Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/B301332073DF11EE9DFE0B56C4F9AE02.roa
File:                     B301332073DF11EE9DFE0B56C4F9AE02.roa (raw, json)
Hash identifier:          wryoCzEaKOskBTebV9BtnqbW4Nx44j/njtsaRcb25DU=
Subject key identifier:   FA:C3:B4:1E:79:1C:7C:95:46:06:46:00:ED:D9:E5:47:06:77:85:30
Certificate issuer:       /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Certificate serial:       01BB
Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/B301332073DF11EE9DFE0B56C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:39:36 +0000
ROA not before:           Fri 11 Apr 2025 04:09:56 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132193
IP address blocks:        103.6.181.0/24 maxlen: 24
                          103.245.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
                          rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
        Validity
            Not Before: Apr 11 04:09:56 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3df28-8f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:9b:aa:be:42:4d:94:06:94:6b:07:c6:72:
                    dd:8d:17:88:95:80:35:52:20:35:3b:21:e4:7d:05:
                    eb:e4:e9:9a:86:b6:4e:24:14:77:0f:33:4a:7b:0b:
                    1b:0e:b8:b7:23:59:94:47:a8:e9:c4:6d:ec:f0:4b:
                    4b:9c:84:21:64:4a:ee:c2:9d:93:d6:77:e2:41:dd:
                    92:82:2c:ac:01:3b:9f:72:08:4e:c7:fc:76:15:21:
                    59:65:a0:67:01:15:c3:4a:c8:7a:8b:5f:4d:c9:b6:
                    56:b1:44:96:16:2f:dd:7f:ad:cc:8a:53:2c:ec:bc:
                    8e:2e:8d:6e:be:da:f0:aa:3d:e4:bc:2a:fa:4f:a7:
                    1e:e7:b2:b7:fa:a5:a0:a8:db:30:b4:25:c7:e9:09:
                    39:51:7c:43:bd:54:45:9a:68:91:33:98:a5:6c:2f:
                    c5:a0:02:31:8b:77:ad:8d:07:93:6e:e6:da:dd:b6:
                    62:91:5c:65:7e:3c:b6:1f:61:32:ec:a6:5e:79:e3:
                    ca:33:96:85:a0:88:c5:de:d1:54:65:24:bc:8d:aa:
                    02:41:5a:aa:9c:ce:18:1e:34:94:3f:25:de:7a:9c:
                    46:90:c8:fe:99:b8:55:2d:c5:2d:bc:cd:71:b4:fc:
                    a1:b8:00:d7:37:36:7b:1b:47:56:3c:11:3a:48:df:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C3:B4:1E:79:1C:7C:95:46:06:46:00:ED:D9:E5:47:06:77:85:30
            X509v3 Authority Key Identifier:
                keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/B301332073DF11EE9DFE0B56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.181.0/24
                  103.245.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:96:94:db:71:07:e8:cd:7e:b0:4a:88:19:d8:5c:fb:87:77:
         f4:42:b1:fb:1e:fb:2a:ce:de:dd:1e:59:55:d5:9d:32:cc:7b:
         53:b2:ce:6c:e4:2f:77:32:6f:ec:34:99:30:70:bb:09:36:aa:
         0b:28:bf:50:72:91:7a:35:96:d3:96:12:21:b6:5a:8c:87:8d:
         78:7b:5f:fe:4b:15:63:2a:8b:65:96:41:76:30:96:1a:f4:32:
         8a:fc:77:fd:87:52:00:d0:90:06:b8:54:99:8b:f8:19:d3:fa:
         f8:0f:c3:00:57:4f:04:49:4c:61:a4:f8:3c:99:37:29:32:e4:
         18:48:75:c5:3b:9b:17:0d:7d:8f:1c:c5:6d:a8:83:c0:e3:02:
         68:cd:44:cc:01:24:fc:b7:28:08:af:64:b0:0c:c4:ab:03:77:
         64:a6:27:2b:f8:12:e0:60:fe:6e:5a:fe:84:91:d4:0f:be:7c:
         a1:cf:8b:34:80:57:5c:75:69:77:9f:8e:20:9a:8d:7d:c9:21:
         b6:5b:55:3d:16:a8:e5:ae:f6:64:7f:0b:63:44:09:47:54:d0:
         7d:0d:f5:b1:a2:08:83:d3:6c:ab:50:52:71:e5:15:fd:56:12:
         4f:f0:e2:b3:62:58:7b:05:c3:b9:63:e1:05:5d:c5:78:d2:53:
         71:a1:31:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:10 2026 by rpki-client