Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/4729B9CC10B011F19AF5FC353C3D8C67.roa
File:                     4729B9CC10B011F19AF5FC353C3D8C67.roa (raw, json)
Hash identifier:          VqNnuqSCIIyBQXY/qiP6LngG1wDJOTUfMmewOwwlpxk=
Subject key identifier:   35:E1:1E:D6:26:B9:69:D5:9B:B6:B7:5B:0B:5F:B4:E5:E7:5A:6D:85
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       0A03
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/4729B9CC10B011F19AF5FC353C3D8C67.roa
Signing time:             Sun 01 Mar 2026 18:37:45 +0000
ROA not before:           Sat 28 Feb 2026 21:17:42 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     147182
IP address blocks:        103.96.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563 (0xa03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Feb 28 21:17:42 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48779-27e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:5c:d6:be:c7:7d:68:bb:76:2e:ac:27:e7:
                    55:49:7d:cc:61:09:1d:b4:49:cc:bb:7c:d2:62:5a:
                    85:7e:16:90:55:4f:d4:ca:c7:8a:54:a3:36:c8:9a:
                    41:dc:cb:f9:cb:64:43:b2:03:9f:d0:f3:d3:64:a0:
                    40:e5:f5:42:01:17:0d:63:fe:d1:dc:c1:7e:6b:28:
                    5c:49:4a:d4:98:a0:e9:9e:1c:ad:fe:94:b1:a5:3b:
                    49:1f:a8:d1:e9:5f:03:6c:b2:69:81:79:16:98:7d:
                    5d:01:41:ec:50:73:a2:50:b2:47:94:59:10:55:12:
                    30:19:b9:98:7b:25:9d:0c:5b:57:c3:1b:61:78:22:
                    0c:0f:b1:85:3c:84:e0:f0:72:92:46:15:8d:33:b8:
                    5b:18:7a:42:bd:5f:c8:47:2d:95:65:cc:b4:d5:da:
                    d1:23:a2:d6:ca:bd:b2:68:bd:9e:db:a9:53:58:75:
                    78:26:e7:33:02:f7:f9:56:5e:8c:ad:91:64:81:8a:
                    04:50:bd:dd:25:eb:e8:6e:03:25:7e:58:64:96:7b:
                    36:a8:3d:c6:bd:38:c9:2b:69:12:d9:bb:9f:9a:09:
                    f3:09:a0:4a:d2:ad:99:2e:bd:06:71:bd:05:93:29:
                    0b:1f:8b:96:26:58:42:8b:cb:49:1e:3a:0e:a7:2c:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E1:1E:D6:26:B9:69:D5:9B:B6:B7:5B:0B:5F:B4:E5:E7:5A:6D:85
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/4729B9CC10B011F19AF5FC353C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:6b:6a:25:fd:0e:e1:99:0c:2e:ae:8f:1e:b6:6b:71:9f:
         9b:47:d9:f5:5f:7f:d3:39:ea:1a:26:14:36:b6:f5:d9:f6:d3:
         c0:ba:d6:a5:1d:12:18:ba:f3:a9:96:8e:92:56:f3:79:99:fd:
         63:ed:6e:d4:8f:b9:97:d4:94:af:18:4a:8e:bf:af:fe:40:86:
         2b:1e:57:47:8c:60:e3:7c:75:c3:b2:55:3a:d8:ad:b8:74:25:
         50:a5:7c:69:a8:02:fa:3c:cb:cb:25:8e:77:20:07:d4:25:a4:
         72:bf:c2:7b:fd:03:a6:1d:b3:c3:46:46:c3:36:fa:b2:b4:f7:
         71:b2:b3:65:8f:2d:45:2e:61:04:b7:dc:8f:47:74:30:a4:c6:
         6d:dd:6f:62:4b:9e:4d:d0:c1:3a:2f:4e:5c:53:93:07:42:ec:
         12:c1:6f:b0:42:f0:84:21:67:0b:81:b9:94:24:54:7a:b0:e6:
         8d:ff:ea:23:21:b7:61:00:98:ab:e8:32:4d:f3:4b:27:cb:71:
         ce:7d:6b:c3:a9:9f:8f:4b:80:23:f8:18:04:e2:ce:43:96:dc:
         ed:f5:33:f6:39:46:ab:d9:ad:2d:f2:31:c1:ca:07:83:65:cf:
         3e:c4:a0:e7:cc:ad:60:de:8a:d0:b1:f3:61:1e:75:c5:f7:db:
         7b:26:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:03 2026 by rpki-client