Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa
File:                     CC636E14FFE011EDA35F8946C4F9AE02.roa (raw, json)
Hash identifier:          ldsVU3+f9Ys8c9jjGtZsorbtRuuuB7CFx692x5DpYKg=
Subject key identifier:   5F:FE:E5:41:17:A9:39:D5:EB:7B:0F:9E:74:5D:A1:D5:86:9F:F1:0C
Certificate issuer:       /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial:       0252
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:58:05 +0000
ROA not before:           Fri 13 Feb 2026 01:22:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150750
IP address blocks:        103.83.30.0/24 maxlen: 24
                          103.83.31.0/24 maxlen: 24
                          2401:8ae0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
                          rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914334E, serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
        Validity
            Not Before: Feb 13 01:22:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a437dd-bcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:d5:1d:9b:c1:65:3f:a5:58:f8:66:c3:09:
                    0d:e0:55:b4:fb:5d:22:c5:9a:a4:0d:13:cb:87:e4:
                    c9:03:63:3c:e2:f9:22:93:93:f1:38:bb:fd:e0:61:
                    be:57:ff:d8:90:62:18:cd:2e:d5:28:8b:a7:b4:01:
                    c9:d0:4a:99:8b:89:d3:f0:55:f9:f2:d1:9e:c3:9e:
                    59:5f:f8:17:7d:81:a9:4f:e5:bf:99:e1:b3:0d:ce:
                    05:29:fc:74:e2:b4:8a:cf:3d:24:a6:85:e5:86:10:
                    6d:e9:41:55:b1:d0:a0:76:27:ca:eb:fc:e6:c6:f8:
                    d6:39:1e:28:b3:21:e5:aa:e2:2e:35:13:b4:da:21:
                    4c:d6:90:00:f8:94:cd:48:c4:fa:88:1a:65:73:d3:
                    b8:bb:1e:36:95:62:70:cc:a6:74:c3:1f:5d:d5:6b:
                    45:48:37:cc:a1:bf:51:3c:c0:f2:1e:89:35:95:78:
                    70:f6:c7:0c:aa:aa:dd:1e:68:99:74:14:d6:dd:ef:
                    d7:3e:f1:1a:58:33:53:9a:e8:2f:a6:a5:03:65:93:
                    58:7b:65:a7:1c:bf:f9:8b:5c:b3:63:29:66:36:01:
                    28:01:cc:2c:5f:83:e5:fc:44:32:41:05:5b:99:29:
                    8a:7b:3c:21:4b:6d:51:ce:34:d6:7a:55:b7:1e:d7:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FE:E5:41:17:A9:39:D5:EB:7B:0F:9E:74:5D:A1:D5:86:9F:F1:0C
            X509v3 Authority Key Identifier:
                keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.30.0/23
                IPv6:
                  2401:8ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:93:e1:cd:e0:29:00:38:50:09:ea:1c:c6:7a:7b:a9:c1:
         fa:51:2f:85:4b:42:6b:58:d5:49:a6:86:8a:d6:37:cb:ee:96:
         ad:41:b5:a3:06:06:46:ad:bb:e9:01:5d:90:d1:3a:5f:15:51:
         bd:13:69:ae:c7:e6:17:26:9c:9a:29:0d:76:1f:c1:67:41:ec:
         a7:90:f4:80:3e:e3:b8:28:b7:ec:1c:93:60:b3:80:18:3f:51:
         f9:de:f3:a4:e4:7c:1c:e4:5c:e2:4c:52:ec:98:3a:66:08:e3:
         72:d3:e6:c9:5f:19:0e:7b:16:6f:59:74:81:c2:c2:3a:c6:2c:
         a9:d5:11:2d:6d:bb:4d:14:5f:1b:dc:ba:ff:e0:2e:f8:ff:87:
         c9:83:e8:fa:73:ef:2d:79:2b:6a:ad:8b:37:c0:1e:3a:f8:97:
         0f:0c:00:49:30:98:ce:1b:eb:1b:ab:13:d0:99:65:c7:6c:e0:
         44:e8:4d:f2:ba:2f:8d:37:5d:2b:46:99:3f:fc:9e:6d:ca:04:
         b4:1d:20:3a:c0:e3:d1:11:fd:bf:2f:ef:37:4c:1b:62:46:ca:
         e6:69:0f:3a:b2:23:10:f4:ac:60:a9:94:2d:4f:22:49:23:7f:
         0d:60:df:8a:5c:1b:70:6e:7a:24:43:f6:c8:e0:5f:c6:7e:ff:
         10:80:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:57 2026 by rpki-client