Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa
File:                     B0EE80B28FBB11EAA0855C73C4F9AE02.roa (raw, json)
Hash identifier:          5aDrGDEFYNu7ffbk9UZWSu7Qf2Tr5ZhqxLOBkjSZqJQ=
Subject key identifier:   49:B3:3D:5A:F0:14:2C:4B:22:9E:D0:64:24:D6:5C:3B:ED:3F:59:15
Certificate issuer:       /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial:       0A24
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:10:47 +0000
ROA not before:           Wed 30 Apr 2025 19:59:20 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136030
IP address blocks:        103.85.128.0/24 maxlen: 24
                          103.85.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
                          rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2596 (0xa24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
        Validity
            Not Before: Apr 30 19:59:20 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47317-de46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:3f:d3:1a:33:38:dd:7e:c9:ed:c0:03:9d:
                    8c:02:bd:04:98:5a:e9:d4:ee:94:a3:e0:58:31:65:
                    b1:ee:e0:bb:37:42:eb:cb:6c:ad:1d:e5:6a:fb:7e:
                    6d:35:d8:22:c8:f7:3e:86:3a:16:85:ea:ea:39:8d:
                    03:b4:93:f4:7b:7c:24:ef:be:52:c4:81:8b:9b:ca:
                    db:09:df:4c:3e:54:69:0d:87:8a:13:b1:af:f9:8f:
                    f4:d8:f4:c6:94:6d:5c:a8:fd:1c:fb:50:fe:f6:e3:
                    d9:5d:97:69:04:ce:54:87:1e:af:a1:81:9e:33:5c:
                    2c:a8:4a:08:71:59:a5:29:9a:c6:61:03:b2:3e:05:
                    dd:9d:43:42:b8:e5:c4:62:29:d0:85:05:fd:21:e6:
                    07:dc:2f:98:0a:7c:4f:04:48:22:e6:81:99:2b:db:
                    94:1d:fb:45:b3:af:3a:d7:5e:80:9d:2a:cf:55:01:
                    d3:1d:93:f8:76:cb:39:ce:03:e0:90:b1:47:9c:98:
                    43:13:b2:09:7a:e6:d1:50:69:b0:3e:49:90:4e:88:
                    50:4b:b0:66:4f:f1:1f:df:74:1d:6a:ea:d5:28:67:
                    c6:70:74:be:0e:19:c8:f7:f7:ef:d9:e5:e3:82:fb:
                    f7:ae:a7:70:33:8c:14:16:23:8a:8c:3d:01:a2:66:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B3:3D:5A:F0:14:2C:4B:22:9E:D0:64:24:D6:5C:3B:ED:3F:59:15
            X509v3 Authority Key Identifier:
                keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.128.0/24
                  103.85.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:88:7c:6c:9a:30:48:58:ff:34:32:96:2c:d3:2c:67:c1:87:
         2a:f9:cd:cd:11:ae:b1:3a:ae:97:9e:aa:15:71:ab:f5:23:96:
         ee:53:55:12:d9:31:59:77:1c:24:af:e9:fa:d7:8c:6f:37:58:
         c6:0c:f7:51:0e:e3:02:23:4f:ca:24:4c:18:7d:69:ed:16:c4:
         f2:9a:ba:35:75:c2:b5:40:6a:91:dc:b1:7a:95:22:f0:cc:82:
         2a:d3:51:07:1e:21:c1:54:1a:24:9c:f4:cb:3a:b3:f6:7c:2f:
         ba:c6:fc:2f:24:26:40:1c:b4:c3:01:1c:62:5f:26:d1:72:59:
         7c:26:a5:91:27:56:9d:a7:c2:25:b3:21:2c:06:a5:24:2a:e0:
         21:88:c2:83:2a:6a:37:3a:ae:ee:54:18:34:02:85:73:31:8b:
         bb:74:12:dd:d6:bb:05:d9:68:07:b8:0c:3c:0b:08:21:3d:7c:
         7c:98:74:55:15:10:ee:e2:46:26:e7:d4:af:40:81:8c:15:61:
         7d:68:37:ec:f2:45:82:54:22:94:2d:55:00:41:09:09:30:1f:
         9d:5a:a7:67:bf:0b:52:e2:59:df:4b:9e:cd:1a:b7:51:74:ce:
         fe:e0:7b:da:22:4a:06:ea:e1:bf:2a:50:d8:82:9f:b2:82:1d:
         d6:75:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:47 2026 by rpki-client