Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69738B14E8AD11F09A679225586F56BC.roa
File:                     69738B14E8AD11F09A679225586F56BC.roa (raw, json)
Hash identifier:          RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=
Subject key identifier:   90:9E:35:77:F5:A9:03:27:35:80:22:B0:61:7B:1F:C1:01:1E:B4:F2
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       04C3
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69738B14E8AD11F09A679225586F56BC.roa
Signing time:             Sun 01 Mar 2026 18:29:37 +0000
ROA not before:           Sat 03 Jan 2026 14:06:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     203923
IP address blocks:        103.49.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219 (0x4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Jan  3 14:06:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48591-5b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:f0:f1:07:8d:1d:51:66:3a:6c:46:3f:ca:
                    3d:3b:9e:6f:d5:96:67:7b:65:5f:67:0f:00:66:cc:
                    8c:48:e7:9e:ec:75:ab:3b:92:a5:52:cd:5f:e6:42:
                    2a:5f:71:f1:40:cf:70:eb:98:af:3e:44:9d:a4:c0:
                    0a:a3:b6:1a:d1:8c:59:01:7e:4b:e3:62:0f:3c:fc:
                    52:c2:3e:f8:ad:43:94:0a:08:0a:ba:5e:99:99:82:
                    ea:04:6d:d5:2b:2c:2a:f0:fc:83:e4:5a:a5:b9:48:
                    d5:dd:65:97:13:55:cb:27:6b:be:a5:6e:24:3c:93:
                    2f:ff:08:be:b1:6c:5c:51:1f:da:45:0d:81:cc:df:
                    15:82:74:c1:be:83:fb:5b:e5:31:c6:cf:4c:b1:9b:
                    d9:19:79:95:be:ba:4d:e8:a6:42:03:03:b5:28:07:
                    fa:6c:5b:1e:8c:02:de:f5:da:52:fa:49:10:50:ec:
                    77:e1:c1:fa:a7:04:bb:2a:c6:0d:df:c1:03:cb:b6:
                    00:99:22:d3:97:02:22:a4:93:74:31:34:2f:54:7c:
                    17:0a:58:86:e2:6c:c6:17:54:d0:d2:00:2c:24:f1:
                    95:38:22:f8:fd:ef:3d:9a:e1:97:83:0d:e8:f1:05:
                    59:3f:2b:77:28:2c:17:d1:25:21:84:96:4c:51:e8:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9E:35:77:F5:A9:03:27:35:80:22:B0:61:7B:1F:C1:01:1E:B4:F2
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69738B14E8AD11F09A679225586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:11:39:57:f5:cd:05:e2:2c:7a:44:ba:17:61:c2:ef:86:2a:
         dd:a3:ce:0e:60:62:e7:3e:30:8f:1f:09:7b:9e:74:21:99:7a:
         5a:76:1d:d6:e0:ae:da:95:9a:54:75:b5:4d:b5:29:9f:31:57:
         4d:ba:d8:eb:a9:45:19:95:6d:8d:78:2e:b0:8b:b8:78:eb:c1:
         0b:2d:e1:95:5a:a8:a8:d6:10:c9:bc:b0:ad:7a:a2:e9:6f:ba:
         41:dc:90:f0:08:06:f3:9a:1e:b4:1b:de:21:6f:2b:13:8a:96:
         f2:06:a8:1e:61:a2:e0:eb:2b:06:8c:73:db:55:a5:2d:b0:a5:
         a1:aa:6d:c5:ff:87:f4:fb:b7:27:21:82:c7:6d:07:f0:76:ed:
         70:c3:54:b2:2b:3f:31:7c:17:0f:4d:74:d9:84:10:c0:8f:02:
         ef:e0:2d:2a:19:0e:80:1b:7b:e7:16:c2:eb:ce:c6:42:de:05:
         5d:d8:04:a7:b6:9f:62:08:63:5c:0e:d1:cb:44:0d:fb:67:da:
         ca:e2:ff:68:93:b0:fb:8b:d9:8b:53:b8:36:d0:5a:b5:fd:7c:
         f8:63:e5:61:c8:0c:63:06:52:e9:38:e6:55:40:bd:d0:dd:eb:
         be:19:9c:cf:9e:af:b1:d4:b4:40:55:b8:da:ce:87:80:11:f6:
         21:58:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:46 2026 by rpki-client