Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
File:                     C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (raw, json)
Hash identifier:          piVYIMzYyeRdoeWa2qt5VAi4HtgHwmt42QAX33j5VNo=
Subject key identifier:   50:5B:97:2F:8C:BC:06:FB:AB:C9:2E:EE:E5:95:FC:40:EA:0B:B7:C0
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2C95
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:13:03 +0000
ROA not before:           Mon 02 Jun 2025 16:12:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133535
IP address blocks:        103.233.240.0/24 maxlen: 24
                          103.233.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11413 (0x2c95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Jun  2 16:12:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42d4f-9b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:14:2a:ba:40:4a:9b:95:db:f9:da:72:cf:fd:
                    5f:9e:87:ee:35:58:0e:f7:72:14:d5:aa:a1:df:44:
                    23:d6:c5:c4:3e:5c:ae:69:fd:1c:31:45:ba:e4:95:
                    0d:8e:fe:0c:22:03:e9:10:e0:bb:f4:a4:97:2e:63:
                    9c:69:44:0f:d3:ca:af:82:e1:2d:7c:54:6d:5e:2b:
                    5b:f8:7a:7e:99:e3:d8:d0:7d:98:b6:2f:68:63:58:
                    f4:f4:d7:97:2a:0a:60:40:94:bf:d5:ad:22:7c:ad:
                    62:e8:09:90:31:8d:db:3f:aa:a3:8e:b5:f0:55:ad:
                    b2:e1:e1:5f:9d:9b:7e:cf:9d:d2:50:47:60:0d:e5:
                    c0:7e:06:84:5e:df:15:d9:37:8e:b0:7f:ad:c3:fa:
                    ea:7f:73:c2:cd:5a:ea:3a:57:78:5f:2f:32:5c:76:
                    a2:a8:66:ca:aa:3a:5a:7a:47:b6:b4:92:f7:d2:4e:
                    a5:b5:32:27:f2:90:a6:27:72:ec:e2:d8:33:9f:22:
                    a2:31:ce:dc:0a:ff:59:f5:23:5c:53:11:71:27:9f:
                    bb:ac:27:04:cb:1e:42:22:ea:64:01:2c:06:78:ed:
                    16:ee:d6:48:1f:93:6c:96:ea:46:55:7c:ae:34:b7:
                    9c:77:47:dd:22:2c:6a:0f:52:56:38:57:00:ee:e4:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5B:97:2F:8C:BC:06:FB:AB:C9:2E:EE:E5:95:FC:40:EA:0B:B7:C0
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:37:d1:df:27:4f:d4:11:dd:16:b7:43:8f:3b:39:33:1a:
         75:64:9b:5d:cc:16:6c:8d:f3:0e:12:c9:eb:c1:e0:6f:24:04:
         84:e9:f6:e0:eb:35:06:06:e2:ba:63:da:92:44:6b:5d:14:71:
         d5:da:38:c1:92:12:e7:5f:1c:17:55:de:1f:e4:f4:aa:13:80:
         64:0c:9b:d3:4f:2f:2d:41:6d:06:d5:36:d9:d1:f4:bd:95:58:
         8d:50:24:4c:29:ec:08:b0:25:c0:21:5c:c4:8f:6a:f6:96:2c:
         a5:b8:42:f0:4d:99:f5:b9:5d:b2:2d:5f:f1:99:28:b0:f3:91:
         65:20:e7:44:bd:6a:30:f5:69:59:8e:2b:93:78:48:fe:9a:36:
         c2:d1:07:4b:56:5d:77:44:c6:a8:fb:fc:77:65:37:3f:15:f6:
         82:0f:ff:5a:7c:71:c2:8f:89:03:0b:20:c5:dd:c4:11:db:30:
         67:2f:20:f9:25:52:2f:8e:20:16:2c:9d:b5:b3:3d:45:cc:b0:
         41:99:70:9a:d9:cf:ee:b3:7c:a9:9c:27:12:ff:86:bb:01:83:
         00:aa:99:82:b5:9d:c6:c8:8b:0d:68:a6:cf:cd:4c:7b:3c:65:
         38:23:b1:0a:1b:14:8f:44:ea:dc:d0:f2:af:d3:4c:7d:34:24:
         6e:fe:a0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:57 2026 by rpki-client