Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa
File:                     D8B25C54EC2211EA84C17E26C4F9AE02.roa (raw, json)
Hash identifier:          R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=
Subject key identifier:   04:A1:DA:81:FC:0A:D9:E1:75:20:A6:FD:CB:82:36:9B:04:19:11:7C
Certificate issuer:       /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial:       08E3
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa
Signing time:             Wed 08 Apr 2026 20:26:54 +0000
ROA not before:           Wed 08 Apr 2026 20:26:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24049
IP address blocks:        203.119.18.0/24 maxlen: 24
                          2001:dd8:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
                          rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
        Validity
            Not Before: Apr  8 20:26:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d6ba0e-1d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:21:53:be:6e:7b:6a:cd:ec:7d:a7:58:01:
                    23:b4:69:a3:3a:43:0d:ed:0a:0d:da:1d:a1:9e:5f:
                    3b:8d:c9:29:5b:5c:47:17:33:85:58:f5:45:ea:20:
                    cd:45:06:e6:50:79:8c:d2:0d:29:e7:af:6c:83:79:
                    48:71:4b:33:cf:52:0b:dd:37:d3:71:71:d1:43:26:
                    4d:2d:ad:95:5f:6f:d8:84:b1:ab:a1:fe:e5:0e:e7:
                    e0:82:ee:fd:ff:f2:1b:d9:3e:4d:9a:16:04:a3:78:
                    d7:99:56:02:17:fa:ee:4e:43:72:e8:45:7d:2f:26:
                    06:88:a9:73:3d:bb:4f:e7:f4:7f:92:09:03:d5:61:
                    fd:ac:cb:e8:19:5a:d3:75:61:49:9e:15:b2:11:43:
                    f7:37:d5:11:fb:57:56:7a:51:4f:ad:c0:8f:03:06:
                    94:c3:d3:16:f0:0c:68:e6:60:ee:76:43:d6:ef:89:
                    8a:60:4f:a7:76:0c:74:a0:b3:f9:be:28:8e:74:61:
                    88:13:cb:80:e2:b7:58:1b:1c:dc:45:b3:c9:5a:6a:
                    5f:3a:fc:8c:9f:b9:98:1c:4c:e7:3c:7d:8f:a7:88:
                    f8:96:3a:69:fb:c6:28:30:0e:cd:ca:32:2c:80:11:
                    2b:32:b0:5c:3b:59:5c:28:b8:8e:98:0a:a9:0d:ab:
                    0b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A1:DA:81:FC:0A:D9:E1:75:20:A6:FD:CB:82:36:9B:04:19:11:7C
            X509v3 Authority Key Identifier:
                keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.18.0/24
                IPv6:
                  2001:dd8:1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         e0:4e:76:44:34:95:61:88:58:e1:8e:69:32:c5:38:d2:f3:09:
         5e:96:f3:33:98:b1:ea:2c:43:17:e6:ea:4f:df:89:94:a8:b8:
         9c:d0:54:a4:9a:00:a6:07:5c:d0:fa:23:3a:95:5a:d2:59:70:
         05:e4:2f:dd:7f:39:3b:69:e1:86:ad:0b:89:56:7c:c2:96:bb:
         c3:29:a9:9b:e4:c4:fb:1b:53:d7:d4:41:ee:94:05:f9:f7:a7:
         c8:cd:28:6a:93:40:15:ac:d9:98:32:49:b3:cc:4d:22:6b:36:
         31:4f:49:d2:0d:8d:03:94:dc:f4:0a:4e:43:cd:92:ee:dc:0a:
         98:db:e2:94:bd:89:22:cb:1a:a0:16:33:e9:30:93:b6:9b:b5:
         a3:9b:fd:55:44:d3:32:3d:2f:79:d3:a4:05:44:1b:72:d4:25:
         50:56:9a:d1:cb:45:16:72:ea:d0:6e:95:c3:eb:78:b5:05:45:
         7e:f6:8c:68:90:1d:3f:d6:ef:40:c9:3e:24:10:da:5a:67:e2:
         50:4b:cd:5a:30:9f:9e:f8:9d:42:9c:01:d3:f3:7f:7f:7b:28:
         3c:ee:e3:fe:1b:4a:f7:cf:0a:8a:1a:9b:17:c1:71:4f:1e:cb:
         7b:63:db:7c:cc:1d:10:92:93:df:56:4d:bf:04:09:6e:57:3d:
         a0:7c:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:43 2026 by rpki-client