Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa
File:                     78550A2608FE11EAA003E778C4F9AE02.roa (raw, json)
Hash identifier:          QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=
Subject key identifier:   9E:3C:EE:F2:A5:A1:20:8C:47:C5:1F:A6:E0:3B:B3:F1:D9:1D:66:F8
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0CBE
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:41:32 +0000
ROA not before:           Sat 24 Jan 2026 18:15:26 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137415
IP address blocks:        103.107.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: Jan 24 18:15:26 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4501c-02af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:44:8f:f9:29:7d:82:b1:f5:f9:b0:c9:14:
                    42:da:a7:2a:26:e9:5a:fa:52:b9:e7:91:f6:82:1c:
                    9f:30:81:15:44:7e:7a:a5:04:ce:ca:27:5d:9f:31:
                    42:7d:8a:4b:f2:d8:a2:f9:22:2e:15:86:f2:54:a4:
                    b2:54:df:00:46:c3:e9:03:ca:d9:ed:de:8e:8c:f1:
                    32:6d:e1:c9:dd:d8:c0:0f:b6:05:2c:68:31:91:cb:
                    bd:60:9e:42:1a:12:d3:ca:aa:c9:0e:5c:4f:1d:eb:
                    b8:7c:31:48:32:00:70:58:e0:34:e2:cb:be:d0:21:
                    ac:35:15:4d:9b:0a:05:45:92:32:7c:94:0f:01:29:
                    ab:e2:93:5c:f8:1d:73:b5:05:30:2d:65:04:9a:f6:
                    c8:63:37:52:c0:05:77:53:36:87:b2:59:65:ba:bf:
                    c3:f4:71:a5:e4:05:7a:d0:6b:8f:06:f7:6d:34:5f:
                    52:ee:4d:ab:f8:b3:94:5a:d8:c2:57:1d:54:7b:f3:
                    16:92:37:7a:54:9f:9b:6c:20:1f:70:26:1d:5d:f1:
                    b5:eb:4f:00:d7:13:68:b8:bc:7d:08:c7:19:b8:c5:
                    87:14:2b:de:9a:be:e4:6c:9f:c8:36:ed:16:24:98:
                    38:47:53:e8:41:88:3a:7d:77:6a:c0:b0:80:25:dd:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3C:EE:F2:A5:A1:20:8C:47:C5:1F:A6:E0:3B:B3:F1:D9:1D:66:F8
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:04:39:e6:b0:f5:bd:ee:94:3e:ad:f3:4f:ae:25:54:e0:ba:
         39:f3:05:17:1b:a0:f6:39:a2:9a:6a:fc:2f:98:59:13:dc:cb:
         1c:c5:77:22:58:07:a4:24:d2:cd:c5:0f:f6:bf:7a:40:f8:10:
         46:3d:4d:17:09:5e:1f:3a:d3:37:c6:15:65:45:be:fc:c9:c8:
         d3:d0:2d:a3:6e:bb:b7:ec:a7:f0:6b:37:6e:fc:fe:38:d6:0f:
         b2:79:c0:8e:90:6a:b6:31:a4:c0:c6:d3:33:e1:50:e0:e7:09:
         02:49:77:93:87:c3:f8:7a:56:80:15:21:45:91:31:db:72:d6:
         f5:33:df:67:05:2f:f5:c1:cc:82:36:4e:61:95:3a:92:f9:c8:
         c3:ae:c4:31:bc:ed:f2:85:e8:0d:63:ed:b4:17:de:9a:91:74:
         35:c7:6b:86:56:2f:1f:8e:70:9c:d9:0e:a7:fe:61:9f:63:85:
         03:7a:01:62:ca:ff:8d:25:7b:71:9b:34:0d:7d:23:4d:24:be:
         54:38:b1:88:35:7b:ba:a1:e5:d1:f3:f8:f2:40:22:a2:f0:af:
         9c:1d:a7:ff:57:e4:46:a1:12:2b:d3:22:05:d4:88:ca:e0:10:
         5b:ff:cf:53:11:23:37:7b:53:fe:2e:5e:d5:f9:8a:fc:1d:95:
         1f:29:7d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:32 2026 by rpki-client