Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2CB6A79C3C6411F098BE6F2EC4F9AE02.roa
File:                     2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (raw, json)
Hash identifier:          RuLZBRWd/+t6mmzM5XIVRxFhH72vtVTpt1H02OxGyCU=
Subject key identifier:   53:F3:AF:61:13:E9:C7:5E:EC:D4:FD:CB:90:4B:30:B3:CE:C6:D9:67
Certificate issuer:       /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial:       0DFF
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2CB6A79C3C6411F098BE6F2EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:39:51 +0000
ROA not before:           Tue 20 Jan 2026 18:15:14 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150748
IP address blocks:        103.89.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
                          rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3583 (0xdff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
        Validity
            Not Before: Jan 20 18:15:14 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a479e7-170c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:26:d9:1d:a7:ab:30:7b:f0:27:71:1f:f3:
                    b5:42:e1:b5:6e:3e:1a:a4:06:6d:3f:99:e2:09:85:
                    e4:29:46:95:4f:ef:45:ac:13:2f:bd:ec:60:a8:88:
                    29:5b:77:b2:d8:81:0b:5e:8a:3e:bb:7b:3b:24:55:
                    87:57:ce:fe:e1:52:30:b0:d3:63:f4:39:33:f2:d5:
                    45:d3:96:cc:c3:9a:ca:37:a5:54:79:76:13:e4:77:
                    15:bd:7c:c9:c3:08:79:f4:4b:01:0b:25:b6:ba:6b:
                    64:2c:5f:2f:d1:af:95:5a:fc:42:63:9e:e4:e7:70:
                    43:21:08:ac:82:a7:91:0a:3a:f8:d6:62:46:f5:01:
                    ad:9a:5b:ef:99:66:b0:3a:56:58:a1:80:15:98:eb:
                    18:2f:67:2e:c1:8e:73:94:60:06:56:91:6f:90:0f:
                    7d:22:ec:02:b1:b6:97:05:ec:79:2d:5e:2c:b5:80:
                    a1:9f:4c:e7:ba:55:5c:a0:f2:71:bc:14:3a:d5:3f:
                    4e:c2:ef:99:dc:37:bf:b4:93:be:b8:d1:75:db:6f:
                    ae:29:4a:a1:c9:7d:ba:2e:97:b0:57:35:3f:f3:ae:
                    a4:e5:37:e7:d9:da:7b:f0:7e:ee:a6:89:45:eb:88:
                    48:cb:a6:2c:52:35:ca:35:00:fd:f6:67:87:4e:85:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:AF:61:13:E9:C7:5E:EC:D4:FD:CB:90:4B:30:B3:CE:C6:D9:67
            X509v3 Authority Key Identifier:
                keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2CB6A79C3C6411F098BE6F2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b7:f1:7e:fb:cc:5f:6f:d8:5d:7a:47:fc:8b:ac:c9:74:ec:
         6d:22:61:1a:9f:d8:85:65:40:5b:21:5a:38:85:1a:e7:57:89:
         09:24:a0:df:4f:8e:b4:27:d9:6d:3e:47:33:81:6e:d0:cc:4c:
         70:69:f7:7e:1d:17:68:b9:40:d1:33:82:75:b6:c7:f7:cf:77:
         2f:f3:57:ec:ff:39:90:51:66:7e:b6:06:48:0c:a1:be:96:3c:
         6b:fa:49:a5:b0:0d:3d:2b:a3:3f:00:d2:99:93:0e:c3:2a:7d:
         5f:80:5e:c0:c7:5c:19:75:04:06:31:80:6d:e5:39:91:34:b1:
         6f:fe:a0:dc:3e:ea:b1:55:b4:06:4e:fd:26:49:e1:24:cc:97:
         20:1a:0c:15:b5:6d:a8:b7:62:20:63:7b:58:cd:aa:11:79:ee:
         01:75:14:de:95:13:a6:2f:f3:78:37:96:f7:83:f5:0a:c1:95:
         2f:b9:83:59:6a:90:94:eb:e6:6a:49:de:af:9f:72:5e:1e:70:
         21:27:d9:cf:fc:b8:09:30:94:fb:92:8c:90:4d:41:23:72:8c:
         e1:05:e5:a2:96:17:1d:d9:f2:1d:c5:3b:db:e0:32:c2:e3:07:
         be:be:04:a7:a1:c6:0d:82:a3:a7:b5:a9:3e:79:59:9a:a6:7d:
         62:d6:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:51 2026 by rpki-client