Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
File:                     1F820766D66F11EAB2766134C4F9AE02.roa (raw, json)
Hash identifier:          jo2tlsDnQpDCJoIB4q0RoosjQ73xETRA4+QuzTTxC+8=
Subject key identifier:   47:83:6C:09:34:9B:27:D7:F6:B6:17:1C:85:5E:A7:17:6F:D6:39:D3
Certificate issuer:       /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial:       08AF
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:54:50 +0000
ROA not before:           Wed 20 Aug 2025 21:01:52 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     58456
IP address blocks:        103.5.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
                          rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
        Validity
            Not Before: Aug 20 21:01:52 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4290a-e9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:9d:aa:4c:3c:2c:9b:fe:19:07:d2:cf:53:
                    bc:2a:89:6c:f2:d9:37:49:1e:0c:91:95:b2:72:5b:
                    72:94:f6:1d:17:0f:28:da:f5:9d:2e:41:ac:36:69:
                    50:57:fb:c0:ca:97:8a:b4:4e:8b:4c:d0:fd:19:a4:
                    1c:a0:e6:40:af:0b:84:36:da:fa:ef:6d:4d:14:18:
                    7d:64:7e:bb:cd:4f:90:5f:a6:31:ff:6d:da:e9:9b:
                    c4:ba:5b:55:71:f9:c8:45:40:15:b6:8d:f8:96:bf:
                    77:33:49:55:ca:d3:12:0c:81:db:7e:70:e5:39:f9:
                    fd:aa:e3:96:d4:7c:69:62:86:c7:1f:54:dc:3d:b4:
                    b0:69:22:56:9c:2b:7f:96:ad:0c:51:2d:00:67:a3:
                    1b:c4:2f:92:02:6d:00:40:25:a7:2f:fc:68:95:17:
                    1c:ee:04:2e:02:01:05:10:e9:07:d3:01:30:53:44:
                    46:a2:6b:00:4b:14:1c:0e:9a:52:5c:ba:d9:17:ee:
                    d3:d8:4e:37:30:f9:56:a0:fe:0d:c0:6e:a6:b7:13:
                    fa:51:25:a9:3b:a0:e7:c1:9f:16:ba:a2:9c:11:96:
                    4d:5e:fc:b4:7b:7a:d8:ff:7d:20:ed:e0:e0:23:aa:
                    55:e6:a6:74:87:85:61:15:c2:a1:50:7e:5a:10:ff:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:83:6C:09:34:9B:27:D7:F6:B6:17:1C:85:5E:A7:17:6F:D6:39:D3
            X509v3 Authority Key Identifier:
                keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:46:07:83:2c:ab:fe:7f:b5:ed:e0:51:2a:32:e3:d9:4e:95:
         57:7a:b4:a7:ab:11:98:ba:02:e5:b4:52:af:cc:09:86:21:80:
         6b:93:fd:f8:41:63:d5:de:a7:bb:64:e2:b4:35:23:41:79:c3:
         81:f2:d5:4e:ef:c9:fe:9f:cd:10:7b:b2:07:13:dc:2b:68:c4:
         98:72:c4:86:22:0d:2f:ba:89:03:93:df:fd:ce:2f:ef:6a:e5:
         fa:7b:00:9b:0e:97:64:cb:0a:3f:23:65:1c:bf:4a:6d:c7:c7:
         9d:9d:b8:57:72:47:ac:42:4b:8e:7a:33:cb:87:4a:d5:67:06:
         1c:48:b4:ba:57:4a:83:0f:4f:15:50:a8:0f:49:ed:20:57:b0:
         8a:e6:9e:b2:e3:21:1f:13:24:13:32:5b:05:62:47:5a:d2:4c:
         95:55:54:73:b8:0d:2e:59:22:ec:2a:31:3e:e4:fb:cd:3a:5a:
         4c:54:46:1b:ab:b3:a7:33:c5:e9:d2:6f:7b:d9:5a:c8:89:e3:
         ef:72:c3:ae:07:2c:db:d0:97:0d:66:d5:d5:cf:c9:b2:3e:af:
         53:95:f9:d8:e6:6f:97:0b:f9:2a:19:77:f5:f0:5c:a9:cf:c2:
         82:7f:02:9c:71:6c:dc:b5:96:f9:10:c1:c6:bf:4d:22:77:69:
         51:2a:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:51 2026 by rpki-client