Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/F908A568CD1711EB84E11B24C4F9AE02.roa
File:                     F908A568CD1711EB84E11B24C4F9AE02.roa (raw, json)
Hash identifier:          943YCQ0BPPVwVFIiiu3SQ73zJRB1bBdsLtyUQzPh8vM=
Subject key identifier:   24:10:6A:4C:DF:67:EB:C4:60:78:84:45:54:80:C8:0D:AB:01:08:60
Certificate issuer:       /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB
Certificate serial:       063F
Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/F908A568CD1711EB84E11B24C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:58:40 +0000
ROA not before:           Tue 12 Aug 2025 23:35:37 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55847
IP address blocks:        203.110.240.0/21 maxlen: 21
                          203.110.240.0/24 maxlen: 24
                          203.110.241.0/24 maxlen: 24
                          203.110.242.0/24 maxlen: 24
                          203.110.243.0/24 maxlen: 24
                          203.110.244.0/24 maxlen: 24
                          203.110.245.0/24 maxlen: 24
                          203.110.246.0/24 maxlen: 24
                          203.110.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl
                          rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599 (0x63f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB
        Validity
            Not Before: Aug 12 23:35:37 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a429f0-0ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:d5:5b:50:30:c1:b0:ef:c4:8a:66:bc:73:
                    2e:b3:e0:ac:53:fc:8f:11:0c:b3:3e:5d:ee:9d:a6:
                    27:2f:92:af:8a:27:5d:45:7c:c0:83:1d:ad:4c:94:
                    71:90:53:f8:74:9f:7f:56:6a:0b:f4:08:a5:a0:b8:
                    55:eb:2f:c2:e6:78:8f:f3:cb:79:fc:78:8d:2c:bd:
                    d3:ee:60:f6:e4:dc:1f:4b:2c:be:0f:a5:23:02:26:
                    b7:bc:a5:56:c6:70:57:d4:2e:1a:c7:c7:b9:39:a3:
                    f0:f4:e1:bd:fd:19:5f:b5:66:2d:47:a5:ff:5b:83:
                    37:cb:8d:0f:82:9a:7f:d8:70:7c:a4:f7:15:85:54:
                    2f:56:eb:a9:8a:93:e9:a0:04:2e:b9:ae:ec:62:90:
                    34:2c:e4:b0:17:1d:c4:fc:a0:a1:74:21:c3:fb:04:
                    7b:ef:92:2c:ad:19:6c:66:90:53:f7:24:36:bd:8d:
                    0d:a4:2a:60:75:82:ce:cd:ff:0c:9a:9b:cc:ec:78:
                    1f:ef:e8:05:f1:42:09:b4:37:c2:7d:f0:2d:3f:ea:
                    53:48:cc:27:b5:7e:de:27:f9:09:3a:30:2b:a8:c8:
                    a2:6a:32:01:51:f8:da:fc:68:06:2c:9a:1a:bb:65:
                    31:d8:59:20:9c:27:ca:07:1c:a0:42:24:5a:f7:4f:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:10:6A:4C:DF:67:EB:C4:60:78:84:45:54:80:C8:0D:AB:01:08:60
            X509v3 Authority Key Identifier:
                keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/F908A568CD1711EB84E11B24C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:2e:e8:f7:67:be:7c:01:8a:8f:76:47:41:b5:0c:89:ad:00:
         0f:9a:cc:29:6e:fe:5a:62:a1:ac:4b:ad:12:ef:cf:5f:b3:4b:
         60:0c:c8:7a:b4:fe:fd:92:c7:0d:84:37:48:c9:45:2e:25:27:
         96:62:0c:ff:d7:5b:a0:1e:5b:5b:a8:5e:06:0e:08:7a:44:82:
         0a:6a:3c:48:0d:65:b3:7f:20:a9:b8:d4:1e:72:06:a4:4c:3d:
         49:d5:8d:7e:11:8b:8a:77:f4:66:26:74:2a:0b:a2:f4:40:68:
         95:23:18:b8:0a:28:2d:46:23:7a:28:87:1f:42:22:9c:ae:29:
         64:f5:13:79:5d:8d:8f:dc:ad:18:3b:e7:14:65:f1:d1:f5:3d:
         54:10:8c:95:5a:2d:81:9c:83:a6:b0:7f:e4:3b:ab:22:39:af:
         a5:60:7a:b7:4e:46:2a:47:f9:5b:45:f0:46:71:5e:b7:4f:f7:
         8f:1f:df:90:be:44:1e:0f:30:04:42:2d:1d:bd:44:a3:04:10:
         86:f1:b3:b2:51:bb:a9:26:d7:47:f0:60:7a:4b:c0:f3:e5:67:
         b2:9f:1d:2b:b1:5b:64:bc:65:59:ad:7f:01:ee:e3:9d:38:8a:
         6d:bf:32:42:ea:53:1a:5b:a7:48:75:bb:d6:17:4c:da:0f:28:
         a8:34:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:02 2026 by rpki-client