Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa
File:                     585745526BC111EEA163E774C4F9AE02.roa (raw, json)
Hash identifier:          RCbI/69LSKrQE3x05u/abOOobnm77I9syhgwGg/3j4Y=
Subject key identifier:   17:57:93:0F:95:2C:F5:22:FC:06:ED:C5:B2:EB:5B:E8:57:6B:48:97
Certificate issuer:       /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial:       01F2
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:15:36 +0000
ROA not before:           Thu 03 Apr 2025 04:01:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139580
IP address blocks:        103.6.212.0/24 maxlen: 24
                          103.6.213.0/24 maxlen: 24
                          103.16.180.0/24 maxlen: 24
                          103.16.181.0/24 maxlen: 24
                          2403:4f00::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
                          rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
        Validity
            Not Before: Apr  3 04:01:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a47438-aa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:20:83:47:b5:0a:ea:2a:cf:54:07:28:89:
                    40:f6:40:07:eb:b3:73:60:52:46:40:38:90:af:29:
                    6c:14:28:b3:f7:27:e9:70:80:cd:12:9b:5a:62:0c:
                    bf:9e:b1:61:09:c9:52:cc:45:d6:74:19:71:c4:79:
                    99:ff:f0:f0:52:ca:05:14:4d:88:1a:8d:05:2c:0e:
                    71:34:06:a9:1e:f8:45:c3:7f:bd:29:dc:61:80:52:
                    26:e6:50:17:15:9f:fe:92:d8:c6:4b:2e:f8:84:68:
                    8a:f9:f6:5b:84:08:98:00:14:4d:db:fa:2a:9a:94:
                    34:82:ac:d2:52:b0:b1:94:c1:ad:1f:66:6b:9d:2e:
                    54:46:38:04:6c:0b:99:fb:cd:2d:ba:b4:61:99:77:
                    aa:c2:7f:3b:45:72:22:f4:66:e2:9e:27:d4:d5:5a:
                    c4:07:88:88:d0:47:ab:57:4b:f2:1c:83:9a:b1:e6:
                    18:5b:ce:ec:91:3f:e4:15:18:56:dd:d0:8e:e5:a7:
                    ce:dc:9c:a7:48:f5:6f:ea:25:e5:05:39:c1:de:14:
                    cc:d7:c6:d0:36:68:7a:12:2a:a9:95:41:0b:2d:a9:
                    b4:4e:6f:1c:fc:ae:27:c0:87:1c:12:bc:ea:2c:a1:
                    92:3a:e7:86:9e:ee:55:18:60:30:c8:1d:2f:fc:73:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:57:93:0F:95:2C:F5:22:FC:06:ED:C5:B2:EB:5B:E8:57:6B:48:97
            X509v3 Authority Key Identifier:
                keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.212.0/23
                  103.16.180.0/23
                IPv6:
                  2403:4f00::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:56:cc:3f:aa:d5:89:41:26:e5:29:2c:22:32:e3:32:7e:7e:
         eb:ce:bc:c7:3c:ad:d1:9b:8e:2a:79:21:8a:3a:df:81:28:93:
         45:80:7c:c0:7b:b4:7d:12:dc:7b:83:c3:0b:82:be:72:76:0a:
         ee:54:c2:9c:bf:eb:45:ad:60:61:ea:26:1c:87:a4:66:2f:f5:
         41:b8:50:d3:f7:71:8f:b8:03:da:b8:b2:26:fd:21:65:a3:c8:
         1d:73:f8:8c:8f:bc:9a:5f:c0:06:48:a8:25:7f:cd:9e:a2:0f:
         43:85:26:7e:f4:21:6f:d9:67:f1:bc:5d:d5:01:4f:62:a1:b5:
         43:65:3c:1a:eb:db:c0:4a:51:a0:bb:bd:c8:7b:a5:3d:63:93:
         9a:81:c4:07:a0:ba:15:f9:f4:88:91:41:ce:e0:e3:91:6c:9b:
         09:bf:18:fa:76:4f:91:6e:8d:6a:f2:d0:58:b2:84:b8:6f:de:
         73:2b:ac:32:59:ea:54:02:a6:a2:fa:22:fb:5c:0d:e5:ed:68:
         b7:b8:c9:51:4f:aa:69:af:14:5b:55:ce:f3:c8:b5:f7:2b:26:
         81:ce:0d:a9:ea:9a:a5:c2:58:e5:72:34:c1:5e:0b:09:51:f9:
         1b:d0:c8:6f:0c:e6:15:b4:d7:32:f8:f7:8f:ba:b6:1e:f4:19:
         fe:c4:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:07 2026 by rpki-client