Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
File:                     8C5D4FF4766511EF8820F844C4F9AE02.roa (raw, json)
Hash identifier:          R1p0DVRofqdeH6QxATqgcU+e98QOUDyy8PCaiyWmtec=
Subject key identifier:   85:94:B0:03:28:D9:10:58:38:3F:41:70:55:83:64:B2:FB:FE:51:E4
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       0424
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:00:05 +0000
ROA not before:           Sat 05 Apr 2025 01:06:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     45250
IP address blocks:        103.183.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: Apr  5 01:06:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42a45-15c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:58:97:8a:79:a0:49:39:99:e4:99:52:dd:ed:
                    58:56:5a:42:15:36:14:6e:41:f5:d2:da:fc:6f:99:
                    d6:ed:72:a1:09:6a:c0:8e:30:a7:93:61:d9:29:71:
                    ab:9d:c0:ea:dd:15:c0:4e:b3:0a:54:5d:a9:af:b7:
                    4a:6f:15:67:8c:7e:a8:1e:fd:c1:10:ae:55:c5:40:
                    cd:1a:fb:25:6c:04:aa:a4:d1:db:c3:3b:b7:db:b0:
                    54:07:86:ab:17:6c:da:39:09:bc:c4:5b:0c:f3:de:
                    80:71:4b:f0:5b:2a:a9:01:b0:95:b5:58:f1:41:36:
                    e2:33:83:0f:6e:99:b5:b1:0c:8c:cc:d8:e0:2d:fd:
                    86:44:ed:85:29:c3:12:f2:2f:b0:1d:5a:2d:22:7d:
                    1f:8e:4e:7f:27:e6:df:b0:c2:20:32:f0:65:33:c5:
                    ec:a8:84:e1:7f:57:45:f4:78:7b:a2:c7:7e:2c:fa:
                    71:42:03:88:8a:63:7d:70:0e:9f:c9:6d:73:12:f4:
                    48:e1:81:50:79:2a:a4:a5:a3:51:91:af:72:62:bf:
                    92:80:19:a3:8b:e6:22:a4:97:76:01:9e:29:0b:ec:
                    7f:ca:d0:78:0f:eb:87:c8:1e:3e:c7:44:62:6e:61:
                    ad:73:2f:51:d8:ac:34:21:b3:0d:3d:5a:fd:e1:de:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:94:B0:03:28:D9:10:58:38:3F:41:70:55:83:64:B2:FB:FE:51:E4
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:ad:05:ad:2e:c9:9c:0a:34:c5:7a:ea:58:6e:0b:66:93:
         6f:af:48:85:4a:f6:31:a8:20:4b:dd:28:5e:81:42:1a:54:2a:
         a8:15:04:a0:52:a4:c5:bf:b9:e0:42:ab:e6:0a:0a:e2:24:9a:
         46:a0:21:c8:84:a0:83:82:1a:a4:32:3f:47:97:98:18:e8:4a:
         01:0e:d1:c8:5a:09:d1:16:76:f7:35:db:ee:ff:f5:19:22:16:
         24:75:d3:33:9f:7e:f6:42:ab:cf:b0:71:45:54:de:be:3a:48:
         ee:3a:7a:fe:2a:d6:0c:e2:81:40:f5:f8:d7:a6:c6:5a:7b:5b:
         af:84:55:7f:65:42:fd:84:5c:d1:3c:80:0a:a3:ae:56:e4:3c:
         8e:49:d0:fa:aa:b0:f1:ed:73:79:7f:71:ab:4a:2a:7a:48:fd:
         0e:49:01:32:39:e1:f5:fc:c5:93:7a:df:d3:bd:90:d5:34:b8:
         c4:7e:03:20:a6:4d:65:cb:25:0f:0b:af:ff:64:ea:b9:46:13:
         92:8d:d0:aa:af:44:6f:b2:ff:77:69:97:5c:d7:25:ff:4e:2f:
         6a:a8:d8:da:f9:a5:c8:37:dd:25:9a:b8:f5:b2:77:fa:eb:1d:
         5d:91:51:30:94:50:a8:14:3f:66:19:5e:8e:8a:2b:0e:6c:74:
         84:be:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:25 2026 by rpki-client