Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/D58286CA1F9D11EDA5DD9842C4F9AE02.roa
File:                     D58286CA1F9D11EDA5DD9842C4F9AE02.roa (raw, json)
Hash identifier:          GLugrqwwQZmmzbcCNZXH5Ie9zKy10oZO0jW/+Bq1pvo=
Subject key identifier:   EE:9C:F3:45:B5:FC:7D:62:39:42:39:7A:8C:A0:2E:AA:39:9B:20:9C
Certificate issuer:       /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial:       02F1
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/D58286CA1F9D11EDA5DD9842C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:51:13 +0000
ROA not before:           Mon 01 Dec 2025 00:27:07 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140381
IP address blocks:        103.146.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
                          rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
        Validity
            Not Before: Dec  1 00:27:07 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46e81-bad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:af:46:da:fe:e8:9f:af:20:f4:9b:7c:a1:
                    fe:a7:33:6e:af:51:bc:9e:6a:3a:ba:68:12:a6:fa:
                    84:12:ba:d8:b4:d5:ec:bd:bb:ca:d5:32:b2:11:9a:
                    50:ef:40:83:d9:8b:bf:53:60:0c:a6:67:f0:fe:2e:
                    0e:bd:10:62:16:bd:4c:bb:98:0f:69:e6:cb:65:f2:
                    24:80:4c:e2:25:8d:40:a5:fa:3f:dd:f3:18:2c:73:
                    84:19:f2:a1:b0:71:3c:b6:95:69:7e:65:87:e4:32:
                    7e:06:18:f8:15:0b:23:69:83:a5:69:b2:0b:7c:38:
                    88:05:37:6e:f2:14:31:a7:f9:b6:81:3e:b5:a6:a5:
                    3d:3f:b5:53:9d:da:b8:9d:4b:fa:70:1d:82:6f:4f:
                    c8:a1:29:73:c6:cd:15:79:e6:f1:a6:10:24:ed:9d:
                    de:1c:a4:e0:a1:83:8c:4e:b4:75:5f:47:a1:83:9c:
                    a6:45:8b:63:1e:dc:f0:4c:42:5f:27:57:18:14:0b:
                    5a:c3:02:41:3b:23:1d:3a:84:86:0e:a1:e4:2b:02:
                    81:ef:ba:9d:df:c5:d4:eb:2b:c9:a7:a2:c4:6a:c2:
                    f8:39:4a:8f:25:6d:d8:c7:c4:db:99:51:0b:09:96:
                    8a:99:7b:da:87:3b:0d:0e:1d:32:63:7b:3e:1d:25:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9C:F3:45:B5:FC:7D:62:39:42:39:7A:8C:A0:2E:AA:39:9B:20:9C
            X509v3 Authority Key Identifier:
                keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/D58286CA1F9D11EDA5DD9842C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:38:1e:e6:57:d8:a1:f0:43:9e:a8:c8:c0:5e:e9:75:85:b0:
         b9:ad:2f:38:68:07:61:24:46:f0:65:39:c6:75:01:14:2d:7d:
         b0:ff:a2:d3:fa:0c:3e:90:b9:ec:eb:ce:2b:82:29:78:0a:ec:
         9f:cb:8d:ed:d2:f2:b0:ea:91:29:cf:df:a2:a4:20:ff:df:69:
         18:e5:b0:91:23:de:dd:4d:96:c7:b1:b7:95:60:58:cf:05:d5:
         2a:68:f7:6a:bf:33:59:38:ac:9b:16:18:0c:52:fa:c4:46:2b:
         55:ed:ae:e1:0b:c4:45:d5:1e:fb:0e:1f:52:86:cd:0d:b9:99:
         30:10:6c:a3:ad:c8:2d:13:48:79:c0:cf:56:39:41:e5:fd:ce:
         48:a7:8f:9d:c3:40:0a:31:fd:74:20:86:a7:4a:12:7d:04:8c:
         69:da:24:c9:ea:03:b1:92:a5:cb:6b:f3:f9:9a:b4:4a:af:d5:
         3c:bb:04:71:e6:d9:a8:73:a7:40:05:2a:7d:40:b7:e5:10:e4:
         d1:4b:62:87:ca:07:2e:85:49:10:f8:c7:cd:c2:e8:45:5d:d3:
         31:d2:f6:bb:d4:78:1e:0c:6a:b7:f9:55:90:38:16:f6:28:bd:
         79:44:ec:8f:0c:c8:e8:54:34:4a:d7:82:09:d0:fb:fa:c4:25:
         38:a5:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:53 2026 by rpki-client