Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa
File:                     1CD82986C36111E9A37AC46EC4F9AE02.roa (raw, json)
Hash identifier:          tk96VxBbpWdjYmc5SF84zVk0NfFSbTDNVAWRkR1LXZY=
Subject key identifier:   DC:BB:D4:3D:A0:4C:6A:C3:73:21:89:75:9B:67:DC:4C:0D:C2:31:90
Certificate issuer:       /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial:       0E37
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:33:52 +0000
ROA not before:           Fri 04 Jul 2025 18:27:30 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     2
IP address blocks:        103.29.28.0/24 maxlen: 24
                          103.250.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
                          rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3639 (0xe37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
        Validity
            Not Before: Jul  4 18:27:30 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a45c60-ae9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:a7:55:16:d8:23:2a:e3:df:b4:22:43:e4:
                    8c:86:48:49:c5:7a:43:21:ac:aa:6f:61:bd:ea:f7:
                    92:97:1b:f3:7b:66:67:0c:f6:17:1f:80:85:cc:d0:
                    37:8c:d9:94:69:51:52:e0:f3:d5:3e:28:48:02:cd:
                    24:69:f9:70:e5:04:b3:80:45:b7:63:64:b2:d9:00:
                    10:cf:bd:94:09:b3:85:45:78:7a:76:52:46:1b:87:
                    25:68:19:6f:ea:a0:1d:c5:d2:4e:33:f9:99:c4:57:
                    a6:26:16:e6:6b:f9:db:4e:0d:00:cb:0c:ef:0d:f6:
                    c6:71:b0:d1:ce:fc:64:00:e0:e1:5b:f6:00:22:c5:
                    6d:d3:3d:8b:db:0d:fc:8f:8a:e8:50:31:99:10:b6:
                    10:a7:82:5d:85:25:c5:94:b7:4c:0b:8c:d8:a4:50:
                    93:65:bc:de:47:bf:84:ad:b0:16:21:17:04:9f:03:
                    e4:3b:4a:ee:15:d6:71:f3:0e:9b:82:88:c9:9d:d5:
                    1b:dd:22:82:9d:8e:a8:01:bc:8a:af:09:50:fc:72:
                    39:a4:3e:79:ee:7d:df:02:6c:5b:d8:25:f0:ca:99:
                    6d:13:8a:36:98:18:16:f0:d3:24:b1:6a:ce:ee:54:
                    f3:c5:57:40:ac:42:9c:a6:69:42:21:c3:e0:fa:2b:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BB:D4:3D:A0:4C:6A:C3:73:21:89:75:9B:67:DC:4C:0D:C2:31:90
            X509v3 Authority Key Identifier:
                keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.28.0/24
                  103.250.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:35:bd:24:a6:ad:fd:17:27:21:21:aa:5c:27:10:66:3e:
         96:38:ce:c6:f2:33:43:a8:e4:32:e9:46:2f:39:c8:8e:d9:a3:
         a6:83:7a:65:4b:cf:b8:93:93:67:a7:b1:e6:80:ea:38:e9:e8:
         aa:b8:7d:b3:fe:da:36:d0:2c:90:91:cc:ae:55:0f:44:5a:ab:
         a4:40:60:a4:e7:18:87:1e:45:06:e8:e7:c1:1d:ac:07:16:0b:
         af:f3:5c:c4:64:f3:ad:16:e2:25:fe:86:0b:61:75:43:14:89:
         11:cd:b4:d9:fc:1d:0d:d1:f5:50:8e:92:06:89:38:dc:ff:d8:
         2c:ac:a1:b7:62:c8:5e:db:75:19:1d:cd:c6:13:73:77:55:bb:
         bc:75:2c:b9:8f:dd:e5:e6:24:3d:27:13:05:29:44:a7:f7:a6:
         e7:9c:40:7a:92:cb:ac:37:6b:67:fe:1d:3d:c5:44:fc:e1:3c:
         58:83:36:1c:b7:8f:36:d8:ee:93:19:03:ef:1b:df:ff:47:47:
         4e:f5:ef:9b:81:11:66:0b:78:a9:38:bc:72:85:a4:c9:0b:24:
         90:2b:cc:e9:4f:41:fa:f4:c3:d0:93:d6:ac:e4:93:92:b3:64:
         ee:07:cb:27:92:3e:2a:28:08:e2:0d:52:74:16:7a:e4:1c:73:
         22:fb:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:29 2026 by rpki-client