Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa
File:                     7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (raw, json)
Hash identifier:          m0EtsgnFteaZumXXNJzKKsBn+VRdGLka+E0ADygv+iA=
Subject key identifier:   26:9D:7D:07:CC:06:41:C1:23:AF:18:14:4B:25:50:EA:EC:DC:98:7E
Certificate issuer:       /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Certificate serial:       0194
Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:49:19 +0000
ROA not before:           Tue 27 May 2025 05:40:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139000
IP address blocks:        103.138.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
                          rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
        Validity
            Not Before: May 27 05:40:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5955f-8a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:35:bb:56:8a:61:09:82:f8:d2:16:e4:1e:
                    bb:91:43:36:f9:f8:c3:74:ec:60:53:5d:21:87:c1:
                    01:65:0c:fc:5d:b4:14:3c:12:9d:54:ba:b7:f3:49:
                    f9:bc:4b:bf:8e:e7:ab:9d:b6:7c:b9:4c:98:63:04:
                    28:09:7f:25:c9:84:ab:33:c1:b4:1c:2f:dc:19:bd:
                    7a:47:08:de:7d:d1:41:00:34:90:10:31:88:67:7c:
                    13:69:5e:99:fc:37:5a:88:60:7f:80:a8:f5:d3:85:
                    c7:b5:a2:1b:bf:79:33:63:0a:eb:80:28:7c:74:2c:
                    ae:20:6b:a9:99:7a:bd:ac:54:97:c1:ab:05:33:87:
                    c9:af:2e:05:ed:c8:2e:53:af:02:4b:9a:d8:9c:7e:
                    ca:9f:26:f9:ea:54:43:17:10:db:fe:d1:f6:11:91:
                    91:83:fb:20:2e:ef:9a:f8:11:d6:63:2f:ca:7e:11:
                    a3:d0:f1:98:e6:21:1b:8b:89:77:0f:a3:b2:7a:52:
                    59:81:1c:61:81:59:f8:0e:58:92:3d:a6:f6:25:4c:
                    78:5b:01:07:32:3e:08:e6:37:8c:ee:af:04:02:2d:
                    40:09:3c:77:97:a0:08:f2:11:55:a9:7f:fb:66:c1:
                    7d:96:6f:e2:4e:56:a0:3d:88:6d:4b:11:11:ae:a7:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:7D:07:CC:06:41:C1:23:AF:18:14:4B:25:50:EA:EC:DC:98:7E
            X509v3 Authority Key Identifier:
                keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:5a:ba:12:71:ba:f3:f5:95:ba:df:b3:b5:c1:15:1a:98:25:
         09:94:c6:c7:e2:8d:54:d8:33:5b:87:7c:99:3f:a5:2a:e4:28:
         e0:64:2f:12:d6:68:4c:64:d4:96:15:08:81:cc:18:09:f1:74:
         f3:95:fe:5e:3a:d9:96:2d:99:4f:76:85:65:af:8f:d3:5d:04:
         77:e5:c0:d2:25:bf:98:5e:0e:da:63:f7:e8:8d:a3:66:ae:66:
         a3:c8:98:97:70:74:32:32:21:be:d8:4b:ea:69:ed:00:7b:65:
         3b:da:42:4b:e4:9c:43:58:e2:32:6d:a3:52:c1:62:f4:10:ab:
         d2:a0:ec:a1:34:6d:22:2c:57:a3:d3:06:d2:a3:0d:02:93:62:
         db:fe:dc:2a:e0:d7:8a:b2:be:40:23:d7:f3:3d:65:8c:8c:0e:
         a7:fb:60:fd:de:85:00:d0:e9:a8:30:60:f5:17:72:76:3d:6a:
         79:8c:2f:e1:09:a1:da:ff:cb:4e:2b:7a:fd:40:02:f5:3c:fd:
         da:fc:94:88:bc:1e:e5:b6:95:1c:62:37:12:d2:50:8d:d8:06:
         d0:4f:41:02:82:a6:a1:45:85:a6:19:86:ff:30:0d:c4:74:f9:
         f0:56:5f:4b:62:31:b5:0f:ca:50:b3:68:dd:0a:61:e5:90:b1:
         21:2e:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:02 2026 by rpki-client