Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
File:                     2F43497CA16711EFBB0B733EC4F9AE02.roa (raw, json)
Hash identifier:          ja+dV8F8droBnCPc3sPIfN0Ul1XNgCG3f5fT9ZFS1Y0=
Subject key identifier:   62:B8:E3:25:99:7A:81:F8:2B:90:E6:EC:96:83:D8:54:45:91:86:5B
Certificate issuer:       /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial:       025B
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:15:18 +0000
ROA not before:           Fri 27 Jun 2025 02:19:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135060
IP address blocks:        203.34.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
                          rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
        Validity
            Not Before: Jun 27 02:19:53 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3f596-fd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:50:b4:d6:71:21:78:74:35:40:80:81:23:ef:
                    f2:16:7e:bb:1c:70:6d:e8:2c:af:fc:c9:e3:62:ca:
                    b0:cc:2a:91:8b:83:b0:18:e9:9a:d1:8f:8d:24:fa:
                    65:dc:cb:9b:4c:55:bb:9c:da:e6:dd:b4:da:cc:2a:
                    43:86:e6:a1:62:49:fa:cd:bf:36:0a:24:66:c2:ff:
                    cd:73:1f:78:30:a6:59:aa:b9:b6:a3:6d:00:6a:b7:
                    40:8c:c3:6e:8a:8f:61:35:a5:32:ff:b1:33:8f:ba:
                    de:33:b7:1d:c0:a9:5b:d9:83:ea:6c:e0:9f:47:1f:
                    5e:a8:01:b3:03:52:5d:ad:ff:d3:58:67:5b:f1:71:
                    de:a8:67:3e:30:cc:01:39:21:6a:08:50:62:0d:5a:
                    82:d3:40:bd:ba:c1:ff:ab:00:16:8c:e4:9b:65:f4:
                    e6:6e:ef:1f:8a:d0:e5:1c:d4:3c:24:dd:5d:aa:4e:
                    10:2b:ec:76:63:fe:34:44:d3:91:96:b1:80:29:dc:
                    1c:97:8b:0f:99:11:cd:e7:c6:a4:f8:d8:fe:41:3d:
                    77:f9:07:95:73:29:84:aa:a7:b4:8f:66:31:a4:79:
                    49:3d:06:43:e3:aa:98:8a:af:4b:2e:59:ca:7a:76:
                    71:2b:8a:03:a6:6d:d1:90:3d:4e:5e:23:19:d7:e4:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B8:E3:25:99:7A:81:F8:2B:90:E6:EC:96:83:D8:54:45:91:86:5B
            X509v3 Authority Key Identifier:
                keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:65:bf:77:83:d3:89:31:01:33:c1:d7:41:81:86:8f:7c:a6:
         7d:c7:83:6d:1d:86:60:e9:ca:0c:16:21:e3:85:7d:60:eb:4e:
         6c:4c:5a:59:a8:c7:22:08:3d:05:89:4a:ac:cb:c7:9c:6c:ec:
         2e:ce:fe:5c:d1:54:00:37:cf:83:ed:6d:db:76:c9:48:94:67:
         7a:01:f9:26:f2:33:85:59:f7:2b:16:a7:d3:05:df:ec:19:0c:
         97:1a:f9:02:0f:aa:f4:f1:3b:e7:09:87:0b:a3:9d:8d:07:42:
         0b:86:c3:f9:e7:40:79:b3:3c:27:62:08:6c:70:13:1f:f3:6a:
         0f:f3:c1:1f:7c:d9:e9:23:19:13:c2:07:13:12:42:5b:05:da:
         96:bc:1f:cd:bc:d1:84:0e:d6:82:1b:3e:82:21:4b:6a:11:ee:
         9a:e1:f1:a1:be:e9:83:2f:c0:7f:d5:0f:1b:58:ee:58:f5:a8:
         c4:f1:9b:05:77:72:bd:27:02:74:b2:49:ee:70:62:7e:42:2f:
         c7:85:7f:13:ba:9d:51:ba:9c:c4:33:07:48:5d:d3:0a:31:ab:
         80:4f:16:0f:d0:34:1f:17:02:da:8a:ba:1c:24:e3:ad:9a:30:
         8a:22:78:71:08:9e:2e:f0:9c:28:11:ed:92:f7:f7:c0:ef:4b:
         2c:8e:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:30 2026 by rpki-client