    4c:c9:af:e1:2e:cf:d9:da:b8:f4:f9:12:e5:6a:1c:
                    d2:46:a1:e8:4f:4b:06:7c:80:26:84:7b:4d:ee:c7:
                    dd:30:20:62:ce:05:81:89:2e:37:8b:e1:26:0c:f0:
                    15:0f:b7:88:97:3c:09:93:30:58:fb:d3:d1:be:a1:
                    77:dc:ee:f7:65:d3:17:9b:3e:3b:9a:46:c9:da:eb:
                    85:c4:c6:fa:92:8c:b2:65:54:7c:ab:4b:71:68:5a:
                    97:8b:d3:d9:69:7d:45:7f:cf:ec:63:75:79:b1:b3:
                    43:eb:93:c5:56:9a:77:a1:95:4d:17:7a:93:cb:9c:
                    d4:d6:47:78:49:60:f0:ad:e7:87:e6:9c:fa:39:c9:
                    37:87:12:87:88:39:a0:ba:e0:1d:95:7b:8e:e7:45:
                    f9:be:89:fa:6e:df:c5:3c:0e:07:79:2a:af:19:78:
                    94:35:bd:d1:e7:72:07:dd:f2:d6:15:6f:da:92:8c:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:B6:17:19:62:BC:87:82:96:C1:E1:F6:29:3E:B4:8F:C8:64:02
            X509v3 Authority Key Identifier:
                keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/1E9D1268B3E011ED98356A75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.244.0/23
                IPv6:
                  2001:df2:3340::/48
                  2001:df2:33c0::/48
                  2001:df5:3680::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:32:c2:88:c1:c8:0a:98:d1:20:7a:03:36:79:a3:a5:33:a4:
         0a:92:82:93:cf:a3:49:2c:6c:23:0b:69:b1:74:07:88:10:b7:
         bf:81:ed:43:dc:00:1e:ec:0a:04:32:7b:c7:f1:04:78:6c:f7:
         f8:f8:e2:6d:95:13:fd:1b:17:70:08:dd:27:db:ed:c3:fa:1c:
         9b:41:e5:cf:b9:2d:6e:45:f5:88:d8:31:76:dc:aa:86:76:ab:
         33:08:0a:ce:19:8f:64:8c:48:8b:d4:e4:92:95:08:2a:9e:ba:
         46:0f:e4:99:e3:e2:14:0e:75:53:70:7d:83:55:6e:89:9e:5b:
         e8:b1:4b:b3:ec:48:8f:04:41:69:f1:46:45:ed:cb:da:5f:a0:
         40:af:d8:cb:a9:5d:0e:d3:b1:9c:44:c7:1d:ce:30:40:e7:2a:
         25:a6:c4:9d:ae:db:e0:ba:53:fe:cd:c6:aa:a0:53:d6:91:f3:
         64:86:f2:39:ae:82:f8:d8:72:19:95:ec:4a:91:d5:72:12:68:
         99:8e:05:6f:c8:9e:e1:8c:a5:2e:b8:7b:d5:50:05:99:f2:44:
         c5:81:88:b5:25:96:6b:26:44:4b:6f:c8:0c:ca:f2:54:73:80:
         d4:05:be:a5:e8:42:7d:26:0c:b2:c1:db:c7:32:a1:7f:bd:bd:
         1e:10:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:45 2026 by rpki-client