Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
File:                     7A532A308E1D11EE9CC5535CC4F9AE02.roa (raw, json)
Hash identifier:          tqfm8VN716zf1zv8pnoSL1lDbOKXA/4mIuo6tNqb0hg=
Subject key identifier:   5B:E4:64:18:E3:7D:9D:BF:CC:45:6B:C8:E5:AD:59:BD:94:BA:3B:A7
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       05D5
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:59:13 +0000
ROA not before:           Sun 02 Nov 2025 23:43:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24499
IP address blocks:        103.123.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
                          rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Nov  2 23:43:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45441-324c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:e5:22:70:d6:63:e0:74:ca:62:b7:d4:d5:
                    7d:dd:d1:ba:b6:66:e3:b3:a2:4e:8c:ff:7c:39:ad:
                    74:0a:35:46:2e:7d:de:e5:28:2f:d2:79:29:80:a8:
                    c9:fd:8d:fe:58:69:e2:ed:19:4a:a6:db:e4:1e:13:
                    68:46:19:ff:8a:c7:f8:24:77:6c:be:9a:33:f2:b4:
                    ce:58:39:7c:1d:1d:02:be:62:83:ce:8f:30:bb:a2:
                    99:08:8d:94:c3:b1:d0:22:01:2e:4d:17:66:5d:99:
                    40:ac:be:b9:38:9a:41:4a:ab:e5:de:d8:14:c7:fc:
                    61:f1:fa:ea:6f:a8:e2:09:9f:4e:20:72:5d:ec:ca:
                    e7:8f:4c:7c:35:12:9f:59:6c:af:31:e6:13:bc:4d:
                    db:c5:1f:1f:74:43:9a:ab:24:5a:bb:60:6d:5d:98:
                    c0:cf:00:fc:37:09:5b:ac:f9:4f:90:4e:60:e9:02:
                    87:b9:53:68:f0:7c:1b:7d:79:06:70:27:30:d9:44:
                    97:6f:87:3d:0a:f3:8e:c3:57:3f:9d:90:3f:04:5e:
                    89:bd:ea:6b:3e:52:f6:18:fc:6b:68:85:7d:28:85:
                    ff:e9:93:f0:25:4e:30:1b:e6:56:ff:81:e1:d7:90:
                    74:8c:d4:f6:82:ba:5c:a7:84:61:fc:8d:ca:dd:01:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E4:64:18:E3:7D:9D:BF:CC:45:6B:C8:E5:AD:59:BD:94:BA:3B:A7
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:e8:ad:c6:cf:5b:e9:ca:97:e8:07:a1:bd:6d:48:9c:6c:4b:
         f4:41:60:c6:71:b7:3c:17:5c:a5:86:2b:54:1f:2c:7b:ef:ee:
         19:87:1b:79:11:08:d3:fb:3c:39:fd:5a:09:1f:35:c1:13:e1:
         d3:2e:7d:11:f3:8c:9f:3c:3d:37:fc:f4:ea:35:84:60:24:6a:
         b5:85:f1:63:6c:04:cd:5e:eb:2b:3a:ff:55:c9:33:4c:c8:be:
         bd:1a:31:e9:67:77:4d:e4:50:29:54:69:b9:63:a0:df:08:97:
         23:d3:08:0c:82:1c:77:7f:2e:94:0c:69:4c:4c:07:39:60:5f:
         50:df:bf:bf:48:40:bd:34:80:b3:9a:de:8b:c7:1d:0c:84:9a:
         51:63:33:93:be:2c:9a:81:44:da:7e:67:c0:92:7d:9c:1d:07:
         60:eb:30:09:3f:c8:29:5b:69:92:12:cb:9c:3f:85:81:bc:3d:
         06:0f:ad:3f:74:f9:3e:3c:d8:14:95:30:8c:a5:13:15:aa:ae:
         22:76:b9:9f:13:ba:e6:3d:ce:86:f6:0d:12:6b:ef:10:f7:aa:
         30:bc:21:80:a9:b5:34:8b:7a:69:59:22:68:bf:3e:ff:28:63:
         03:d0:96:a2:cb:3e:b7:bf:e9:32:74:41:ee:21:c1:5f:8c:aa:
         3d:ec:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:51 2026 by rpki-client