Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/C14E20B6B22511EFA8BCE16EC4F9AE02.roa
File:                     C14E20B6B22511EFA8BCE16EC4F9AE02.roa (raw, json)
Hash identifier:          Fepdq+V83ixXVbOQsCG8E8Is2e9E4BLsSWrOJhnPvw8=
Subject key identifier:   46:6E:79:9B:2C:30:B9:EA:9A:9D:48:2A:7C:E0:08:AE:9D:04:B8:8D
Certificate issuer:       /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial:       0E13
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/C14E20B6B22511EFA8BCE16EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:09:30 +0000
ROA not before:           Thu 08 Jan 2026 18:14:50 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150178
IP address blocks:        103.82.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
                          rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
        Validity
            Not Before: Jan  8 18:14:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a472ca-edd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:a6:4b:af:06:1e:ab:04:06:2c:4a:7a:d6:
                    29:13:73:e6:18:a9:8c:b5:09:9d:43:b4:b5:33:5d:
                    28:cf:29:ef:1c:3a:88:41:48:58:f9:24:f9:a2:3c:
                    21:e2:8e:84:9f:d0:09:1e:a4:e7:bd:86:f0:ab:60:
                    80:69:8e:f6:ad:44:47:28:c7:cc:24:f4:27:e6:34:
                    f3:a7:f0:51:5c:f8:8f:f5:a7:4e:e1:a9:64:f5:8d:
                    e4:54:f9:60:1b:45:7c:fa:44:40:fb:40:33:29:a2:
                    ad:8e:d2:e8:f3:28:46:3f:57:45:29:1f:61:42:fe:
                    ee:43:99:5c:9c:33:e8:a7:f5:a7:a7:54:63:ce:e7:
                    19:a5:c1:df:43:f1:d4:c0:fa:90:e8:34:9e:41:a5:
                    cc:59:b6:a0:ea:b0:96:0b:95:e7:93:05:27:d7:93:
                    4c:cd:82:57:e2:82:8c:32:37:49:aa:e9:f7:78:44:
                    f5:f0:8e:78:4a:e3:92:e6:80:15:42:3e:06:e3:e7:
                    0d:c5:11:2c:a8:64:16:0d:f9:96:d2:f7:c8:64:66:
                    5b:55:e0:62:49:07:24:e4:77:32:18:b7:90:f0:c6:
                    64:7b:c0:8c:6f:1f:d4:d0:ec:c8:b0:2c:83:f6:f2:
                    fb:0e:ed:c4:c5:63:c5:00:4d:b8:9b:80:13:80:78:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6E:79:9B:2C:30:B9:EA:9A:9D:48:2A:7C:E0:08:AE:9D:04:B8:8D
            X509v3 Authority Key Identifier:
                keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/C14E20B6B22511EFA8BCE16EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:52:38:7b:41:9b:79:87:0e:14:2a:17:7b:95:53:a4:f1:
         55:4b:e8:b8:27:4b:b0:c5:30:6b:89:ee:05:59:6e:e5:52:80:
         00:20:a6:4f:51:79:cf:e0:62:ea:39:39:55:2f:ba:bb:5a:58:
         65:cb:b1:90:8f:e4:b0:aa:f0:bb:0a:43:5f:a8:20:d6:db:99:
         ae:57:67:bb:ba:69:6f:c3:ec:95:63:f9:93:29:f7:1b:d8:42:
         1c:ec:5a:c8:f6:bd:cc:a2:39:32:06:bc:68:2f:ab:f0:5c:58:
         01:e1:ae:0b:45:89:90:4c:43:2a:90:2d:0a:93:6b:7e:59:54:
         2b:5e:26:bc:01:4c:79:a9:e0:99:bf:a1:65:0a:73:be:80:f5:
         01:4c:b8:dd:c6:ea:55:06:4a:cf:65:db:23:f8:d8:f4:15:b2:
         6e:b0:1d:9d:bd:e8:e4:e9:cd:dd:b2:5b:5b:08:f4:13:24:c3:
         d0:9c:15:56:f8:fb:85:c1:95:84:1a:27:dc:2e:f7:b4:03:bd:
         1d:c8:84:19:fc:37:98:fd:1b:95:0f:3b:6c:04:34:29:28:b8:
         d9:3c:28:ab:0d:ee:c0:8b:6b:ad:da:bc:c3:aa:97:47:2f:80:
         1d:f3:45:cb:7e:32:33:17:e4:89:42:7c:66:59:24:30:17:ac:
         bb:e1:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:59 2026 by rpki-client