Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa
File:                     21151EF0A8C411EC8F560C42C4F9AE02.roa (raw, json)
Hash identifier:          kbmYrfPVQZ55x1vp2bi+3Rgp3sQUvBWkWBU9ViJuE/k=
Subject key identifier:   DF:61:D0:F8:47:8A:E4:AD:3A:40:AD:D3:55:82:71:97:73:40:5E:2D
Certificate issuer:       /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Certificate serial:       112B
Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:16:29 +0000
ROA not before:           Fri 28 Feb 2025 18:27:14 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     137385
IP address blocks:        103.132.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl
                          rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4395 (0x112b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
        Validity
            Not Before: Feb 28 18:27:14 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69a42e1d-39da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:97:17:43:b9:fc:7d:f2:d5:ed:4d:3d:06:
                    fd:5d:98:66:ac:c6:15:f5:29:32:5a:b9:bd:6d:33:
                    fb:5a:74:15:ba:37:13:b2:d3:6a:23:a0:9a:18:d2:
                    0d:4e:65:58:63:f5:e9:52:c3:d8:48:f5:d2:3d:5a:
                    40:f4:71:6a:42:7b:20:b2:13:8f:3f:ab:da:91:e4:
                    a7:ab:a2:92:56:35:dc:9d:bf:ca:1b:76:2b:0a:4a:
                    bf:6f:1f:ed:80:8c:fd:a6:af:63:ff:cb:b8:32:e9:
                    55:e5:1b:36:bc:06:cd:87:34:d7:28:7b:2f:6c:91:
                    32:e5:f3:a7:1e:77:16:2b:86:00:36:47:19:dd:b8:
                    ec:ac:a8:b1:70:c6:96:b2:33:f5:e8:18:53:af:25:
                    94:f3:97:b0:69:eb:23:7f:b5:4f:08:3f:cf:a6:65:
                    53:6a:3d:a0:dc:5f:14:e5:3f:c2:ea:47:90:a6:70:
                    86:02:d2:86:65:8c:00:ad:91:87:ae:49:5b:97:5e:
                    8c:d7:ce:af:42:80:c2:08:a1:0e:10:09:01:e2:1c:
                    0e:37:79:27:9a:26:23:24:b8:d7:cd:3e:be:5e:b2:
                    37:90:77:ee:bd:b4:98:7f:01:9f:42:2b:ac:5a:0c:
                    0a:ac:96:63:de:47:bf:b0:e8:3b:0b:5c:d0:7d:db:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:D0:F8:47:8A:E4:AD:3A:40:AD:D3:55:82:71:97:73:40:5E:2D
            X509v3 Authority Key Identifier:
                keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:7a:31:c3:8c:be:ef:22:70:9f:c9:bd:61:d7:f9:05:1f:
         df:88:39:c2:87:01:07:fa:88:a2:81:7f:72:39:fa:de:47:cd:
         8b:3a:a7:93:22:19:38:b9:ec:cc:65:f0:c1:ff:4a:aa:6d:68:
         f2:df:ca:bd:10:2a:be:26:e9:d8:78:39:b6:92:69:32:0b:dd:
         83:68:82:de:30:75:e3:0b:87:43:ff:dc:92:99:1c:58:24:af:
         ea:c2:a1:77:94:4d:50:81:b8:36:a7:b5:ab:03:5c:34:7b:ad:
         34:e3:74:db:82:4e:07:1d:e7:04:e0:51:9d:e6:9d:71:f4:12:
         4e:af:21:19:28:f0:02:5d:64:a7:77:36:dc:57:44:29:00:a0:
         43:c1:3e:8e:a6:5c:c4:d5:2b:05:f0:bf:9e:f2:82:42:ec:69:
         64:52:90:b4:31:b3:e2:c0:56:f4:60:c0:c2:83:c6:ef:5c:b2:
         07:98:32:5a:55:26:f6:50:b0:d3:b0:25:b5:51:88:53:86:a2:
         4c:c0:da:8b:24:14:33:15:74:72:72:b0:62:6a:4b:91:43:11:
         21:71:20:13:95:5c:c8:e7:02:e3:24:1c:e9:36:f1:c6:96:78:
         05:30:ea:5d:c6:97:a1:07:85:67:42:5a:4f:f0:2e:76:c2:98:
         89:d9:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:18 2026 by rpki-client