Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/BE82D1863DAC11EEB6C9226BC4F9AE02.roa
File:                     BE82D1863DAC11EEB6C9226BC4F9AE02.roa (raw, json)
Hash identifier:          zcqW/ZXB+9LNht1rDVWtc7/J4aWwiJffD6rwYXfDvmM=
Subject key identifier:   B4:14:7A:07:F4:A9:EA:3C:8B:C1:BC:AF:88:53:B4:BF:2D:A6:53:DB
Certificate issuer:       /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Certificate serial:       1FE6
Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/BE82D1863DAC11EEB6C9226BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:28:33 +0000
ROA not before:           Sat 12 Apr 2025 16:24:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58516
IP address blocks:        103.247.138.0/24 maxlen: 26
                          2001:df0:295::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
                          rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8166 (0x1fe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
        Validity
            Not Before: Apr 12 16:24:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a422e1-a975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:89:d5:6a:78:33:ba:ef:64:34:2c:e7:a8:
                    e4:66:7b:87:ad:b9:19:f4:04:30:4e:65:2d:e9:1f:
                    f0:ae:a4:01:d3:08:1b:14:56:1a:50:36:0c:a1:77:
                    3d:21:0f:07:64:13:34:86:53:73:dc:b7:e7:32:68:
                    34:36:a9:55:9d:da:d5:97:d5:8d:00:1e:5c:11:5b:
                    43:cb:b9:43:1b:13:6a:81:ef:82:99:13:12:af:36:
                    50:1f:31:50:80:72:11:50:08:f9:c7:1d:d5:11:a9:
                    08:fc:2b:55:1a:49:68:76:10:fd:89:6f:10:2a:2f:
                    dd:12:8e:e7:ea:92:49:c8:f8:b1:bb:85:ef:9e:66:
                    1c:0d:f3:48:72:8b:7e:a7:b8:fe:5c:28:ab:39:53:
                    49:6c:ac:53:ed:ae:61:61:a1:48:c4:b0:cc:06:91:
                    d0:d7:08:8b:6e:c8:25:e6:a3:69:03:e2:82:ab:c2:
                    f7:32:43:f9:f2:7c:77:84:e0:c4:86:4b:eb:c8:85:
                    3a:ba:8a:df:bd:e4:8b:c3:ee:36:4e:54:5f:d7:4c:
                    72:9c:9a:24:73:f2:a3:c6:12:8b:15:5a:84:fc:8b:
                    cd:e0:41:25:f7:d6:ab:1d:ca:aa:14:a0:2f:79:c5:
                    45:b3:f7:9f:11:ec:3c:f9:8e:17:18:af:d9:05:3a:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:14:7A:07:F4:A9:EA:3C:8B:C1:BC:AF:88:53:B4:BF:2D:A6:53:DB
            X509v3 Authority Key Identifier:
                keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/BE82D1863DAC11EEB6C9226BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.138.0/24
                IPv6:
                  2001:df0:295::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:c4:23:18:83:9d:89:f9:29:62:08:91:f2:fa:f9:24:3f:0d:
         b9:88:91:f4:c9:24:f8:d2:3f:1e:39:28:0d:71:55:04:b6:e4:
         93:7f:50:bb:96:07:44:5a:0b:76:ee:c5:3d:33:fd:d9:44:21:
         c5:48:e8:18:6c:01:b9:a9:cb:d9:40:9f:50:3e:8d:e9:fa:cf:
         d7:85:5b:5a:c5:46:97:29:03:bf:88:1d:9d:74:21:0f:91:b7:
         c3:13:88:55:b3:31:d0:9a:e1:7d:94:45:da:d1:3e:e5:ef:52:
         17:ac:c9:20:5c:7d:c6:be:df:9f:ea:af:bf:b5:f6:13:de:ee:
         6e:58:6c:09:44:f0:dd:c2:c4:c0:18:a6:dc:85:94:dd:39:73:
         93:9a:9e:86:6b:9d:b3:19:64:b6:70:39:4e:f7:ae:32:8b:31:
         b5:a5:a1:bd:64:3d:f6:cc:00:84:bc:28:ae:05:a3:f8:be:71:
         e0:8b:50:bf:af:0b:4a:7c:75:3e:23:ac:ce:26:43:2b:2c:bd:
         97:d0:31:34:41:8c:b3:d4:23:21:59:b6:6f:79:d6:97:67:67:
         97:43:81:57:b5:53:17:06:53:69:f6:53:08:da:88:3f:75:f1:
         4a:6d:68:ae:c5:8b:59:2c:8c:56:b7:2d:cf:7d:35:f1:82:5c:
         a3:6c:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:31 2026 by rpki-client