Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/B054EA98BBF511ECAA816D52C4F9AE02.roa
File:                     B054EA98BBF511ECAA816D52C4F9AE02.roa (raw, json)
Hash identifier:          +OUonNoiyUOGF0f4Z3OGxLOQzJKSnBzUR9bxqdYodV8=
Subject key identifier:   D6:7E:EA:86:04:B8:D7:BA:12:67:E8:C5:98:A0:86:97:E6:85:82:6A
Certificate issuer:       /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial:       3561
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/B054EA98BBF511ECAA816D52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:58:28 +0000
ROA not before:           Thu 31 Jul 2025 15:20:57 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     63922
IP address blocks:        103.44.40.0/22 maxlen: 24
                          103.74.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
                          rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13665 (0x3561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
        Validity
            Not Before: Jul 31 15:20:57 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47034-4751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:dc:8b:6c:e4:1e:e0:7d:a4:1a:6d:10:28:
                    0e:64:0b:11:62:05:61:a7:78:8e:bc:ca:9a:ae:0b:
                    66:a4:ab:91:6a:d8:03:7f:7a:d1:57:31:d0:d9:93:
                    a1:7d:8c:30:2f:3c:e3:8b:c1:8e:a6:32:41:bf:20:
                    7e:d4:b4:41:ff:65:27:83:59:0a:ad:6b:46:0f:a9:
                    00:cb:21:44:23:2c:d6:3b:56:78:88:0f:e2:8d:d2:
                    dc:c6:81:c6:3c:16:75:b2:c4:22:23:fb:9d:b7:f2:
                    50:4e:5a:ff:e8:dd:26:ea:ed:c7:f6:52:6c:25:7d:
                    e1:e7:68:15:d2:c1:e2:13:1d:b3:24:a4:09:2f:17:
                    fa:6c:ba:8b:68:f8:17:12:80:48:62:28:bd:05:de:
                    67:13:a1:72:15:a9:1f:7f:a2:37:10:1b:3b:93:10:
                    31:fb:b2:69:de:c5:bc:f6:99:e6:c3:ec:ef:7f:df:
                    5b:8f:d7:01:90:8b:45:6c:9f:6f:6f:d8:c0:4e:0c:
                    9a:a5:54:81:1e:df:02:d3:6d:de:b5:77:99:06:d0:
                    75:3f:26:19:ba:4f:7b:35:df:f1:f7:02:af:f3:12:
                    f5:56:6a:e8:38:78:5c:08:dd:51:6d:48:30:96:88:
                    b7:36:c1:4b:04:98:f2:ce:03:3a:0f:14:b9:41:cf:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:EA:86:04:B8:D7:BA:12:67:E8:C5:98:A0:86:97:E6:85:82:6A
            X509v3 Authority Key Identifier:
                keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/B054EA98BBF511ECAA816D52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.40.0/22
                  103.74.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:be:15:61:64:95:7c:57:ef:92:6a:9c:5e:14:71:29:a5:f6:
         eb:db:56:15:cb:15:88:23:51:ff:56:08:2a:de:20:a4:72:f0:
         86:29:9a:9d:99:7b:e2:11:e0:4c:91:35:13:74:67:ec:1d:51:
         8d:59:36:25:4b:ab:71:fb:5a:e3:5e:83:26:d2:c7:29:17:38:
         af:89:d7:b7:df:9c:3b:0e:e7:4b:d6:9f:a6:f9:c1:b7:06:49:
         b5:e6:9b:5c:fb:f9:1d:ed:b9:4c:7a:06:6e:f8:33:43:e7:c7:
         5e:cc:53:fb:d6:3c:88:a7:6c:3a:f7:08:8d:7e:da:dc:06:e8:
         b6:4b:a1:ac:5e:55:1f:41:ca:42:fd:28:f1:72:b6:cf:4f:25:
         01:44:45:ec:8b:9b:88:18:b3:eb:8b:5e:9a:82:55:07:5f:20:
         c3:a2:25:7d:0d:3f:65:56:03:a3:78:4f:99:4c:8c:c3:40:61:
         19:86:44:d7:73:d5:84:5c:11:0e:6a:af:57:dc:0b:26:bd:4f:
         c0:59:1a:62:ad:ad:b8:88:3d:b4:61:ac:a7:a1:ee:39:93:e0:
         c4:2b:15:01:fd:37:cf:5a:55:f1:db:57:5f:e5:54:ae:b5:51:
         15:29:1c:29:a0:9e:3d:1a:85:a0:56:a7:f4:60:d0:49:75:3f:
         1c:8f:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:08 2026 by rpki-client