Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
File:                     D42E171A97E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier:          ld4bwSTH7DNmQDUsJ/AFf4fZeBG84QqW9207f4dTJjE=
Subject key identifier:   13:88:4A:67:74:72:3B:3C:4E:E8:09:6B:C6:15:58:09:01:DE:63:2B
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26E0
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:40:17 +0000
ROA not before:           Wed 31 Dec 2025 18:14:43 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     4294955555
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9952 (0x26e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Dec 31 18:14:43 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a48811-f198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:59:20:90:6d:4f:c0:1a:a9:78:a0:0f:54:
                    35:5e:d9:76:d5:13:62:33:21:a5:c7:62:e4:f4:19:
                    71:77:1e:b6:8e:9a:90:87:a9:53:49:33:62:38:7c:
                    f5:f0:c9:ee:e3:a1:5f:a5:ac:c4:f3:a5:97:2e:13:
                    53:98:f6:ce:5d:01:15:82:7b:62:13:41:f4:1b:55:
                    bb:c3:ef:ac:7c:71:67:2b:56:a1:68:e4:83:55:bf:
                    cb:f2:63:7d:aa:d3:64:c8:e6:e2:ad:37:d3:db:f3:
                    10:c1:53:2f:19:ec:c0:e9:5c:2e:bb:90:99:e3:a9:
                    e5:24:be:33:f9:7a:ea:3c:1e:2f:c2:92:c4:89:0a:
                    53:71:75:41:e9:93:45:89:05:de:21:6f:ff:7b:35:
                    c0:7f:54:86:d5:12:c3:5f:03:79:0e:07:aa:01:50:
                    52:3c:bb:60:79:fa:7c:60:c7:d5:2f:c4:a5:39:86:
                    67:bb:4e:a5:cd:dc:73:2d:1f:30:05:17:e1:9a:e5:
                    9f:2a:5c:44:9a:86:e3:1c:6b:07:f5:05:69:4b:39:
                    ea:1d:a9:f5:13:31:9d:23:5b:57:56:1d:9c:0f:ea:
                    61:41:66:d4:ca:e3:ba:f8:ad:32:f1:01:c5:92:71:
                    1d:33:bf:60:02:38:9e:92:dc:3d:87:cd:83:78:33:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:88:4A:67:74:72:3B:3C:4E:E8:09:6B:C6:15:58:09:01:DE:63:2B
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:67:8e:32:cd:7c:ae:85:55:68:eb:91:24:09:fd:67:5f:5b:
         13:9a:40:57:c5:fb:c7:40:a3:b7:fd:71:b7:7f:d6:11:9a:2d:
         2d:4b:28:26:3e:44:a8:a7:24:77:78:65:46:a9:6c:ee:cc:d5:
         d2:b7:b9:d1:36:28:9f:69:67:20:c3:5b:2f:67:5b:e2:f7:12:
         ce:4b:f5:09:41:e8:85:98:0e:f1:f9:b9:2c:8f:74:00:8e:4e:
         cc:ab:6d:e2:6e:24:58:d8:11:ef:54:3e:8f:c5:0e:de:13:43:
         3f:e4:48:89:63:8a:06:8a:d4:c0:0d:59:2e:dd:f0:a3:c8:6c:
         1a:71:9c:4d:74:a3:c3:da:a2:62:40:56:02:f1:f9:8f:ae:43:
         49:f1:35:f0:36:44:a9:45:19:7b:18:d1:0a:59:65:c9:14:29:
         7f:e3:f6:9f:dc:5e:27:b6:5a:c5:97:e1:f6:4a:01:2f:d1:00:
         94:68:3c:37:f8:cd:bb:48:0a:5e:6d:86:4a:7c:7c:e9:ef:5b:
         6b:9d:0b:ce:36:68:c0:35:4f:74:59:10:de:77:00:44:4f:c3:
         3b:44:8f:03:99:7f:91:91:47:5d:32:1c:71:eb:4c:92:2b:af:
         07:da:9a:a1:28:cd:c7:96:87:a8:79:cc:3d:40:6b:b8:8f:02:
         f1:5b:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:38 2026 by rpki-client