Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/F67B28D0B86811EFB4FB3552C4F9AE02.roa
File:                     F67B28D0B86811EFB4FB3552C4F9AE02.roa (raw, json)
Hash identifier:          nmjI7Wi2B8aFQIAn+8Mjo7gbvju8oLY+EN7Rnxgggrw=
Subject key identifier:   16:65:FC:55:A5:3A:91:AC:0B:3C:88:BC:C9:2A:E7:CE:A1:A6:F0:F3
Certificate issuer:       /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial:       0E14
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/F67B28D0B86811EFB4FB3552C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:09:31 +0000
ROA not before:           Thu 08 Jan 2026 18:14:51 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150774
IP address blocks:        103.82.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
                          rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3604 (0xe14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
        Validity
            Not Before: Jan  8 18:14:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a472cb-4437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:64:63:2d:a5:26:17:1e:0a:5e:28:17:b5:
                    c3:9d:05:40:42:94:25:5f:2e:ef:c3:6a:aa:34:27:
                    af:3a:80:00:75:8b:09:6d:14:d9:4d:21:a7:1b:f9:
                    53:76:9d:9d:dc:15:b8:50:d9:52:f4:89:e9:52:97:
                    5c:4e:2a:40:08:18:08:34:f0:b5:f0:c1:8b:ca:d1:
                    17:28:5c:8f:40:dc:cb:52:ed:6f:25:d5:58:cd:2d:
                    e8:f6:c5:53:6d:83:9b:38:9b:ea:63:56:0d:50:df:
                    f3:04:47:4d:a1:e9:14:80:20:6d:2e:cf:26:15:df:
                    d6:c7:d3:6d:d4:4d:e1:7a:63:49:26:27:7d:6e:68:
                    48:48:aa:52:c4:6b:27:91:36:94:2f:e0:68:63:77:
                    25:ff:ad:07:2c:52:4f:fd:1f:e9:e9:39:40:95:89:
                    20:d2:8f:2b:68:5c:4d:55:7e:49:00:0f:fc:86:05:
                    a1:96:11:9b:1a:2b:a9:b0:c5:4a:53:30:1d:76:21:
                    3e:0f:c1:88:fd:1f:9c:ab:cc:a8:99:c2:f6:89:de:
                    d4:fd:34:43:b1:27:08:af:5a:19:95:bc:81:4b:69:
                    24:38:de:0f:44:ee:c3:eb:ca:5e:f5:f7:e8:91:bb:
                    23:55:d5:41:59:f9:db:d0:02:59:b8:14:e7:b4:9f:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:FC:55:A5:3A:91:AC:0B:3C:88:BC:C9:2A:E7:CE:A1:A6:F0:F3
            X509v3 Authority Key Identifier:
                keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/F67B28D0B86811EFB4FB3552C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:a1:a7:1b:b6:b3:50:2a:0a:77:1e:a8:56:b4:93:94:6d:af:
         d6:34:22:6a:1f:a7:e5:42:ac:1b:e6:c0:0f:cf:6a:a0:80:29:
         89:3c:79:82:f4:5e:3d:1f:e7:9a:5c:f1:a5:e5:d1:82:1d:06:
         f7:17:fd:42:ca:00:68:e8:52:67:ef:04:15:be:40:bc:4c:7d:
         81:63:d2:50:5b:05:8a:8a:e2:d8:c8:ad:fb:1b:ba:28:de:5f:
         cf:b0:26:fe:e6:8a:77:b9:94:8b:7d:22:0a:23:83:8d:f1:a7:
         a7:42:ac:a9:9d:bc:65:ef:ed:1a:07:a9:02:62:22:2a:3c:57:
         d2:9c:7b:98:d9:eb:bc:4a:87:5c:15:a7:d6:57:14:94:2c:be:
         5f:b0:99:ee:ed:8a:e4:f3:f5:4e:5f:1d:d7:2a:0b:7b:26:2c:
         1f:e4:2d:2d:79:96:27:dc:dc:f2:18:a5:31:af:d4:b7:e8:4d:
         37:3d:e6:af:7b:7d:18:5c:21:6f:49:a8:5f:6a:c1:a2:b0:6b:
         68:5c:d9:12:8c:7c:42:5c:42:e3:e4:1a:48:92:96:8e:41:bc:
         13:2d:d5:d1:d5:4c:bc:20:6e:ab:52:63:00:c1:32:65:da:3d:
         43:73:33:b7:b4:85:dc:b5:d2:27:45:7a:4e:b9:3e:de:b3:23:
         a8:8c:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:02 2026 by rpki-client