Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa
File:                     7C321BDEA55711EFB8317F6BC4F9AE02.roa (raw, json)
Hash identifier:          0iiaisEVoFgTOH2CCzbwqWu/DbOaNizKGC5fWfvGWtw=
Subject key identifier:   88:09:73:CC:9F:3E:E9:83:1B:FE:63:C8:5D:D7:FE:0E:EF:5B:00:3A
Certificate issuer:       /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial:       F9
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:11:53 +0000
ROA not before:           Tue 27 Jan 2026 05:27:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139899
IP address blocks:        103.146.226.0/23 maxlen: 23
                          2001:df2:7280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
                          rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
        Validity
            Not Before: Jan 27 05:27:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41ef9-c463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ba:52:c4:ff:83:bd:4e:00:83:a2:a8:0d:4d:
                    4e:0b:4f:d1:ba:cd:08:b2:12:42:b1:5a:1b:de:a4:
                    36:a3:17:c1:da:96:b5:8f:ad:cb:65:08:1e:43:3b:
                    fe:bd:73:25:8e:55:34:89:b9:45:b0:9f:00:e6:5f:
                    d3:4d:93:b7:1e:ba:56:df:a7:7a:ac:80:33:31:d8:
                    40:0b:81:78:61:91:f1:05:db:e0:42:07:95:85:ec:
                    21:85:8c:e6:06:72:9f:62:59:3c:34:21:65:de:e6:
                    ad:56:a4:37:a3:c6:ce:e5:e3:05:da:b7:00:e1:91:
                    22:2b:a7:e1:68:62:50:c8:b0:b1:d1:19:4e:c6:66:
                    06:7c:46:68:59:0e:56:a2:62:fa:42:ac:d6:90:20:
                    ec:ea:cc:cb:1e:ae:02:13:26:44:6d:3c:40:c0:ce:
                    20:15:77:e9:27:e4:cb:ce:2c:36:71:61:03:16:57:
                    7b:85:d0:81:e1:b2:ce:9a:2b:0e:64:23:88:9f:e5:
                    f5:51:ce:f1:36:58:b0:9f:4a:a3:a8:19:1e:53:08:
                    55:64:ea:d1:fc:4b:2a:d1:80:0c:64:2b:a2:1a:2d:
                    d0:2b:cc:5d:a6:0e:0c:19:b2:55:c1:a6:f5:33:32:
                    a7:de:e1:fe:46:cf:f4:0e:a4:4a:bb:00:c0:19:f2:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:09:73:CC:9F:3E:E9:83:1B:FE:63:C8:5D:D7:FE:0E:EF:5B:00:3A
            X509v3 Authority Key Identifier:
                keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.226.0/23
                IPv6:
                  2001:df2:7280::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:bc:49:63:b2:36:50:fa:fe:8f:fd:a2:4f:60:f0:f8:8a:58:
         a7:f5:18:f0:5c:59:dc:a5:e2:67:c0:14:e7:96:a1:e0:b3:1d:
         e9:59:12:f5:4b:8c:db:05:8f:28:0d:a6:7b:64:0f:9f:a4:3d:
         90:6c:34:ad:29:e1:dd:04:e4:f7:92:4a:ef:e9:1f:40:b0:5a:
         84:5a:9d:ff:cb:c5:66:2f:8c:dd:d5:7c:44:4b:0c:17:18:2a:
         71:09:ec:6b:24:22:60:85:53:07:ae:9d:24:e1:7e:aa:d3:41:
         c6:c3:bc:e8:38:4f:c3:e0:21:33:75:f1:c8:4d:1f:62:a8:44:
         f3:e8:21:d4:01:03:9a:53:41:c3:b7:d0:7d:0b:61:e9:03:8e:
         42:2b:59:c5:6d:d8:48:04:06:7a:76:b8:ae:ce:59:77:91:f8:
         64:7a:5f:12:0e:b5:10:41:3c:0b:ae:65:8c:65:f2:83:79:cd:
         3a:b0:f1:ca:d9:1c:57:07:d5:8f:a6:ad:c2:90:69:82:43:c1:
         7f:98:48:9a:8b:cf:5d:b4:0a:07:cb:1b:98:43:d4:4b:ca:0c:
         81:a0:49:74:e7:70:1c:24:5e:56:65:1a:a8:85:09:fe:19:ab:
         f7:9c:89:f2:dc:e9:d1:24:76:9a:dc:97:01:4e:21:50:63:77:
         e5:9d:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:37 2026 by rpki-client