Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/7F4ED0A0B83011EFA5108619C4F9AE02.roa
File:                     7F4ED0A0B83011EFA5108619C4F9AE02.roa (raw, json)
Hash identifier:          zEKHnn7kjmEyBZ3InlOca451cVgvomjhZzdZmC7qrNo=
Subject key identifier:   3B:C4:3F:5D:01:7B:41:59:1D:26:19:FC:A7:E7:BB:32:08:5C:DB:1D
Certificate issuer:       /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
Certificate serial:       0205
Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/7F4ED0A0B83011EFA5108619C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:36:44 +0000
ROA not before:           Thu 15 May 2025 03:22:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137582
IP address blocks:        203.11.73.0/24 maxlen: 24
                          203.32.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl
                          rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
        Validity
            Not Before: May 15 03:22:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3de7c-0b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:4f:07:9c:bc:15:90:95:87:c8:cc:3d:12:
                    5c:58:ff:24:a5:29:75:54:e3:9d:ae:21:bd:5f:68:
                    67:ad:72:5a:7d:db:23:3c:00:91:8c:23:1e:2c:68:
                    ad:63:f4:99:ca:e0:43:60:f5:88:39:96:de:36:98:
                    60:52:c8:35:3c:60:36:7c:db:32:e7:32:69:4f:8c:
                    00:09:97:82:1f:d7:6d:22:dc:19:33:94:ef:15:33:
                    ca:47:ce:35:2d:88:42:74:03:3a:fd:c6:2c:62:08:
                    75:19:42:6b:76:b4:61:79:6e:f6:19:cc:de:ad:de:
                    bc:0e:84:ff:11:00:1e:5e:44:d2:b9:2f:ec:15:ec:
                    b1:0f:b5:90:0e:45:d4:3e:a6:0d:1f:f5:43:f5:b3:
                    21:2b:30:a2:9a:81:5e:f8:6d:b0:8f:76:aa:4c:b9:
                    2e:db:c3:d3:4c:ea:49:30:a6:07:2d:24:3d:61:b3:
                    e6:0c:02:c1:1b:29:94:69:1c:da:92:23:00:b3:60:
                    00:dc:c5:58:7f:d6:c2:86:4e:ce:36:76:28:da:c1:
                    75:ab:2d:6b:00:da:f7:93:05:61:86:ca:ea:59:5b:
                    b8:d9:8e:99:06:8d:b2:66:5b:00:9a:f7:af:79:b7:
                    f0:07:49:f3:cb:6b:57:1d:1c:95:28:78:2a:60:15:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C4:3F:5D:01:7B:41:59:1D:26:19:FC:A7:E7:BB:32:08:5C:DB:1D
            X509v3 Authority Key Identifier:
                keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/7F4ED0A0B83011EFA5108619C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.11.73.0/24
                  203.32.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:ed:5f:d9:28:99:1d:e3:3b:6a:b7:71:a9:e7:a6:a4:b4:
         36:a3:37:d7:31:0f:16:ef:37:3d:83:99:9d:a1:c0:16:b9:87:
         c6:06:91:1f:ec:c0:76:db:47:84:eb:a1:f2:1e:5d:bf:5f:e7:
         c8:d0:1c:97:05:b6:df:30:11:37:a7:c2:a2:54:e6:12:ed:28:
         dc:20:f6:fc:5a:f1:7f:a9:9d:22:b1:00:6c:f6:62:44:91:bd:
         85:46:e1:cc:88:90:cd:89:a9:17:3f:76:ab:a2:31:60:3f:e4:
         50:29:d5:1d:e2:c3:7a:b8:75:8f:37:83:b2:c8:66:d9:3a:d7:
         df:71:24:5f:a3:45:57:26:63:46:20:16:3e:a7:cf:0a:11:f0:
         c1:78:9b:95:ae:bd:4e:f8:3b:69:ff:d7:42:78:c6:60:02:82:
         27:e7:4a:ff:72:f0:4f:ab:8f:d2:2d:52:55:74:17:11:66:cf:
         04:7e:4c:61:0b:38:19:e6:de:7f:d9:cc:ed:3a:4c:c9:86:7e:
         9a:de:ae:3a:6e:52:51:eb:22:8b:20:ad:9d:07:d6:b9:e0:6f:
         ea:10:ec:15:a7:a1:05:2d:80:e0:bd:41:90:83:0f:c3:b0:96:
         8c:8f:12:d4:0c:d4:b0:55:27:5a:0f:a3:b7:c2:5d:d9:7f:20:
         10:79:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:40 2026 by rpki-client