Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa
File:                     1A8553B831F011EAA18AC76AC4F9AE02.roa (raw, json)
Hash identifier:          tnVPuD19UwWln3/34cxqq1xm4up8rwSwfbjxhWxlsQw=
Subject key identifier:   88:0E:C3:83:DD:CE:88:95:34:31:A0:37:A2:E3:25:57:13:84:BD:BE
Certificate issuer:       /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Certificate serial:       0BF1
Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:25:38 +0000
ROA not before:           Wed 26 Feb 2025 19:48:05 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137511
IP address blocks:        103.111.68.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
                          rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 18:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057 (0xbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
        Validity
            Not Before: Feb 26 19:48:05 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40612-8475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:66:5e:df:ee:55:9c:f2:f1:a5:c2:da:f5:
                    2a:c2:56:82:f4:29:95:5b:55:29:17:84:cf:78:51:
                    39:a0:51:55:0d:e7:72:0e:e7:00:50:6d:19:3a:fc:
                    62:03:e7:7b:9b:a9:5f:a1:6e:f8:10:67:63:aa:71:
                    fd:d7:03:c1:23:6d:25:ec:cf:18:26:bc:d7:32:f3:
                    43:25:e7:69:25:d1:65:1c:8a:9c:fc:80:04:14:86:
                    03:bf:f7:4d:f4:06:c6:c7:13:a7:2a:8f:02:3f:6b:
                    b9:ec:03:bd:81:c5:d2:9d:3a:fc:35:e8:d9:27:55:
                    64:22:d7:d8:40:1d:e6:e8:bc:86:14:65:f2:a1:8e:
                    c5:51:30:d5:dd:eb:0a:17:83:7c:1a:47:68:b8:16:
                    cc:88:61:46:64:39:0e:e8:2f:01:98:fa:8b:8e:b6:
                    cd:75:84:44:64:ef:fe:bb:e9:10:5f:c9:26:d3:5e:
                    7e:67:7e:21:1c:96:c2:c5:81:6d:56:bd:3f:68:3e:
                    f8:cb:b2:9e:83:63:2f:f5:8b:24:b2:23:ee:45:a9:
                    9f:00:37:7a:ba:46:af:a4:78:ed:c2:fd:e2:c9:47:
                    44:d1:40:76:0c:33:f9:bb:6a:d3:b1:9e:79:99:b3:
                    1c:49:c6:6b:cb:b8:c2:10:19:31:66:89:ba:4c:b8:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0E:C3:83:DD:CE:88:95:34:31:A0:37:A2:E3:25:57:13:84:BD:BE
            X509v3 Authority Key Identifier:
                keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:42:18:fd:43:dd:a8:b6:0b:95:97:1a:54:ca:ca:33:a1:39:
         05:99:d9:04:4a:83:fc:07:4e:a8:cc:d5:7b:a8:ca:73:de:31:
         ed:d6:a0:2e:04:22:df:66:05:57:ae:1a:b0:97:5d:d8:5f:35:
         a3:80:f5:9b:cf:48:c2:f8:8d:03:e3:81:6f:6f:68:b0:ea:93:
         2d:3d:10:89:31:81:06:e4:41:32:b3:4d:e3:3f:f5:37:9d:47:
         ec:86:37:7b:4b:4b:d6:59:db:ce:0b:cd:b7:1e:23:aa:e4:37:
         f7:fc:d8:a0:79:f4:a1:df:d5:ce:06:eb:f1:ff:14:00:6c:eb:
         54:3e:74:f6:04:14:05:f6:0a:84:9b:32:71:cb:c5:2a:1a:d0:
         df:df:3b:b2:37:df:f4:4f:6c:69:32:0d:ce:bb:0f:ec:61:85:
         52:81:28:7f:26:55:4e:e2:87:04:06:02:40:d3:e7:78:d3:b2:
         b8:99:19:aa:55:57:b5:e4:e0:f0:fd:79:8b:fb:d8:57:9d:f8:
         e0:f9:7c:ba:99:4c:47:ae:4d:0d:a0:37:05:c5:83:d7:e2:72:
         d3:38:88:4c:18:1f:2b:62:3c:0a:f4:74:32:a6:56:98:a9:31:
         72:b4:9b:1e:19:50:80:87:10:87:ec:99:fe:12:2b:18:65:00:
         32:ca:7d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:17:00 2026 by rpki-client