Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa
File:                     C08B23401DA511EBAD78BB46C4F9AE02.roa (raw, json)
Hash identifier:          VzHmzT9qEOc8jaNdnRrhA4Hy1ZCyxxdz/VTcSRfJzdM=
Subject key identifier:   8B:BC:12:90:D5:32:EC:93:2C:8D:E3:AD:C5:C4:08:6B:90:03:0D:89
Certificate issuer:       /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial:       0808
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:52:57 +0000
ROA not before:           Tue 20 May 2025 21:50:21 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139027
IP address blocks:        103.138.168.0/22 maxlen: 24
                          2404:d1c0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
                          rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
        Validity
            Not Before: May 20 21:50:21 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a452c9-ea3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e6:55:3c:11:aa:06:e0:12:24:ec:e7:88:32:
                    95:7f:09:6d:0d:77:61:e7:40:33:15:87:23:1f:cc:
                    cd:85:48:b8:5f:d3:c1:9a:2d:7c:f9:18:4e:3a:86:
                    25:c0:40:20:72:11:8a:be:2b:9c:1c:1b:df:15:50:
                    d5:ca:01:22:a2:af:ff:d6:6a:10:3b:80:71:8b:1b:
                    ac:34:46:c3:73:3a:00:75:12:bc:34:0d:76:bf:bf:
                    40:6d:63:e2:b7:08:27:51:52:7e:29:f0:37:91:a0:
                    1e:c5:f6:48:7f:d1:cc:f3:c3:0f:51:8b:1f:1b:c7:
                    81:9a:41:e6:3f:84:4e:51:80:f5:24:b4:fa:ae:ae:
                    03:a9:b4:eb:f0:87:8a:d9:13:c2:e2:f1:7b:f1:ed:
                    c2:b3:53:39:86:98:57:51:c9:8b:d2:24:0d:39:0e:
                    b0:72:52:4e:2f:93:39:d8:72:4d:17:37:21:e6:82:
                    c0:29:4c:2d:ca:8c:9e:a7:e8:bf:1b:bb:97:19:99:
                    bf:ec:3d:72:08:1a:03:3b:43:86:15:b1:bc:fe:92:
                    0f:d8:61:d1:68:bc:9c:98:9d:3f:eb:72:7d:96:b5:
                    90:94:27:30:27:f9:23:1d:56:29:d0:56:0f:e1:ad:
                    d4:0e:8a:af:85:6d:01:e2:aa:7b:86:d7:e7:df:3d:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BC:12:90:D5:32:EC:93:2C:8D:E3:AD:C5:C4:08:6B:90:03:0D:89
            X509v3 Authority Key Identifier:
                keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.168.0/22
                IPv6:
                  2404:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:5b:34:68:25:75:91:da:20:d9:e6:b3:58:2b:91:7e:84:65:
         e3:3b:d6:4f:dd:7c:14:8b:21:30:7d:57:14:17:9e:86:e7:57:
         49:cf:b0:24:e8:12:3d:84:6a:fd:bc:26:28:51:d8:11:38:b5:
         77:51:6d:45:39:cd:77:6c:a2:bc:5e:fe:a5:eb:90:b6:ee:35:
         76:a3:4c:8f:1d:61:f6:7e:12:d6:d8:91:e2:80:05:0b:43:53:
         3a:ba:cb:09:f9:de:52:4b:56:a7:0a:20:60:c3:b8:38:39:54:
         6f:e8:a8:6a:50:a5:7b:e4:cf:78:10:d3:06:ce:39:aa:57:f4:
         ab:3a:85:ea:2b:d3:3f:3a:2b:79:77:87:a2:e7:b6:51:01:1f:
         28:7c:8c:6d:51:78:aa:b1:1a:59:1b:78:7f:44:d3:c4:e5:95:
         39:44:56:97:19:f1:3f:96:19:67:8f:63:17:b4:89:bf:58:5a:
         1d:79:1f:cd:ef:d1:3b:97:d2:3c:07:0c:a1:1f:29:e6:dc:d7:
         85:9b:da:34:2e:67:b0:f1:d0:f3:22:62:a2:53:52:e3:02:8e:
         96:cd:bf:6d:91:dd:1e:32:b2:3b:a3:ec:ff:06:60:04:0b:54:
         33:eb:49:74:91:2d:a5:44:42:2e:01:2f:42:7e:41:e4:dd:f6:
         43:69:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:14 2026 by rpki-client