Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
File:                     81C5BFF8192811EA9B88D87DC4F9AE02.roa (raw, json)
Hash identifier:          MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=
Subject key identifier:   E7:03:8A:E1:D6:7C:09:59:D3:2D:31:4C:8E:AE:DA:77:EC:3C:7B:21
Certificate issuer:       /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial:       0C74
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:55:00 +0000
ROA not before:           Thu 04 Dec 2025 18:29:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139771
IP address blocks:        103.145.28.0/24 maxlen: 24
                          103.145.29.0/24 maxlen: 24
                          2001:df1:f180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
                          rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
        Validity
            Not Before: Dec  4 18:29:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44534-96d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:c0:c3:3e:04:87:d4:a5:34:78:a0:bc:76:
                    ac:7c:4b:c7:1e:bc:45:5d:75:03:2c:99:b4:ce:e8:
                    a1:f1:eb:46:94:61:f7:01:61:c7:b5:5c:e7:11:60:
                    ac:b4:b8:56:e9:95:f2:93:20:27:c5:16:da:a3:1f:
                    f3:85:e9:8e:68:53:85:75:a4:46:6a:36:da:36:be:
                    c7:e6:cc:11:db:e1:44:ea:0e:3f:f1:13:9a:3e:c2:
                    b9:ac:20:84:10:62:1a:fd:0a:87:a7:48:26:38:cf:
                    22:72:01:ee:74:8a:f8:11:c4:17:a2:6d:1b:4c:2f:
                    a0:0e:10:75:fd:ff:84:dc:b7:cb:54:01:fd:19:68:
                    c3:ef:ad:dc:b0:41:76:15:bf:0c:9d:fe:7f:f8:92:
                    94:1a:a7:c8:c5:51:db:32:35:b3:7f:7b:28:f7:66:
                    98:ab:a6:96:9c:15:25:b0:69:a1:f7:2d:92:6c:df:
                    f1:04:5e:8b:98:85:85:02:78:c8:44:88:44:41:cb:
                    56:4a:db:0d:3d:ed:77:dc:20:a2:dc:13:9b:72:35:
                    43:68:40:20:ff:b1:b9:92:6a:85:77:3c:a2:25:10:
                    23:4b:03:6f:30:18:45:63:2d:5d:65:bb:3d:9a:af:
                    3a:1a:ca:7a:11:4e:0d:81:97:7f:a5:1b:af:cf:c6:
                    1e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:03:8A:E1:D6:7C:09:59:D3:2D:31:4C:8E:AE:DA:77:EC:3C:7B:21
            X509v3 Authority Key Identifier:
                keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.28.0/23
                IPv6:
                  2001:df1:f180::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:39:ac:69:a3:c3:70:b2:c5:38:c6:7f:e7:fe:a2:5a:8c:
         ce:3d:6f:66:c7:7a:36:0b:3f:2c:1b:d7:e8:19:da:22:64:02:
         b0:5b:9a:65:cc:aa:71:d6:61:ac:0d:86:53:c3:62:94:d1:79:
         08:a6:61:47:90:06:5b:54:6b:ec:20:f0:56:80:90:47:f0:7e:
         5c:7b:10:63:7d:98:53:b7:f7:f2:33:26:5b:bb:44:fe:f0:52:
         d8:2d:78:bd:9c:ca:bc:15:b2:20:f4:c6:2c:d3:7a:25:e1:05:
         ec:ac:d6:7d:2b:a0:08:93:05:03:17:68:bb:c1:16:3e:6f:c7:
         11:17:8e:d5:48:f5:36:87:8e:93:3a:16:8e:87:ae:02:df:9c:
         87:c9:db:78:d4:b5:88:01:74:dc:6e:99:97:6b:ab:62:ed:ea:
         fb:3a:8b:fd:93:51:00:11:a3:f1:d6:83:5f:00:c0:34:eb:3d:
         6f:d2:30:2e:5b:58:46:38:bc:52:55:24:ee:b7:7a:67:41:fe:
         27:be:56:57:42:3c:13:50:29:7c:a8:d0:20:7f:36:e6:4a:f0:
         d5:60:be:95:fd:10:62:ea:60:99:73:d5:cf:68:fd:fd:af:51:
         9d:05:d2:cf:af:da:03:ba:51:79:1c:af:a2:b7:8f:8f:11:89:
         df:45:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:43 2026 by rpki-client