Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa
File:                     39FBB4168B9811EE9C0BA252C4F9AE02.roa (raw, json)
Hash identifier:          wZxfcnKBY6ws0g5Xj8YXKxzQCzDk14hq7Z5XlyYaNyg=
Subject key identifier:   5D:E6:7B:45:86:4A:39:02:35:E1:B8:44:8D:5E:08:47:26:0B:C8:A7
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       0839
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:29:03 +0000
ROA not before:           Wed 31 Dec 2025 01:39:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55799
IP address blocks:        103.42.212.0/24 maxlen: 24
                          116.193.157.0/24 maxlen: 24
                          183.78.168.0/22 maxlen: 22
                          183.78.168.0/24 maxlen: 24
                          183.78.169.0/24 maxlen: 24
                          183.78.170.0/24 maxlen: 24
                          183.78.171.0/24 maxlen: 24
                          2404:be00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
                          rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Dec 31 01:39:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4775f-38f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:9a:e4:2b:c4:0b:c3:68:f9:3d:12:fd:aa:
                    26:21:a2:da:84:f6:73:ae:1c:14:c0:11:f8:13:6c:
                    88:c0:de:d4:07:35:f3:9e:75:26:a8:07:70:1e:a2:
                    b0:96:28:7f:7f:d6:cf:9f:44:ee:c7:03:fc:57:63:
                    5b:de:7b:93:1f:df:36:e9:6f:21:52:ef:e5:4a:a0:
                    e1:8f:6e:fc:0d:fa:d4:7e:51:2b:03:56:e8:08:68:
                    6d:0d:d6:c3:de:d5:c0:5c:9f:6c:76:15:93:46:79:
                    dc:0b:aa:dc:4d:df:53:2b:e0:b6:d1:dc:07:02:c3:
                    b0:3b:bf:df:de:c4:ea:28:19:60:74:a4:9b:1a:a4:
                    30:b1:a3:b7:44:6c:0a:7a:77:cb:1f:ea:51:a1:5b:
                    ce:e2:18:31:45:a7:c2:1b:c1:22:b8:b7:6a:bd:31:
                    7e:f7:1b:7f:67:44:60:b0:b9:b5:38:c3:3d:df:dd:
                    2b:38:07:39:65:93:86:49:ae:0b:41:28:15:b4:81:
                    ba:37:ac:0f:67:38:fd:6f:1b:8c:fb:b0:0f:ef:d1:
                    c0:2d:fa:f6:3f:f7:cf:03:d0:bf:ea:38:ae:08:a9:
                    d7:e0:fe:89:c6:9a:3e:00:74:08:d7:77:3b:0b:23:
                    d5:35:c4:8c:77:29:ab:9e:e0:8f:bb:be:72:a4:e4:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E6:7B:45:86:4A:39:02:35:E1:B8:44:8D:5E:08:47:26:0B:C8:A7
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.212.0/24
                  116.193.157.0/24
                  183.78.168.0/22
                IPv6:
                  2404:be00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:b1:24:2d:9d:4f:03:52:87:d6:3f:96:16:d5:8c:43:8d:5c:
         13:18:28:77:71:94:ba:62:54:81:3c:9c:e4:84:90:80:74:09:
         18:96:b5:a2:02:8f:64:06:1f:c8:b6:94:8c:55:05:1c:52:92:
         f9:63:0a:20:3b:3b:39:06:a1:d9:db:11:1c:81:c2:40:76:86:
         79:9d:af:8b:db:9b:a7:dd:d0:b5:55:55:7c:07:36:66:44:f0:
         98:46:89:67:f2:03:c6:df:e9:89:9b:c3:08:0c:46:5d:4e:1c:
         7e:ff:4c:c1:f7:a4:fe:91:51:4c:43:fb:49:78:59:2a:b7:a0:
         38:44:a1:5d:53:66:11:0a:fe:e0:cf:42:65:3e:db:ed:51:cd:
         9c:63:d0:7c:df:25:bb:77:e1:bc:57:03:71:d1:eb:8f:89:0e:
         6c:53:af:4b:f9:7d:1e:de:a7:b3:a8:65:ff:b5:4f:a5:4c:d0:
         28:ce:79:b1:20:1b:d9:45:c7:a8:67:da:90:23:10:3d:84:0d:
         75:72:d1:e8:c1:d9:08:b8:d4:39:3d:4b:fc:c6:c5:1b:64:e9:
         48:00:b6:d0:d2:28:51:94:e3:e7:29:6e:4b:47:d7:4d:38:a2:
         a3:7f:f6:ea:3e:56:a9:4d:48:48:71:00:8f:9c:54:e9:33:23:
         55:c1:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:01 2026 by rpki-client