Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/0CDB293E6E3F11ED9DF20483C4F9AE02.roa
File:                     0CDB293E6E3F11ED9DF20483C4F9AE02.roa (raw, json)
Hash identifier:          q4+pc4Ukmkg7T/kbslIplsLIfKlGdUk7cIy5SDQBTgg=
Subject key identifier:   58:F8:73:47:C0:AB:2E:CD:BE:00:CE:63:16:3D:0D:68:D0:D3:11:DC
Certificate issuer:       /CN=A915802F/serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
Certificate serial:       0268
Authority key identifier: AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/0CDB293E6E3F11ED9DF20483C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:58:09 +0000
ROA not before:           Fri 21 Nov 2025 00:47:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     136176
IP address blocks:        103.20.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl
                          rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915802F, serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
        Validity
            Not Before: Nov 21 00:47:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41bc1-f30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:c9:1b:65:3f:be:71:f4:52:5b:b1:7b:4b:
                    c2:b3:28:99:4a:dc:d4:39:48:9b:b3:b2:ee:c3:b5:
                    28:ff:b1:68:3f:ea:50:cb:ef:1b:77:48:40:7d:a9:
                    37:90:fa:7e:e6:f8:1a:b7:27:62:5e:06:97:05:a9:
                    bb:72:16:99:c0:90:45:df:e2:57:5f:d6:45:8b:fd:
                    9a:d7:5f:58:15:5b:56:9a:39:0d:20:52:44:79:27:
                    7f:9f:c6:a7:9b:1b:f1:53:79:a0:19:6d:b0:e2:24:
                    6a:6a:e8:ae:8c:ef:60:7e:21:43:f9:ae:94:57:29:
                    6d:ce:18:cb:20:d6:d0:cf:43:42:34:bd:a4:d8:a3:
                    07:90:80:01:d5:60:a5:5b:2c:00:7f:7b:69:6d:39:
                    0d:09:ad:67:d1:a2:93:9c:4a:7c:d8:be:85:b6:4d:
                    fb:6f:f7:8f:f2:fc:3b:9f:f2:40:d8:ca:86:93:d6:
                    f2:62:ca:d5:29:76:8c:18:05:58:54:23:07:e6:72:
                    e3:03:e9:47:89:30:2c:c3:51:7d:d6:30:b5:d9:cc:
                    c2:0c:bb:8a:8e:0f:c1:f7:d9:0c:e1:a0:23:59:4d:
                    9d:3b:07:3d:45:99:87:34:87:88:89:1a:1a:12:5c:
                    1d:16:e1:fc:57:3e:b8:93:25:ee:2f:a6:52:fb:2b:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:73:47:C0:AB:2E:CD:BE:00:CE:63:16:3D:0D:68:D0:D3:11:DC
            X509v3 Authority Key Identifier:
                keyid:AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/0CDB293E6E3F11ED9DF20483C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:5f:19:2d:b7:04:13:43:ab:a4:0f:5a:a9:74:23:9e:41:2a:
         b2:72:b3:e8:79:c8:6e:4e:79:e1:83:b0:aa:48:94:0e:01:52:
         27:19:f7:bc:8d:2c:51:75:43:e6:d6:b6:be:d3:31:e9:ce:b1:
         a2:fe:4e:0d:26:e4:5e:6e:58:d6:06:91:97:96:76:ee:76:c7:
         d7:3d:a8:c3:e7:54:b6:e8:de:76:c2:ff:d0:02:23:30:97:c7:
         d5:77:af:f1:86:28:cb:20:84:77:e1:ca:8b:93:bf:9a:f4:25:
         4d:68:58:99:a2:ac:fd:5a:8e:06:09:19:d3:f3:07:d3:1c:97:
         db:f6:25:fd:6f:ce:c3:2c:b3:9b:1a:be:81:3a:90:b3:91:81:
         e3:a4:72:49:5f:b8:7b:7f:8d:c1:84:5b:07:e5:f4:b6:d9:ec:
         09:1b:85:1c:33:f0:63:64:7e:78:01:38:62:4b:32:19:65:c7:
         4c:38:ab:15:8d:48:a7:a2:dd:a7:cb:0b:a3:a7:13:2f:a5:49:
         e8:17:0e:38:46:87:83:5b:32:ae:4e:ee:b7:0d:ac:bf:c7:26:
         99:95:eb:01:64:8c:fa:80:6f:39:c6:57:32:75:05:e7:56:73:
         6f:e5:4c:20:95:ed:76:e7:70:87:e3:fd:c0:00:d4:87:e3:57:
         8f:55:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:54 2026 by rpki-client