Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69E7D456E8AD11F09A679225586F56BC.roa
File:                     69E7D456E8AD11F09A679225586F56BC.roa (raw, json)
Hash identifier:          lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=
Subject key identifier:   45:DD:53:91:13:D7:E8:CB:4E:F3:8C:BB:19:6A:29:51:B3:B9:28:4C
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       04C4
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69E7D456E8AD11F09A679225586F56BC.roa
Signing time:             Sun 01 Mar 2026 18:29:38 +0000
ROA not before:           Sat 03 Jan 2026 14:06:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     214454
IP address blocks:        103.49.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Jan  3 14:06:35 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48592-61ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:e2:98:d9:68:04:db:c8:83:8b:1f:6e:5e:
                    71:0d:59:77:d2:34:f6:90:d3:33:9d:9b:a4:08:9d:
                    80:34:cd:65:a5:fb:2d:c6:03:96:2c:10:68:1f:e2:
                    76:d2:5f:c7:5f:6b:fd:42:5a:6f:97:6e:40:76:47:
                    43:d7:c0:44:25:17:1e:e0:bf:cc:97:2c:3f:da:82:
                    98:8b:9b:96:77:94:6a:19:66:b4:e4:c0:6f:7f:9d:
                    b6:d9:5c:ba:a9:2b:60:ee:4e:b8:be:7c:7f:ec:c8:
                    15:32:6a:29:6c:08:35:4f:cd:83:1e:4e:dc:06:fe:
                    a7:cd:d0:38:6e:bb:72:51:00:aa:a7:83:de:3a:82:
                    ab:68:58:51:47:7e:51:11:e7:fa:82:8d:86:09:08:
                    b4:02:dc:1d:ec:00:43:3e:83:cc:34:5c:2f:ad:ad:
                    3d:eb:43:1a:8d:82:6f:ac:23:2f:45:93:24:ae:51:
                    9f:66:f5:46:b5:6e:88:69:60:fd:c5:be:01:d1:11:
                    1d:e0:14:43:9c:22:7a:d7:de:64:10:3a:11:d7:42:
                    a2:c5:5d:9a:fd:df:48:11:d6:aa:8c:93:ed:f9:00:
                    41:b4:39:2b:c0:30:99:47:dc:12:a1:a5:b6:64:b1:
                    74:c0:0b:6e:59:3f:28:bb:91:21:26:bc:29:c4:82:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DD:53:91:13:D7:E8:CB:4E:F3:8C:BB:19:6A:29:51:B3:B9:28:4C
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69E7D456E8AD11F09A679225586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:00:05:38:f1:e1:19:dd:99:21:9f:93:d6:a3:5e:e0:f7:
         dc:14:d8:8f:8f:f6:50:c3:3c:08:61:5c:27:4b:75:b9:8d:0c:
         16:0e:fb:2f:ee:2d:5f:b4:b7:d0:3b:39:7c:b6:44:a6:68:ce:
         0b:8c:24:83:34:b8:85:3c:de:56:ad:4e:e4:f0:3b:5f:23:b4:
         be:42:1b:87:f7:89:6b:1e:4d:49:6b:86:17:ae:4b:66:b4:33:
         32:75:a1:1c:24:47:f3:6d:f3:cb:8e:a6:f8:f2:6d:c7:48:8b:
         53:3e:47:52:df:f2:ce:12:65:98:61:b0:51:01:14:b3:77:e8:
         37:0b:15:74:6d:cc:eb:ef:5c:82:bd:d4:a9:66:04:9e:c3:62:
         0a:76:90:73:f9:79:c7:e0:c8:e3:fd:08:de:80:31:2b:c2:55:
         b3:b2:40:3b:12:a5:15:06:6b:86:dd:cf:44:db:58:97:07:bc:
         01:b1:c7:c4:98:cf:9e:07:24:aa:76:37:08:4f:cf:ab:4d:92:
         0c:a4:e9:df:cc:48:e3:0c:cd:f7:34:f0:a7:c1:9c:10:e5:dc:
         58:aa:91:f3:f4:4c:24:2c:3f:dc:7e:6f:39:ec:db:05:4f:77:
         c0:43:ef:ee:ac:57:77:b4:9d:6c:6b:3a:52:1a:7d:31:fc:b8:
         76:1d:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:46 2026 by rpki-client