Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/57A86D66553F11EBA47EB279C4F9AE02.roa
File:                     57A86D66553F11EBA47EB279C4F9AE02.roa (raw, json)
Hash identifier:          YLPPf/HdR9hRcUwDdkO/JGA4ct4Vk1HeBdLasWFLu9M=
Subject key identifier:   08:20:F8:E1:CA:58:5F:DC:29:2A:97:02:17:8F:FD:CD:BF:49:80:C5
Certificate issuer:       /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Certificate serial:       0F87
Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/57A86D66553F11EBA47EB279C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:48:48 +0000
ROA not before:           Fri 28 Nov 2025 17:20:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     56304
IP address blocks:        103.243.160.0/24 maxlen: 24
                          2400:3d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl
                          rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3975 (0xf87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
        Validity
            Not Before: Nov 28 17:20:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a443c0-f191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:ee:47:73:0d:1f:fa:af:cd:fb:81:a7:b8:
                    a0:8c:9b:c0:44:62:fe:8d:e6:42:e8:72:b2:34:32:
                    24:71:05:b8:35:db:84:e4:9a:f3:1f:98:6f:d1:a6:
                    fe:dc:ba:a6:63:a3:e1:19:26:84:5f:43:58:28:f7:
                    de:b0:eb:4d:00:c6:e9:24:10:6b:12:2d:1e:2c:73:
                    01:98:10:89:d4:aa:7e:93:83:f6:7c:9a:86:27:ef:
                    42:f3:b2:37:f3:e5:9d:c3:40:3f:60:f1:7e:18:ab:
                    cf:be:25:9e:3e:03:23:8e:9c:ac:7c:68:14:9b:c0:
                    4c:48:10:f7:44:c6:17:1b:46:e9:53:0b:85:9b:5d:
                    55:45:26:1b:63:e0:01:07:08:92:91:b3:b1:23:c4:
                    c3:ea:9e:b0:b8:bd:67:b5:1a:8f:f6:a9:7c:42:1b:
                    f2:30:8e:ab:fb:66:b4:fe:f9:7e:cb:d9:99:9a:31:
                    26:a5:64:35:d1:ca:be:68:48:b2:f3:cf:c8:1f:56:
                    59:4e:64:a7:75:67:0e:c3:f6:d6:1a:ac:f6:93:f2:
                    7e:73:76:a8:23:a2:61:9a:e3:b4:79:9e:0b:f8:70:
                    94:4a:5c:ae:b9:3d:4a:55:95:95:e3:7f:39:85:5b:
                    0b:82:51:06:e4:65:b7:f0:ba:be:24:b6:ed:71:ac:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:F8:E1:CA:58:5F:DC:29:2A:97:02:17:8F:FD:CD:BF:49:80:C5
            X509v3 Authority Key Identifier:
                keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/57A86D66553F11EBA47EB279C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.160.0/24
                IPv6:
                  2400:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:31:26:53:c7:1c:ce:61:6d:15:07:94:8f:b0:60:db:c5:5e:
         b5:e5:cd:45:11:f1:ca:11:22:fb:3a:af:2c:1e:05:b6:90:a9:
         15:c6:1e:cb:1e:ce:37:e9:93:c9:97:0d:69:28:bb:cc:b4:d8:
         b0:47:6c:a7:c8:04:90:2b:36:b3:d2:ed:b8:99:c1:08:7c:a2:
         4a:6a:64:f7:f7:c4:28:65:af:cf:e1:63:b5:79:b1:44:ba:32:
         e5:7f:4f:17:54:b0:6a:05:0d:e5:d2:ad:a4:14:0f:12:87:94:
         74:8e:e5:ec:e0:b9:07:0c:13:a3:61:2b:bd:86:05:af:20:6f:
         67:3c:df:62:78:e9:e7:a3:55:9d:50:39:c4:ed:70:6b:29:bd:
         0a:b9:ef:71:c3:37:4e:43:1d:24:78:9f:a3:01:3c:80:e9:b8:
         56:af:82:1e:da:56:ed:27:fb:a0:ae:64:6e:24:a3:63:62:7f:
         41:6c:42:0c:cf:41:9b:7b:66:4b:ae:db:77:a9:12:4f:ac:2f:
         b8:1c:96:f5:90:dd:16:7c:c1:74:45:10:4e:a5:1f:92:6a:bc:
         2d:95:65:41:28:9e:b3:1d:6b:4f:ef:54:ce:b0:a1:00:65:9d:
         9f:5d:9c:0a:2b:2f:5b:d0:c8:cc:a9:3d:92:f7:1e:65:0f:2f:
         49:06:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:30 2026 by rpki-client