Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa
File:                     B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (raw, json)
Hash identifier:          co751clHp1NAb5mO2U3XRekaid6SQMW74TG1BnFabYU=
Subject key identifier:   1A:6C:61:00:A7:9F:6B:BB:A6:78:FF:E7:97:F7:6B:E8:5E:C2:8A:C6
Certificate issuer:       /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Certificate serial:       0B13
Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:46:52 +0000
ROA not before:           Mon 10 Mar 2025 20:09:22 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     54600
IP address blocks:        103.149.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl
                          rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2835 (0xb13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
        Validity
            Not Before: Mar 10 20:09:22 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a4272b-3963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:6e:8d:23:50:df:01:49:11:c9:d2:e3:d1:
                    6b:dd:3c:7a:94:3e:27:4a:42:37:af:ea:40:e7:9a:
                    47:d1:7e:2f:05:a1:8b:11:4a:c8:67:64:75:8e:9d:
                    ae:0d:9b:f9:fd:09:ae:ed:05:65:78:61:d3:90:31:
                    89:2b:1f:e1:5f:65:e9:d6:d3:a6:b5:ab:4a:b5:f1:
                    4b:28:0d:64:54:f5:b6:77:7d:6d:61:34:c2:c8:ae:
                    5a:d7:64:cb:19:7b:49:42:0f:aa:45:20:c0:38:ce:
                    7e:b2:6f:52:71:b9:72:4f:9c:b4:24:a5:a9:61:2a:
                    0a:bc:8b:ce:6d:93:4f:63:c6:18:31:d6:f8:f4:66:
                    46:1d:9f:0d:c4:15:fe:86:08:18:83:24:3a:8a:e0:
                    42:a9:4e:19:80:35:d8:c3:98:d4:2d:6c:03:26:fa:
                    7e:6f:c4:b8:44:fd:f8:75:f8:fd:c2:ce:c8:ab:75:
                    60:0c:ba:69:53:6e:cb:57:eb:01:9f:2f:fe:70:70:
                    9f:fa:e5:dc:a4:3a:89:9f:bb:64:62:4a:5d:2d:fb:
                    df:bb:53:0f:6c:bc:25:45:fb:e1:87:49:c3:d0:e7:
                    ce:0b:dd:58:e6:ed:ec:bc:93:b7:58:3e:b9:f4:34:
                    b7:03:dd:2c:c4:07:86:ad:5a:2f:dd:42:d6:44:66:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:61:00:A7:9F:6B:BB:A6:78:FF:E7:97:F7:6B:E8:5E:C2:8A:C6
            X509v3 Authority Key Identifier:
                keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:7b:a8:50:43:21:19:a5:22:30:41:a1:99:fe:7c:d7:f4:9d:
         d2:09:b3:63:b7:31:c0:ce:d7:10:5a:cf:51:17:f9:ec:f5:28:
         eb:07:fd:e1:29:a0:2f:a1:bd:1b:60:57:6f:d4:45:dd:2f:e3:
         b1:1b:ee:15:8e:27:f4:8e:47:54:d7:02:33:c1:96:e3:99:1e:
         e4:2b:4d:33:ac:c2:70:9e:f9:13:40:e7:ae:b8:a3:eb:9c:7e:
         8b:70:f8:f2:c1:50:91:d3:b5:c6:b7:26:56:95:8f:5b:8a:0c:
         ba:a1:1b:e0:ad:ec:80:44:a4:44:25:c7:f9:2b:3b:9f:5b:1a:
         39:7c:5b:f0:cf:9b:13:49:14:b6:d3:fc:fc:68:f5:93:a6:13:
         e3:9a:a7:af:f4:6c:c2:9a:48:7e:0c:bc:20:ed:75:20:19:9d:
         f9:48:53:66:db:5e:3f:ee:f2:b5:1a:86:de:9e:f4:8a:ac:ce:
         e6:20:a2:60:c4:47:ab:a7:6e:1e:20:25:80:ff:be:a5:90:b3:
         0f:0a:98:e8:cb:f6:3f:6b:5b:82:38:93:96:1a:43:f6:e5:cd:
         b8:0b:20:41:ed:bc:19:7e:d6:1f:57:3b:7a:a8:40:78:34:5e:
         27:85:59:ec:bf:30:62:34:8a:2a:ae:31:e0:63:7a:3e:5d:7e:
         b6:66:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:56 2026 by rpki-client