Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa
File:                     D57EF608BC6C11F0894F2331C4F9AE02.roa (raw, json)
Hash identifier:          GGxh8T4eQEnDyas21T9qVQNrdHjJmohVPNS9oMQLlS4=
Subject key identifier:   C8:AB:E5:63:24:CF:4A:7B:F2:69:49:2D:74:2D:63:D6:30:57:70:AE
Certificate issuer:       /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial:       080A
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:52:59 +0000
ROA not before:           Sat 08 Nov 2025 06:33:27 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139029
IP address blocks:        103.138.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
                          rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
        Validity
            Not Before: Nov  8 06:33:27 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a452cb-b828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:06:12:82:8c:45:17:d0:2e:c7:da:06:70:
                    ec:9f:45:78:2b:23:e4:4a:d5:25:be:b8:3b:74:0f:
                    8b:f8:27:c3:08:47:43:ec:f3:d7:b7:0e:c5:0b:88:
                    f9:f5:07:88:19:fd:2b:b1:f3:90:f0:69:07:31:75:
                    dd:bd:51:88:a2:4d:de:dc:e7:a8:5a:f6:3c:d4:c2:
                    6a:3a:af:5c:89:07:30:3e:c9:2c:a5:d4:93:eb:70:
                    06:4f:c0:c3:ca:4e:b2:47:17:60:6f:53:e0:60:04:
                    45:14:48:97:7e:bc:e1:b6:c3:5d:ea:92:85:ee:b9:
                    8d:dc:62:63:49:43:ef:3f:76:92:bd:b2:86:90:d8:
                    2b:f6:b7:9d:c4:d8:c1:79:1a:e4:81:00:5d:0f:1e:
                    8f:d6:be:86:7f:8c:d0:6b:ae:c2:ce:80:ad:92:41:
                    3f:8f:17:53:7f:37:65:a3:b0:28:9c:8d:03:65:76:
                    11:d2:ec:cc:b7:73:e4:20:c2:ea:1e:e7:b6:7e:14:
                    84:87:9b:29:eb:91:1a:be:74:38:6a:f3:2f:7c:5d:
                    5a:3c:c7:8e:37:42:b6:1d:4c:44:32:e6:6e:0f:8e:
                    0b:24:bd:58:0e:3a:0c:45:35:9a:97:70:5a:d4:d8:
                    25:54:ee:d7:dc:21:cc:2d:e7:6a:9e:7d:4f:07:fa:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:E5:63:24:CF:4A:7B:F2:69:49:2D:74:2D:63:D6:30:57:70:AE
            X509v3 Authority Key Identifier:
                keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/D57EF608BC6C11F0894F2331C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:91:89:9f:a4:10:01:fc:c8:8e:2c:5c:53:dc:4e:dd:4c:
         5b:aa:61:79:25:de:2a:a8:bd:e8:5f:0f:51:d7:d1:8b:73:90:
         f7:9f:5c:eb:3c:1c:ee:97:ac:df:88:a4:8b:2e:2a:44:22:22:
         41:6b:e3:35:62:04:85:50:86:08:9a:0e:d5:3f:b3:0d:21:6b:
         d6:1d:cb:a7:9b:4b:20:c6:72:83:8f:a7:a5:73:c9:ab:12:4e:
         91:e9:11:97:29:a7:7b:bd:ec:48:49:71:fd:90:a5:5a:e6:bc:
         67:45:af:f9:b2:ba:3c:94:9a:4e:b6:44:36:b7:27:b5:3e:91:
         d0:17:8f:58:08:2d:dc:70:03:d1:be:85:64:c6:de:3d:ef:9d:
         64:79:0d:3c:da:eb:23:fc:4f:d0:b3:60:9d:f0:fd:1c:bf:03:
         ed:c9:4c:c1:c7:e7:85:5b:a0:e1:05:9d:12:13:48:56:63:5c:
         4c:a3:c3:91:5f:46:37:99:f8:4c:71:5e:f2:2c:55:83:4a:04:
         b0:31:6d:26:04:b2:22:09:58:10:8f:89:c9:c9:88:d8:6e:4b:
         e8:80:59:00:cc:34:7f:9f:18:39:5e:f7:db:c2:62:ff:85:83:
         5a:e0:21:c5:07:11:62:a3:ca:d6:d5:0c:07:7b:b1:99:bc:17:
         be:76:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:04 2026 by rpki-client