Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/986F1F9AD64711ECA2924B5FC4F9AE02.roa
File:                     986F1F9AD64711ECA2924B5FC4F9AE02.roa (raw, json)
Hash identifier:          73MoW6eQgxGOOmNhqBuDqmDpNg4gwK+uov/m5DEc8SI=
Subject key identifier:   BD:8C:9D:78:21:50:21:5C:05:44:E3:34:65:29:B2:A3:4F:87:F3:D8
Certificate issuer:       /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial:       0AE7
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/986F1F9AD64711ECA2924B5FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:47:08 +0000
ROA not before:           Wed 04 Jun 2025 20:04:49 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58713
IP address blocks:        103.114.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
                          rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2791 (0xae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
        Validity
            Not Before: Jun  4 20:04:49 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4273c-1815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:1d:6c:48:57:ea:bc:b0:f8:e6:72:1a:4b:
                    51:50:6d:eb:f8:59:12:3c:35:0f:9e:3e:93:ad:f8:
                    09:9c:22:09:e6:c5:28:ae:16:7b:8e:ea:80:ae:c9:
                    35:9e:52:87:dc:b5:ae:cf:c0:84:37:83:79:93:83:
                    0e:c5:91:d2:1f:5d:60:91:82:68:14:1c:9e:fa:57:
                    bb:93:3f:56:30:9a:9d:67:eb:8d:4f:6f:8a:83:7d:
                    c8:e5:62:f0:49:94:fb:47:c5:1b:04:d9:bc:27:3a:
                    33:e7:8b:80:5e:90:0c:06:76:15:ba:c3:c0:37:fa:
                    96:e0:8a:a7:4e:a0:10:84:60:16:5d:3a:b3:06:09:
                    81:3d:5a:27:06:fa:66:4e:8a:7f:fb:11:22:92:18:
                    55:1a:89:6f:2d:98:24:2b:ae:b9:47:c9:48:28:19:
                    71:e9:65:35:20:a0:9f:40:fb:e5:57:df:a7:59:b5:
                    96:ea:36:a3:b4:00:ce:df:20:3b:09:97:0b:18:b7:
                    7b:61:a7:f6:0e:06:7b:58:c2:b3:47:52:40:a7:12:
                    60:ef:29:e4:08:df:3f:3b:8d:e3:26:4b:0b:01:72:
                    c1:c9:41:5c:d6:36:a5:51:aa:83:62:c9:4e:5f:dd:
                    a7:65:ce:4b:2a:30:6b:11:59:34:9a:e4:63:49:51:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8C:9D:78:21:50:21:5C:05:44:E3:34:65:29:B2:A3:4F:87:F3:D8
            X509v3 Authority Key Identifier:
                keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/986F1F9AD64711ECA2924B5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:58:18:39:5e:fd:94:f0:46:b9:36:03:e1:08:7e:c6:0b:0c:
         18:05:ca:07:5a:78:68:64:47:25:c7:69:f2:a6:d3:2b:9b:5d:
         54:b6:38:27:80:35:64:0f:60:ed:c8:10:d6:2f:80:10:fe:19:
         4c:30:ad:80:9d:75:78:63:ae:12:50:d4:43:ad:f6:cb:d6:f6:
         e5:5d:73:d0:28:f2:ff:37:55:3b:64:71:c6:bb:0b:5c:c9:4d:
         d3:2b:59:81:13:1d:02:8c:54:cd:a4:96:97:ab:35:22:3a:22:
         f4:33:a1:7e:6a:d4:f1:0a:66:b8:f2:b6:17:bf:dc:a0:a2:2d:
         8d:fa:4f:f1:ba:d3:b0:41:6f:2f:27:a8:b7:ac:7f:bb:ad:17:
         8b:93:22:c1:13:bc:96:81:5b:bd:d6:03:dc:e4:a2:fe:c2:1d:
         32:93:b8:26:3d:07:31:18:1a:6c:94:08:ff:f0:ac:a8:b1:09:
         3a:c7:41:ab:fd:39:a2:a3:cd:32:c0:22:b3:4c:f4:d0:73:5d:
         a5:d8:86:07:6f:ea:bb:dd:b8:50:ea:b0:85:e7:d8:20:b7:c6:
         25:dd:07:f7:92:68:5a:3a:58:68:86:b5:e6:f3:89:35:68:18:
         b7:9e:b5:78:47:56:9b:53:4c:ae:5e:ce:ee:25:64:ed:92:0f:
         b8:9f:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:06 2026 by rpki-client