Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04EFECDA6F3411EF833F4C23C4F9AE02.roa
File:                     04EFECDA6F3411EF833F4C23C4F9AE02.roa (raw, json)
Hash identifier:          pcNbG6mwMq3QyGse4iuZOM7V06FeUq9yS12qQm/8IJA=
Subject key identifier:   25:F5:3B:AB:8F:8D:FA:02:F4:1D:7E:3C:48:7D:07:7D:1E:EA:65:32
Certificate issuer:       /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial:       0125
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04EFECDA6F3411EF833F4C23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:25:57 +0000
ROA not before:           Thu 19 Feb 2026 04:25:23 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     17477
IP address blocks:        103.135.246.0/24 maxlen: 24
                          103.135.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
                          rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
        Validity
            Not Before: Feb 19 04:25:23 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a43e65-53e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:99:1e:b8:c3:47:de:c0:99:00:d1:c7:0a:
                    cd:d0:ae:3e:3c:5e:47:cc:25:9d:4c:d1:3a:ce:c1:
                    d5:8d:47:71:85:ef:a6:d5:5b:01:14:29:62:6b:bd:
                    3c:4f:3f:ba:aa:70:f2:3b:62:ea:5c:0f:ff:98:56:
                    5f:de:6f:4e:9b:34:f9:cb:50:46:a5:02:9a:28:98:
                    fc:dc:17:82:ca:48:f8:dd:2b:9a:9f:d3:c2:f3:74:
                    e1:b5:5e:8d:dc:d4:94:54:a8:02:be:01:67:d7:db:
                    73:f9:01:58:90:bc:fb:4b:32:4f:da:09:c5:fe:87:
                    e7:75:74:3c:d6:d8:2e:0c:dc:11:8c:cc:66:96:63:
                    06:21:81:e8:58:59:52:19:c6:b7:f7:cc:04:72:ec:
                    af:3f:e9:9e:d6:ff:37:63:2a:1c:32:ab:b6:11:26:
                    52:53:90:48:99:22:4e:67:81:95:2c:75:da:ba:a5:
                    d3:26:a3:e8:b7:f5:95:20:d3:84:34:2e:98:d4:ed:
                    76:70:76:c3:bd:14:4c:20:26:1a:5b:4e:b2:3b:7d:
                    71:cc:b1:bf:e0:79:cd:90:0f:ef:e2:15:58:7b:04:
                    5b:02:0b:8e:ff:7f:ec:20:4a:fc:6b:49:62:07:0f:
                    07:fb:e6:27:e8:67:bf:bf:70:ab:5a:76:32:c1:68:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F5:3B:AB:8F:8D:FA:02:F4:1D:7E:3C:48:7D:07:7D:1E:EA:65:32
            X509v3 Authority Key Identifier:
                keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04EFECDA6F3411EF833F4C23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:ba:bf:bb:20:68:2b:da:92:24:0e:fc:e5:38:9f:ad:65:6d:
         1f:0c:2e:43:2f:6d:39:61:3d:5a:f8:10:22:07:a4:25:6f:62:
         fa:6e:99:bf:75:ff:e1:d6:52:ce:46:5c:f3:fe:b0:f2:52:f5:
         0d:c9:57:f1:40:c7:50:ad:12:b0:5e:7d:b7:fa:ed:14:3f:f1:
         db:4b:57:7b:9a:8a:c1:f6:67:10:d3:99:be:5b:cf:18:1b:4c:
         54:db:d5:aa:be:d3:06:7c:b0:ec:e7:64:8f:3c:06:12:1d:d1:
         54:9d:26:ec:ba:08:b6:44:ee:e3:a7:f4:24:08:b6:54:9e:6f:
         e4:4e:7e:1d:df:4a:85:21:a8:27:26:94:4e:9d:5c:45:68:f9:
         62:ee:d2:cd:95:7c:a5:5c:47:29:ea:62:11:3a:b4:99:f9:f9:
         a2:0e:28:2c:ca:d1:b1:24:b5:84:50:46:fb:00:28:a9:dd:4e:
         b6:af:19:82:a7:58:13:59:dc:75:34:00:39:8a:c3:f2:06:0e:
         3b:9f:88:a1:1d:e3:7c:6b:12:94:33:d0:ee:d5:96:27:68:5b:
         bf:5f:a7:d6:1e:2d:2d:ad:71:87:56:11:ba:11:e4:2e:09:1f:
         e3:ea:e7:4d:09:a3:ad:18:51:a1:55:a4:a9:9a:f7:8c:7a:4f:
         33:a0:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:12 2026 by rpki-client