Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/E757164C074511EDB229157DC4F9AE02.roa
File:                     E757164C074511EDB229157DC4F9AE02.roa (raw, json)
Hash identifier:          Bjnc4EakQapdCARIIa5nan+FIy1tiCXArToRM95Qc7Q=
Subject key identifier:   52:92:C4:C3:9D:92:CD:07:4E:F7:9D:B5:3E:A7:39:8F:59:58:7F:F4
Certificate issuer:       /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial:       0318
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/E757164C074511EDB229157DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:23:06 +0000
ROA not before:           Wed 05 Mar 2025 03:17:06 +0000
ROA not after:            Mon 01 May 2028 00:00:00 +0000
asID:                     58527
IP address blocks:        103.247.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
                          rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
        Validity
            Not Before: Mar  5 03:17:06 2025 GMT
            Not After : May  1 00:00:00 2028 GMT
        Subject: CN=69a3e95a-5498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:64:28:fe:04:a5:cc:4a:14:1b:32:65:84:
                    e6:ca:66:67:7f:09:7d:46:17:b4:d0:c9:b7:40:9e:
                    42:61:b4:b8:62:11:8d:59:09:f7:79:ea:84:df:67:
                    01:ef:2d:88:d0:aa:29:9a:6e:23:82:14:29:16:c9:
                    f0:5a:79:a6:c9:4e:69:c1:ef:6e:16:36:45:43:98:
                    c3:54:9a:9c:d1:6e:d2:24:58:42:bd:dc:f6:b0:d7:
                    b4:87:e8:71:5d:b5:f9:a9:e5:df:c5:3b:29:c8:ba:
                    37:ee:f8:8a:74:52:e6:1e:98:42:a4:1c:45:de:eb:
                    79:fd:7f:0d:c0:98:b8:04:ab:f6:fe:6a:df:d2:96:
                    13:8c:fc:3a:a8:64:a1:bc:7d:55:de:e6:41:31:5b:
                    f1:c0:d6:2b:26:2a:1b:8e:84:cd:e9:de:fd:f0:cf:
                    17:77:4e:90:ad:75:a3:8e:a0:72:36:a6:fe:dc:a6:
                    e5:8f:17:72:d8:fc:48:d2:b1:f0:91:28:24:a8:a3:
                    a0:6b:6a:d7:80:9d:97:9f:5f:6b:b0:71:18:4d:e7:
                    71:b2:42:2c:90:9b:07:5f:57:f9:4d:2a:e7:6d:37:
                    1c:47:2c:21:74:39:63:bf:0f:c6:f5:9f:6d:5d:79:
                    53:db:df:d0:33:c0:73:60:b7:75:a9:81:0f:44:a8:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:92:C4:C3:9D:92:CD:07:4E:F7:9D:B5:3E:A7:39:8F:59:58:7F:F4
            X509v3 Authority Key Identifier:
                keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/E757164C074511EDB229157DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:9f:4d:81:60:91:59:18:df:a4:14:33:3c:08:6f:b0:a3:
         4b:21:23:6b:92:ed:fb:66:f7:d2:d0:36:41:0d:8f:2d:03:ef:
         f9:6d:ac:b6:29:0d:c0:38:dd:dc:a7:d7:8f:5e:e6:d1:50:6a:
         71:b5:39:50:48:e1:e2:0c:b5:27:3b:44:47:1a:8b:79:48:26:
         22:4e:9f:b7:35:bf:60:54:92:94:da:ef:57:44:af:9e:d2:ca:
         19:7e:37:bf:44:2b:51:e1:8b:9d:47:61:c8:13:1b:89:67:40:
         99:68:3e:62:7c:2e:a0:7e:72:77:76:09:f8:2c:b4:a1:71:f7:
         1f:07:ce:76:3b:0c:ed:cf:8b:6b:83:e5:c4:fe:f0:bb:72:cb:
         36:b2:56:80:c5:69:c2:34:5a:fc:d5:1c:2d:1d:96:1a:69:db:
         45:af:d1:57:d1:0f:dc:91:ee:9c:e6:df:fc:18:88:45:9d:2c:
         d0:90:44:37:02:90:67:d8:b0:13:21:a1:a2:fb:20:48:3b:24:
         1c:51:70:2c:1d:8e:6b:46:c7:06:b3:84:5c:7c:4d:54:ff:a0:
         0e:46:e0:01:5b:af:d6:dd:19:72:8b:b9:b2:3b:e7:5e:12:2e:
         79:86:ac:cf:20:07:f2:f4:3f:d0:04:96:46:51:12:93:99:88:
         0b:68:76:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:06 2026 by rpki-client