Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/F59959807A0511EDA112EF32C4F9AE02.roa
File:                     F59959807A0511EDA112EF32C4F9AE02.roa (raw, json)
Hash identifier:          rWEaU3X62dbPpbBeKKBVqa2rvAme+JAlDrUFb+kTgY8=
Subject key identifier:   36:F4:C9:EA:45:07:A7:67:5E:C4:7A:62:37:C3:3A:F3:36:B7:61:2B
Certificate issuer:       /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial:       0265
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/F59959807A0511EDA112EF32C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:58:27 +0000
ROA not before:           Fri 19 Sep 2025 03:08:36 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134524
IP address blocks:        43.246.168.0/22 maxlen: 22
                          103.35.144.0/22 maxlen: 22
                          103.35.144.0/24 maxlen: 24
                          103.35.145.0/24 maxlen: 24
                          103.35.146.0/24 maxlen: 24
                          103.35.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
                          rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
        Validity
            Not Before: Sep 19 03:08:36 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a41bd3-c4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:14:4c:4f:5b:04:1d:37:23:0e:15:3f:6f:
                    f2:b6:e3:f7:71:4e:a7:8f:39:be:e9:09:ee:dc:9f:
                    57:ac:35:92:c3:25:8f:97:d7:7c:50:65:9d:e2:cf:
                    55:f9:b4:ee:5c:b6:74:f3:52:c7:9c:f5:f0:ea:6c:
                    91:1e:ff:92:1c:f8:dc:53:52:ab:1d:1d:23:fc:98:
                    76:a7:35:31:7f:64:54:d5:bf:46:d5:92:71:79:38:
                    c3:7e:78:bc:23:7d:9e:ee:c6:57:98:03:d1:eb:9f:
                    c0:ad:4a:c2:cf:25:2b:99:36:ff:78:2b:0d:9a:5f:
                    15:79:0b:de:ff:dc:eb:e7:f0:82:0b:91:56:33:d2:
                    ce:54:aa:b3:bc:45:5f:38:96:48:65:b3:a3:3a:e5:
                    98:86:a4:e0:27:31:0d:76:c3:e7:a6:4b:54:fa:c9:
                    64:2a:2b:30:01:82:01:13:f0:bb:a8:cb:d1:05:5c:
                    e5:fc:86:9c:96:f2:3e:07:dd:92:6b:08:ca:fa:1e:
                    89:34:d2:87:64:c0:a5:f5:00:8a:14:c5:ab:cf:5b:
                    3c:55:41:22:84:c4:35:87:5a:d1:21:2c:1d:a7:de:
                    c0:da:07:06:ab:b3:35:77:0e:49:ae:3d:94:24:fb:
                    65:ec:6f:3d:9c:67:93:33:dc:e2:be:c0:2b:9a:95:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:C9:EA:45:07:A7:67:5E:C4:7A:62:37:C3:3A:F3:36:B7:61:2B
            X509v3 Authority Key Identifier:
                keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/F59959807A0511EDA112EF32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.168.0/22
                  103.35.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:1d:dd:71:a1:41:e2:69:f8:31:89:f7:20:74:41:89:45:
         e4:15:76:60:3a:64:fc:63:2f:53:78:6a:c7:1f:85:5f:f1:ae:
         64:1e:ab:d9:d1:95:b2:fd:5b:a2:94:09:2c:11:5a:e0:49:00:
         8c:d6:dd:f3:e4:e2:7a:9d:73:87:08:f7:42:55:ce:cb:51:ab:
         d6:25:04:44:a7:de:e9:6d:0d:8e:8b:cf:a7:53:87:35:ca:5b:
         74:7f:cf:a7:ea:b8:30:b9:62:76:d0:3f:f6:7f:00:4a:c9:70:
         1b:87:36:fc:85:68:a8:b1:b1:e4:db:97:d1:cb:ff:d6:60:6d:
         2e:1a:f6:5a:6f:d8:72:95:f8:4c:1d:e5:5a:a3:0b:9a:d3:af:
         36:57:51:f4:cd:5b:f2:52:60:75:31:e2:8d:5f:60:03:a5:9a:
         eb:43:37:9d:5f:f2:8b:8a:2a:b7:cb:e2:1e:d2:50:de:e6:c5:
         5d:a1:1a:40:6a:48:39:27:b1:e4:7f:23:d0:e6:d3:1d:fc:09:
         7f:20:6c:98:1d:d3:bf:c2:e4:4e:cf:72:70:5c:7f:c8:f6:03:
         65:3e:2f:d7:52:28:11:6a:94:10:4b:fc:e1:b5:b4:d0:5a:90:
         56:c1:81:d1:22:db:bb:38:14:b7:d3:f0:e7:eb:ce:8c:bf:6a:
         7f:52:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:43 2026 by rpki-client