Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa
File:                     899B070834D511ED99B1921FC4F9AE02.roa (raw, json)
Hash identifier:          LSg6DX28WaeWtngQ2Zn9zwO7f5A+q2ZTTUwMeuMJ6JY=
Subject key identifier:   F4:C8:C0:2C:EA:1D:FB:0F:EA:3B:BD:0C:47:01:3F:E7:26:8E:30:D3
Certificate issuer:       /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial:       02F2
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:51:14 +0000
ROA not before:           Mon 01 Dec 2025 00:27:09 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141723
IP address blocks:        103.146.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
                          rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
        Validity
            Not Before: Dec  1 00:27:09 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46e82-9d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:f5:4a:14:62:1b:a6:3d:9c:93:6a:22:00:
                    33:e7:9e:e5:7d:2b:78:76:d0:7c:1b:19:4b:c9:0d:
                    2d:7e:6d:6e:cc:7b:b8:b3:fd:ea:bf:a3:7a:f3:15:
                    1c:e9:8e:b2:27:b8:95:a1:3d:eb:86:73:a1:0f:5c:
                    ee:a3:6d:8a:c1:b5:6b:a4:e6:24:70:26:c3:7e:89:
                    bc:b4:ee:c6:51:51:33:4a:c6:46:cb:6a:35:aa:86:
                    1d:65:63:56:07:d5:a4:e9:dc:63:ff:b5:68:2e:1f:
                    ae:52:b8:82:43:91:0c:97:f8:c5:6f:f0:45:ae:97:
                    d1:e4:53:b0:df:11:97:c4:38:88:36:57:e5:03:29:
                    67:a5:a8:40:eb:55:22:f1:e6:a4:0a:48:72:99:8f:
                    30:d5:aa:08:c3:9a:02:61:52:5c:41:ca:af:39:91:
                    f6:76:8f:93:81:8e:a1:ea:d5:69:99:bd:c8:cc:70:
                    af:7b:fe:e4:29:bf:86:3c:9a:65:17:e2:1a:ed:3b:
                    a0:bc:84:82:4b:4a:2c:8c:c3:96:2e:78:e5:2b:fb:
                    ae:1f:50:31:21:15:10:de:79:63:70:bc:39:ea:ab:
                    57:14:78:33:6f:db:bd:81:7e:b0:1d:65:b6:45:88:
                    a8:6a:93:f9:28:2c:7a:b5:99:77:16:18:b3:55:88:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:C0:2C:EA:1D:FB:0F:EA:3B:BD:0C:47:01:3F:E7:26:8E:30:D3
            X509v3 Authority Key Identifier:
                keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ea:88:3c:d2:fb:0a:39:66:81:42:ae:14:7c:1b:a2:31:6d:
         cf:01:01:1b:cc:c2:65:d6:44:3f:da:97:f0:96:96:a0:8d:62:
         75:f1:4e:22:ed:95:48:bc:de:9b:fd:2f:a8:2d:aa:83:ca:a4:
         9e:b7:45:7b:e1:81:84:7d:eb:a2:15:89:8c:1c:1d:0d:e8:01:
         43:5c:bf:04:1f:6f:91:90:55:17:03:fb:20:d3:06:05:f2:c4:
         13:16:d0:7b:fd:64:ec:ad:c2:ad:76:1a:c5:e8:7b:e0:13:90:
         12:96:6e:0b:c3:5f:cf:51:9a:f6:58:3d:85:3e:e6:02:c4:16:
         bd:64:9e:32:8e:53:3d:e2:de:7f:57:f5:12:5b:91:28:48:df:
         ef:12:66:80:b6:74:25:d2:e5:ff:64:eb:09:75:c6:1c:0d:55:
         c1:b4:7d:f0:d3:8d:c2:61:88:85:bb:ba:fd:8c:8b:84:fa:f1:
         17:6a:60:23:b0:7b:12:6e:18:03:25:58:6d:a7:a8:18:9e:56:
         8f:57:5d:6b:20:74:55:1d:90:c6:ad:60:e4:09:87:0c:95:2a:
         44:9e:22:b4:e3:1a:a0:c5:b0:23:77:ae:96:c8:82:de:5b:b8:
         be:f2:99:39:94:b2:86:c3:bc:05:d1:78:41:2d:e7:37:7e:09:
         b5:29:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:09 2026 by rpki-client