Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
File:                     EC7B7E82DFD811F08F00FF64536F56BC.roa (raw, json)
Hash identifier:          GBcRPAk26rh6dyuaJcennk1M9baT+ZU2RXBW85It44s=
Subject key identifier:   48:6F:6B:C7:C7:5A:3C:9B:C4:BA:7F:8F:23:2B:1F:90:20:23:81:33
Certificate issuer:       /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial:       05D1
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
Signing time:             Mon 30 Mar 2026 23:29:58 +0000
ROA not before:           Mon 30 Mar 2026 23:29:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141727
IP address blocks:        103.162.204.0/24 maxlen: 24
                          2001:df5:fb80::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
        Validity
            Not Before: Mar 30 23:29:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cb0776-2698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:57:b2:f3:59:99:9b:2e:ea:39:fa:5c:32:9e:
                    dd:7c:8a:12:e0:ac:ea:f2:01:dd:f0:8c:b2:96:9b:
                    0b:f7:c4:64:ee:2d:be:b0:e7:62:29:ff:f6:b7:f3:
                    e3:38:0e:5a:e6:17:7d:8c:66:87:73:e5:d9:ac:3d:
                    09:7b:96:c1:ba:19:b3:e0:b9:5e:48:9f:06:44:c7:
                    a6:6d:d0:41:d3:c3:86:34:c2:fc:b5:21:4a:47:93:
                    c6:13:af:ac:6b:6c:94:da:87:ad:9b:66:8d:74:db:
                    3b:47:7e:b7:86:22:bb:fb:4e:07:3c:65:4d:21:ed:
                    ba:5f:10:34:85:0c:12:a4:25:d3:3e:8c:9d:0c:b5:
                    35:51:30:53:67:b4:9b:cf:ca:ab:01:1c:a1:15:40:
                    12:d9:e9:44:a3:a7:ff:2a:8a:51:60:81:4c:c9:c0:
                    e0:a4:3f:f3:4f:88:d8:7d:d3:1e:62:9e:d0:42:df:
                    14:d0:28:2f:5f:16:64:92:f6:b7:24:34:25:60:7e:
                    85:f2:34:ab:fd:47:5e:8f:f2:83:ae:cd:a3:c8:82:
                    14:f8:89:76:5c:f1:f1:e7:7c:2a:41:f0:a6:8d:08:
                    7e:20:91:fa:b3:fd:d0:66:0d:41:25:80:34:1f:f4:
                    2a:27:ea:82:ee:65:59:75:e1:d4:0e:75:f4:65:29:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6F:6B:C7:C7:5A:3C:9B:C4:BA:7F:8F:23:2B:1F:90:20:23:81:33
            X509v3 Authority Key Identifier:
                keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.204.0/24
                IPv6:
                  2001:df5:fb80::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:b1:04:99:fc:7f:58:3a:5f:49:b6:2c:45:d9:79:fe:7d:
         a4:cc:09:d1:45:de:37:6b:07:ca:33:35:65:57:b0:72:ea:82:
         a5:07:22:e6:7e:36:25:ab:4c:31:2e:47:c8:36:9c:1b:51:60:
         b1:52:83:5a:40:87:06:64:f7:3b:67:3d:2c:72:36:8e:b5:9d:
         53:f2:1d:88:7f:d6:6a:06:c4:aa:fc:95:07:03:10:84:24:82:
         51:a4:b8:2a:6d:40:08:12:5e:89:27:14:09:b1:67:d3:78:6d:
         ff:74:34:29:0d:68:e6:9f:63:b7:55:be:51:f2:1b:2c:9f:33:
         0d:4f:46:4c:69:72:9f:e3:1d:ca:3b:39:cc:ec:89:41:17:bd:
         fb:ca:39:ae:5b:0c:1c:76:3d:4a:55:c8:4f:a6:35:14:47:fb:
         84:9a:1a:9c:f4:53:60:45:2e:50:4b:bd:d5:3b:eb:cc:a3:73:
         98:85:23:65:35:9b:9f:2a:d7:df:78:16:e1:a2:3f:2f:d6:ea:
         15:08:65:d3:63:a2:81:96:a1:c1:9f:28:95:cb:d4:2c:2f:6b:
         91:d0:76:d7:da:39:96:f8:38:f4:b2:9e:ad:5b:7f:b4:d5:30:
         1e:0c:31:2f:f2:4a:e7:e5:43:44:dc:15:a4:7a:35:bf:3e:18:
         d0:cb:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:17 2026 by rpki-client