Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/390C84E8CD3811F09B08A83DC4F9AE02.roa
File:                     390C84E8CD3811F09B08A83DC4F9AE02.roa (raw, json)
Hash identifier:          AiSldAMJ7Peh5Ix5vWF81oIDs571bEQr597s6F8mkzA=
Subject key identifier:   B8:45:56:4D:DD:97:39:61:E0:80:FD:9E:D1:B0:B9:63:1E:6B:A9:63
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       10B8
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/390C84E8CD3811F09B08A83DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:21:16 +0000
ROA not before:           Sat 29 Nov 2025 15:29:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134186
IP address blocks:        103.138.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4280 (0x10b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Nov 29 15:29:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4758c-48b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:9a:1e:64:d7:90:d9:55:a3:5d:84:c2:36:
                    67:e2:eb:cc:85:d4:13:cb:e4:f9:bf:47:21:ae:eb:
                    ea:d8:22:9c:e4:cc:dd:19:90:33:57:40:f5:41:63:
                    5d:09:10:94:7c:c9:6f:3f:2b:35:d0:83:32:7a:51:
                    4d:3b:07:48:41:ce:b4:33:a3:0c:9b:75:00:a4:ae:
                    9e:84:11:b2:4e:b1:0a:42:39:0f:68:81:e7:54:54:
                    9b:00:2f:4f:67:a2:36:85:ac:3e:90:59:db:3d:26:
                    e0:40:b1:80:fa:23:85:bb:2d:cc:6c:ce:49:9d:97:
                    18:5d:5e:83:dc:03:b1:84:df:61:6c:f2:a1:d1:8c:
                    09:a5:7c:73:1d:99:0b:31:0f:ad:18:b7:a2:27:74:
                    12:f8:7e:ea:b4:15:e5:51:12:73:2f:0e:d3:fa:72:
                    d8:8d:cd:58:53:77:44:5c:dd:bb:95:55:82:04:63:
                    a4:ad:29:7c:35:0f:d9:82:ff:0c:a9:14:fa:87:08:
                    87:23:c9:6b:b3:60:87:ef:99:37:d3:60:c7:e3:b0:
                    f0:fe:ec:53:62:1a:dc:65:5e:e9:9a:a8:19:6d:42:
                    90:9a:e5:ab:ce:1a:fc:92:3c:6e:d6:e7:a0:ae:8e:
                    d8:d6:9e:5f:bd:b5:f4:61:b1:21:c6:69:26:68:27:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:45:56:4D:DD:97:39:61:E0:80:FD:9E:D1:B0:B9:63:1E:6B:A9:63
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/390C84E8CD3811F09B08A83DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:dc:71:16:1b:3d:a3:65:41:42:18:6f:91:db:80:33:fd:57:
         11:a6:16:68:c6:02:c6:52:a0:7c:bd:86:25:57:d1:1f:ab:8c:
         e3:01:72:56:e9:14:11:f3:a7:5a:6d:4b:e1:ae:c1:17:68:4d:
         2d:82:05:2c:2e:93:66:72:a3:46:61:c7:25:e6:b1:c4:de:22:
         67:39:33:93:3f:79:4f:17:c7:75:85:29:79:7f:82:d6:a4:7b:
         8f:4f:13:62:08:37:79:8a:d8:ee:1c:14:cf:16:54:f7:70:ec:
         22:64:ab:8f:c9:f6:4c:eb:6f:56:2c:50:4f:eb:f5:46:69:cb:
         32:3e:4f:06:27:f8:b4:af:67:a1:fe:a2:9f:79:ca:79:68:f3:
         3f:ac:80:95:9c:8e:66:75:a7:9f:d4:2d:c2:6d:e5:f1:42:c6:
         8a:39:2e:87:4c:df:e0:e4:a0:38:82:89:37:cd:e6:4c:05:a8:
         9d:b7:77:7e:0f:3c:70:63:c0:fb:09:32:11:89:92:f5:67:f4:
         f7:3f:1c:c3:9f:e2:4e:b1:95:65:5e:e1:e9:89:df:8d:b6:ce:
         1e:31:52:e0:64:c5:ad:2f:b2:48:4d:41:da:90:aa:e1:f8:1b:
         f7:41:24:6f:98:e8:9d:64:4c:03:8e:61:e1:93:60:8b:92:ba:
         a7:6a:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:05 2026 by rpki-client