Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa
File:                     1B54858065B711EE93D6ED6DC4F9AE02.roa (raw, json)
Hash identifier:          RJJ5TtxisaxrsdKJrxokk1MUJk/sClMJ57OXkPbYyvk=
Subject key identifier:   EA:F6:FC:FF:B4:50:3F:68:28:97:14:20:63:D2:22:6B:F3:F1:28:58
Certificate issuer:       /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial:       0CEF
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:29:03 +0000
ROA not before:           Wed 18 Jun 2025 19:03:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137449
IP address blocks:        103.114.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
                          rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3311 (0xcef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
        Validity
            Not Before: Jun 18 19:03:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4694f-dc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:b7:a9:dc:39:7a:2f:4b:4b:f9:9b:15:d3:
                    f7:f9:2e:c8:08:36:c9:16:54:2a:df:90:93:1b:26:
                    e0:b0:92:b8:57:0e:e1:c4:f2:a5:8e:99:44:3a:28:
                    64:75:33:60:c7:99:41:a4:e8:74:0a:6a:3e:c5:68:
                    eb:86:b9:59:5a:57:f0:13:8d:58:3d:14:aa:f9:dc:
                    78:80:61:92:67:5b:d4:2f:10:17:29:08:cb:b3:11:
                    e5:6e:07:0a:73:fc:7a:6b:45:c5:7d:d9:74:a8:d1:
                    62:43:af:97:52:cc:93:f4:32:f6:37:f2:ec:c1:cc:
                    39:da:ea:a4:b0:13:8e:d9:de:fc:a7:5e:c9:32:02:
                    d6:b8:b5:a7:55:ff:71:b3:32:12:8c:71:93:8b:de:
                    58:d5:a7:1a:0d:77:a8:27:69:6b:65:0f:75:f2:da:
                    a4:d1:b3:54:ff:6a:40:e0:56:d2:28:b0:0e:a0:7b:
                    20:c5:68:2b:b8:d5:99:af:40:f8:53:54:77:55:37:
                    d0:81:6d:0f:24:d4:4b:b6:3d:4e:a4:7f:bf:0a:8e:
                    c2:2e:71:a4:6b:aa:45:75:f1:05:59:f6:b9:89:c9:
                    0a:c8:c5:e7:d2:76:43:eb:a3:90:0f:db:a7:2b:0d:
                    47:a5:77:52:50:03:d7:34:25:b5:88:18:9e:c5:35:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F6:FC:FF:B4:50:3F:68:28:97:14:20:63:D2:22:6B:F3:F1:28:58
            X509v3 Authority Key Identifier:
                keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:8c:23:a3:d2:3c:a4:fc:a5:b6:5a:54:9e:19:e2:64:55:
         e2:09:97:63:27:ba:d8:72:fa:8f:d4:94:bc:e0:20:b4:47:fa:
         ea:bd:53:cc:71:32:00:ef:17:a0:6d:c6:c6:4e:b5:6e:af:73:
         aa:9a:df:65:50:00:f3:d9:59:55:64:ce:da:61:76:b8:21:31:
         82:bb:2f:b5:3c:fa:41:96:cc:fa:e2:77:ad:ba:70:f8:18:ea:
         72:40:29:a9:a6:f5:86:92:8e:e5:89:5e:9a:81:83:78:34:b1:
         8b:da:e0:f8:d0:8a:ad:d4:b9:ca:14:99:a9:c8:d0:57:c5:e3:
         ef:c6:3f:50:78:fb:1d:ca:b6:b6:3d:32:7b:3e:64:1c:6d:e1:
         d3:af:dd:71:d6:ba:58:89:87:0b:cb:aa:2d:0c:18:c6:47:86:
         52:28:cc:be:7c:87:0a:39:24:0a:1e:a4:07:8d:fa:61:4e:c6:
         0b:93:bc:ee:94:52:44:8f:a0:5e:41:71:d7:ec:4a:66:60:a4:
         e7:b6:89:0d:d6:93:63:77:2c:f6:2f:f5:71:32:9a:84:30:3f:
         4c:23:ef:73:d6:d4:1a:32:f4:2f:6f:65:66:e5:3a:3c:a8:22:
         5e:16:43:d2:15:1e:0e:57:20:a6:02:e3:a2:5f:7d:22:ab:09:
         fd:d0:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:08 2026 by rpki-client