Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa
File:                     63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (raw, json)
Hash identifier:          DwFRC5Q8naeDAzyAtmNxc5ykjCbZ/7NV7SU48cPZy64=
Subject key identifier:   89:D4:38:FC:9B:1F:A9:24:C2:70:16:7E:62:A5:81:E4:20:D2:EB:08
Certificate issuer:       /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial:       05E8
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:58:25 +0000
ROA not before:           Fri 14 Nov 2025 22:13:42 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133154
IP address blocks:        103.252.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
                          rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1512 (0x5e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
        Validity
            Not Before: Nov 14 22:13:42 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45411-afae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:d4:3c:dd:20:71:fd:11:39:f5:eb:5b:1b:
                    ff:8b:73:4b:e3:92:b1:34:b6:35:03:15:fd:08:dd:
                    aa:4c:94:58:12:07:4e:c0:dc:a1:8a:f0:78:d1:0f:
                    8d:5d:86:93:4b:6f:22:1e:21:98:2b:2e:cc:99:a6:
                    f8:50:d3:85:4e:1d:f9:fd:f0:50:5f:fe:94:93:58:
                    d0:e6:d6:3c:30:f4:30:59:90:ed:d4:71:25:8b:c0:
                    f4:dc:94:82:2b:f9:54:83:b3:22:c1:93:d4:31:2f:
                    88:bd:1b:8e:14:ac:95:29:03:79:f6:89:90:83:0d:
                    04:0c:2f:fa:83:5f:ed:29:5e:56:28:b0:31:6a:7b:
                    8b:c7:a8:af:06:76:93:cd:2d:67:44:b8:44:2d:41:
                    0c:60:07:a9:22:3e:7f:26:fa:2c:73:5c:13:a1:3e:
                    0b:89:1b:cc:97:58:cf:a2:2c:48:09:97:8c:0a:74:
                    f2:a4:d1:a6:12:4f:c9:96:33:8b:92:24:c2:73:40:
                    96:ce:e7:de:37:64:44:a1:25:0c:8f:a4:2c:d3:2d:
                    f3:02:e1:66:a9:9a:06:04:c7:03:c6:b1:fd:a1:2a:
                    34:5a:78:ab:85:49:d6:bd:be:fa:7a:dc:69:7e:72:
                    dc:4b:77:51:e8:f3:bb:8e:d7:d2:27:b8:6a:0f:a6:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:38:FC:9B:1F:A9:24:C2:70:16:7E:62:A5:81:E4:20:D2:EB:08
            X509v3 Authority Key Identifier:
                keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:b9:7d:b5:6a:da:15:cb:8d:90:4a:1b:73:bf:23:7e:16:
         f9:3a:2c:63:69:0d:91:a9:af:fd:4e:e9:d1:c4:aa:62:6d:b8:
         9a:16:55:99:10:09:31:4f:d9:38:df:78:ef:4f:1c:ed:17:05:
         b1:c6:b6:30:73:71:9b:c0:d2:74:c9:3c:d8:61:c2:d5:28:a6:
         9d:5a:c8:d5:5f:22:c0:41:f8:e0:fd:b9:d8:63:fb:04:3f:1a:
         9c:4b:53:2e:9e:21:cf:04:bd:2a:e4:51:3a:54:1c:20:a3:d0:
         7f:2c:be:30:d5:45:d6:c6:f5:fe:30:7a:11:b2:e2:84:40:23:
         f7:8c:41:4e:b8:a9:97:6f:65:ad:02:c2:80:2c:a5:d9:81:9c:
         6d:0c:97:f4:68:cc:a8:48:a9:9d:90:d5:0b:2c:2b:71:83:d7:
         8e:06:52:b8:b6:00:25:b2:76:9b:aa:43:a9:fb:a4:c7:d1:d7:
         c9:4e:1e:06:e0:d2:a1:7d:9e:88:86:8d:b3:93:14:65:54:af:
         14:5b:a9:ee:7e:04:b2:9e:73:19:ff:58:16:1b:5e:6f:f3:11:
         a2:58:84:cb:57:f9:9b:7f:3c:c7:c8:68:5e:45:d6:85:64:88:
         f0:ea:28:a2:2d:50:d1:0f:92:ff:ef:b8:28:54:90:99:02:db:
         34:10:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:47:15 2026 by rpki-client