Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/E174463E4BD411EAAD10A710C4F9AE02.roa
File:                     E174463E4BD411EAAD10A710C4F9AE02.roa (raw, json)
Hash identifier:          Fx0k0TQfkTjEx5QYzTZXVEk1I1QDmv0PoZpDBUY4GRg=
Subject key identifier:   17:9A:0E:F3:B6:3A:3E:9F:23:6F:E3:C7:88:CD:3D:0F:E6:C3:0B:52
Certificate issuer:       /CN=A916D2D2/serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Certificate serial:       0B80
Authority key identifier: 3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/E174463E4BD411EAAD10A710C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:45:17 +0000
ROA not before:           Tue 24 Feb 2026 19:16:28 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     58814
IP address blocks:        103.17.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
                          rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2944 (0xb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D2D2, serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
        Validity
            Not Before: Feb 24 19:16:28 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a450fd-a15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:f9:6e:b3:83:40:fe:ad:af:31:c3:28:7c:
                    29:2f:64:b2:04:2b:a0:12:42:f9:a0:34:74:49:e5:
                    d3:d5:d0:4b:3e:3d:eb:05:c0:bf:a8:cd:2a:78:59:
                    0b:90:05:9e:86:fa:3f:dd:04:48:aa:93:62:89:93:
                    00:f2:1e:a9:9d:b1:98:c6:00:1f:56:e6:17:99:42:
                    70:a7:8f:d6:f3:9c:e2:37:2f:b8:2c:ce:78:11:f4:
                    8e:e2:07:37:14:4a:cb:0a:e9:4a:e7:8d:14:27:1b:
                    96:8a:6e:70:63:84:7f:b5:d3:02:44:ba:9d:39:91:
                    27:b8:31:63:1d:52:92:30:db:1f:ab:3f:c7:80:99:
                    12:c1:f0:61:9a:86:93:21:44:fd:cd:3e:a5:83:38:
                    98:27:7e:15:1c:35:16:5a:31:5f:01:cd:1d:cf:71:
                    b1:56:c5:8e:7a:78:8c:b6:16:bf:86:8c:50:64:88:
                    99:6d:07:ea:54:8b:da:c6:a8:23:e3:b8:c1:d1:94:
                    9f:de:86:15:56:b2:cb:34:b2:25:dc:25:24:02:f8:
                    81:24:1e:9d:06:9e:30:dc:ef:8a:ec:87:ec:a3:41:
                    1b:c1:4e:0e:0d:41:e6:fd:3a:76:3f:5e:ed:c1:7b:
                    dc:d9:fa:8a:7d:12:21:49:fe:82:7e:5c:ee:96:36:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:0E:F3:B6:3A:3E:9F:23:6F:E3:C7:88:CD:3D:0F:E6:C3:0B:52
            X509v3 Authority Key Identifier:
                keyid:3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/E174463E4BD411EAAD10A710C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:41:f6:74:62:a5:06:d8:14:07:11:5c:b7:95:e7:e7:84:
         38:96:04:18:8e:39:77:0d:81:17:b1:68:c4:ec:cf:b7:3b:ce:
         b1:1a:1a:83:80:98:54:01:fc:77:78:c6:49:96:82:76:f4:9c:
         89:f2:bf:32:a3:d8:41:3b:3a:f9:9b:9c:63:2b:83:4e:41:23:
         5b:da:fb:27:e2:20:7e:ca:76:75:39:7e:09:6e:e6:e9:82:be:
         da:f7:c5:8c:d5:bf:37:33:a0:35:f7:ea:14:43:c0:b6:ec:ef:
         ba:30:08:a1:71:f2:fc:b5:c2:bd:79:66:01:f3:01:2a:c6:37:
         33:b9:d1:de:cd:d3:f4:d6:68:e6:a7:e2:d0:ec:cb:cb:3e:33:
         73:f7:07:fa:81:cb:1f:df:a5:f9:98:57:24:e6:6b:5a:76:e1:
         8f:15:e7:11:90:3a:c5:3c:dc:64:8d:57:fa:aa:1a:ae:9a:65:
         30:37:cd:a0:c2:87:5c:91:a9:98:8c:f2:b3:03:b2:05:91:7f:
         00:4c:82:c3:91:7a:91:8e:85:54:c6:92:24:97:aa:af:81:eb:
         a7:b9:0a:3f:e6:f1:96:d1:b2:6c:f9:95:f3:47:ae:c2:62:6d:
         c2:6a:a9:96:90:00:a4:ba:8a:b1:87:82:9f:f3:7c:53:ea:40:
         0a:bf:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:15 2026 by rpki-client