Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5F57D01A5EA511EFB0E1B468C4F9AE02.roa
File:                     5F57D01A5EA511EFB0E1B468C4F9AE02.roa (raw, json)
Hash identifier:          B60U3f1+qsY10YuIGjH+2vU48Y97aJmFB3vaxfIV/kk=
Subject key identifier:   D7:3F:3C:8F:EB:60:0A:2F:F8:42:85:60:8A:1D:B5:DF:FF:82:45:68
Certificate issuer:       /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Certificate serial:       01B3
Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5F57D01A5EA511EFB0E1B468C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:27:06 +0000
ROA not before:           Mon 07 Jul 2025 05:10:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151552
IP address blocks:        103.68.106.0/24 maxlen: 24
                          2001:df2:9440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
                          rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
        Validity
            Not Before: Jul  7 05:10:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4147a-b884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:d9:72:a7:a7:9c:95:d1:10:84:4c:21:1e:
                    0e:af:bc:00:c1:d3:4d:e1:96:bf:91:a7:8e:5a:04:
                    af:65:58:00:24:4b:16:27:55:38:eb:2b:55:e1:6d:
                    ab:36:af:f4:b3:ac:d1:56:cc:28:d4:c0:51:88:7b:
                    26:6b:23:01:1f:25:fc:c4:cd:a9:2d:d5:fa:e4:0f:
                    26:9f:a5:21:38:a6:7c:8c:3f:d7:40:08:e9:2e:f9:
                    2b:0e:ee:6e:d6:25:61:10:73:5f:9b:c2:79:35:af:
                    a2:b9:99:4f:07:41:79:5f:de:03:2d:4f:2c:fa:b4:
                    55:c5:e6:59:79:d0:95:ac:fe:af:0a:90:8b:49:c3:
                    aa:f6:af:54:7f:7f:3d:3c:57:d4:da:3f:5e:9a:5a:
                    95:49:83:48:7b:27:39:a9:bd:ec:a6:3a:67:34:cc:
                    60:c0:66:a2:81:c3:21:bc:e9:74:b1:1e:68:df:63:
                    d8:6e:00:60:85:98:25:ea:8e:45:ab:17:27:76:f4:
                    2e:4f:13:f1:3c:2b:b8:f0:b6:0a:b5:30:b1:89:62:
                    6f:a0:ca:0d:6b:ea:0b:ad:d1:d4:08:59:d4:21:ca:
                    48:22:4d:24:b3:1d:b9:54:66:51:23:b8:a2:c6:1c:
                    15:cc:46:d8:bf:6e:31:6b:6b:3b:fa:ec:35:69:7e:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3F:3C:8F:EB:60:0A:2F:F8:42:85:60:8A:1D:B5:DF:FF:82:45:68
            X509v3 Authority Key Identifier:
                keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5F57D01A5EA511EFB0E1B468C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.106.0/24
                IPv6:
                  2001:df2:9440::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:2a:1c:80:a8:31:3f:46:99:9e:58:ca:55:16:51:f6:7b:43:
         58:1a:c3:16:7f:c4:45:a9:cc:54:98:92:cb:5a:a8:20:83:1a:
         b4:40:29:b6:71:ea:66:0e:23:b5:1a:46:3e:51:74:2f:8a:ec:
         51:74:22:3b:29:26:8c:d4:0a:4d:5b:74:06:37:e6:69:ef:73:
         ae:d1:48:58:58:2d:36:b5:42:31:de:da:da:63:d3:bd:dc:84:
         dd:35:5b:66:50:59:6b:fe:75:87:b0:57:72:6d:4f:cd:22:d9:
         6f:27:79:ba:56:6e:4e:e4:ca:1e:a2:f9:47:d4:d6:f1:42:f5:
         07:b5:b2:18:1a:25:51:99:91:26:ab:bb:bc:bf:c6:08:c8:90:
         97:fa:74:69:c8:49:dd:8d:a6:f2:d6:05:18:7d:ef:28:19:92:
         bb:75:7c:a9:23:1a:a1:19:14:47:2b:5a:d1:f7:1f:15:0c:83:
         2d:f7:65:fb:da:42:b5:50:c3:53:ae:35:15:f7:6f:9c:57:11:
         bb:dc:3a:d2:93:75:e6:3c:c2:93:3f:ed:67:96:ae:07:03:a6:
         e8:1d:c3:0c:20:ac:43:47:1d:bc:08:f4:bb:97:69:25:ab:17:
         30:29:5c:a1:93:08:00:ad:36:71:cb:76:4f:c6:dc:73:c9:f2:
         af:99:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:46 2026 by rpki-client