Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E897EA5A3EE411ED905A3415C4F9AE02.roa
File:                     E897EA5A3EE411ED905A3415C4F9AE02.roa (raw, json)
Hash identifier:          jcbGwSlzULf5rLkfD8fUMWUcZGOa/WoZyUzS4RvfPc8=
Subject key identifier:   63:A8:0B:27:E1:74:6E:C7:9F:43:18:77:D5:03:C8:7D:E4:15:E6:22
Certificate issuer:       /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial:       088A
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E897EA5A3EE411ED905A3415C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:03:13 +0000
ROA not before:           Wed 10 Sep 2025 21:33:04 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4637
IP address blocks:        103.155.8.0/23 maxlen: 24
                          2406:60c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
                          rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
        Validity
            Not Before: Sep 10 21:33:04 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46341-f75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:a4:b4:5d:78:df:20:ea:cb:33:b8:c2:1b:
                    93:69:a4:45:b0:4a:10:f8:0e:eb:31:a9:9a:74:f7:
                    88:f2:91:5c:a7:3f:97:96:23:8e:0b:7a:a6:46:f4:
                    01:d8:be:45:6e:3a:a8:0a:2f:0e:ac:0e:8b:3f:11:
                    98:42:51:a0:70:3c:35:60:bc:41:8f:13:59:b5:92:
                    3a:28:de:5b:ba:78:14:a1:a1:fb:c8:8a:59:65:0c:
                    78:b4:97:64:8d:dd:7c:52:55:1c:95:01:2e:76:e6:
                    9e:55:2f:4c:76:92:2b:f3:59:ac:de:b4:0a:9b:5b:
                    9b:df:37:ba:1c:c5:2a:fe:36:9b:c0:0f:64:f7:19:
                    f6:f2:10:2d:2a:33:50:48:5c:a8:d8:05:33:15:df:
                    59:8b:ad:cb:d9:93:90:5e:54:da:54:99:49:bb:3f:
                    34:29:c1:3f:c1:8c:3a:65:4c:a5:86:10:e6:aa:ff:
                    ce:aa:23:ea:58:e4:60:48:9b:2d:ff:45:d3:d9:2a:
                    3a:f4:6b:06:e7:e5:d3:3f:c7:9b:93:ff:99:cf:84:
                    8e:57:91:01:6a:8e:52:ee:d2:8a:23:36:19:90:8e:
                    34:8f:6f:c9:51:cf:75:f6:76:f7:a5:0f:a0:31:45:
                    3e:a6:3c:bb:91:bc:f7:7e:3d:2b:06:fc:7a:db:85:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:0B:27:E1:74:6E:C7:9F:43:18:77:D5:03:C8:7D:E4:15:E6:22
            X509v3 Authority Key Identifier:
                keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E897EA5A3EE411ED905A3415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.8.0/23
                IPv6:
                  2406:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:92:08:12:04:15:7d:53:a6:5b:83:8c:df:a7:f8:72:af:
         26:f1:b1:3f:d8:46:3e:33:89:76:b0:a9:50:ad:77:72:c5:3b:
         c0:14:69:26:a5:58:a2:da:18:91:ff:6f:9c:92:33:3d:bc:50:
         d9:2a:b1:74:7d:68:b9:d1:02:df:eb:ef:3b:be:7a:77:84:92:
         2d:26:19:e7:fa:f7:95:0d:4a:10:5d:a3:32:b3:53:b6:c5:08:
         7e:df:f3:06:a2:c2:2a:b4:51:fe:df:16:33:d1:6a:8f:d9:eb:
         98:b5:de:82:0b:25:80:28:d5:21:71:c1:d0:e1:2a:58:a3:af:
         53:04:cb:71:f0:fc:9f:5f:8d:bc:e4:cf:60:fc:7d:21:e3:c5:
         37:38:5b:d9:2c:55:c3:7f:0f:ba:28:44:3f:65:63:1b:3b:cf:
         a8:a3:07:79:0f:73:a9:42:88:46:c7:21:cb:6e:02:84:ad:f3:
         3b:36:31:74:cd:66:17:42:6b:98:36:ab:8d:66:df:41:1f:3f:
         f3:89:fc:d1:b0:63:79:fe:ab:53:44:32:27:58:92:6c:a3:3e:
         9f:b4:8e:a2:ff:69:99:e4:f4:16:aa:eb:1c:48:2f:a2:06:3f:
         74:20:00:e7:2f:bc:24:4e:27:d7:84:42:90:3c:b2:88:5f:fc:
         4b:9a:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:50 2026 by rpki-client