Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/7F424CC0350711E9955C524EC4F9AE02.roa
File:                     7F424CC0350711E9955C524EC4F9AE02.roa (raw, json)
Hash identifier:          yCe/k6xXVhDcI/ZIpN9FwrLfEE00s0V4+/WP5++jIFA=
Subject key identifier:   75:85:FC:40:EB:56:27:7C:7D:91:2E:47:D7:C6:E0:9E:AE:D5:60:A8
Certificate issuer:       /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
Certificate serial:       13A6
Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/7F424CC0350711E9955C524EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:31:32 +0000
ROA not before:           Sun 02 Nov 2025 17:05:24 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138209
IP address blocks:        103.129.224.0/24 maxlen: 24
                          103.129.225.0/24 maxlen: 24
                          103.129.226.0/24 maxlen: 24
                          2403:8ac0:ef60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl
                          rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5030 (0x13a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
        Validity
            Not Before: Nov  2 17:05:24 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45bd4-4e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:5e:19:05:a9:76:3b:71:3e:46:d1:b8:9c:
                    4b:43:6b:e2:f9:b5:3a:1e:ee:04:f3:13:0a:4b:a4:
                    dd:54:a5:8f:84:0c:39:9a:df:15:0c:19:ad:ba:4b:
                    71:cf:32:db:20:7d:40:72:fc:d7:b5:b9:a1:13:04:
                    a1:4a:be:fd:26:c4:9b:ef:10:8f:a0:51:0d:88:02:
                    03:50:10:d9:3d:43:ad:a1:a1:7d:3c:4f:77:0f:f7:
                    31:b0:28:00:8c:04:0c:c5:69:9f:f4:b2:12:86:1f:
                    fe:61:6e:59:0c:fe:53:cc:3c:68:5c:4e:5f:94:ad:
                    09:1c:1b:af:ab:fc:6e:dc:51:cd:43:60:23:29:b8:
                    7d:47:50:9d:46:23:2d:cd:c7:f8:d5:a1:12:1d:32:
                    91:ab:91:ed:e7:36:04:7f:34:19:13:1e:8b:ea:fe:
                    8e:cd:d2:c9:75:4c:e7:3c:32:4f:8e:4d:96:15:2d:
                    60:ad:ea:37:a0:64:a0:2b:b0:59:6f:3b:a6:fe:92:
                    44:38:85:c0:a8:dd:57:6c:78:78:d0:b5:79:30:fd:
                    27:af:60:61:6b:a7:d0:77:88:65:c2:2c:e4:87:8d:
                    93:58:fb:64:b4:cd:3d:d1:dd:ef:48:ec:2a:c3:57:
                    ae:ac:dc:59:d0:c3:f7:ee:41:5e:0e:05:8c:e7:3d:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:85:FC:40:EB:56:27:7C:7D:91:2E:47:D7:C6:E0:9E:AE:D5:60:A8
            X509v3 Authority Key Identifier:
                keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/7F424CC0350711E9955C524EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.224.0-103.129.226.255
                IPv6:
                  2403:8ac0:ef60::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:37:ee:07:49:b4:50:e5:44:8b:22:5d:c1:6a:21:38:73:
         21:ce:9f:83:75:80:7a:db:06:e3:db:63:1b:49:e8:1a:ab:fa:
         31:44:0a:18:d7:64:01:f8:c4:06:c2:25:f2:1f:ca:8b:a7:d8:
         12:71:d0:ec:e1:28:6a:4c:b4:98:4d:56:ec:74:38:33:6a:8a:
         ea:34:e0:b7:f6:e6:29:97:b0:78:35:c2:37:03:3b:cd:00:88:
         cd:6e:46:4c:a4:1d:e2:23:e9:c2:0e:01:3b:4f:03:fa:1d:53:
         f9:7a:a0:5a:f9:a1:07:9d:38:b9:9c:a5:7f:f8:35:a7:b6:05:
         0e:d6:58:9d:5e:13:5d:e9:11:07:e7:0e:29:de:72:21:0f:44:
         1f:c6:a1:c3:e5:c0:5d:8e:30:3a:16:de:bc:02:2f:34:83:c0:
         32:a7:a4:96:8a:45:54:3d:f7:fb:68:58:6e:8f:0f:12:eb:25:
         94:52:af:6c:fe:26:e5:1e:cd:67:d3:4f:87:96:c6:1e:e0:d4:
         a1:22:76:5e:47:d6:ff:58:b6:b5:87:4b:07:bb:28:19:f3:99:
         43:d9:d5:c9:ca:6a:2c:59:a8:c4:d9:f5:e8:88:81:68:5b:8e:
         b0:4d:6f:d8:e2:9f:d8:2b:86:cd:ad:cb:43:70:1c:ff:b4:dd:
         29:7c:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:33 2026 by rpki-client