Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa
File:                     D6D22DBC53CD11EA9301951AC4F9AE02.roa (raw, json)
Hash identifier:          runmHBxR1tD48gkbVs4lorKzW7FMtqLJ5VaCHiE1PLM=
Subject key identifier:   F8:6A:36:FB:31:71:71:F5:4D:47:7C:45:CA:CD:D0:CE:E2:8C:C2:F7
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0B43
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:46:20 +0000
ROA not before:           Mon 02 Jun 2025 19:43:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137934
IP address blocks:        103.117.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Jun  2 19:43:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4270c-cd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4b:6d:af:b8:72:ab:ef:f5:eb:be:bf:19:0b:
                    57:c5:0d:20:40:54:24:2f:3b:06:42:83:b4:63:9d:
                    2c:cd:2d:11:59:45:23:04:69:d0:83:39:5b:cc:c8:
                    f6:08:fc:be:dd:4d:e9:ff:83:78:fd:d1:93:67:0c:
                    6a:33:fe:91:77:99:d2:09:f0:4a:49:a4:cb:f1:d1:
                    92:f9:d0:1d:72:95:af:b0:c3:97:7f:f6:5d:f8:b7:
                    eb:88:38:da:55:77:b9:7f:0a:d4:f6:38:f5:12:29:
                    4e:04:27:ad:3e:f2:6f:93:81:4e:8f:44:17:3a:2b:
                    75:36:db:3e:8a:af:6f:39:99:a5:d0:7c:f0:d4:60:
                    c2:ff:28:dd:15:2d:06:3f:5a:77:85:b0:e7:1d:86:
                    bc:9b:3b:8f:57:53:a8:0d:a3:c1:d5:43:7d:67:63:
                    75:da:ae:18:34:38:f6:4e:01:bf:f4:a8:62:d0:c4:
                    5c:7d:e6:c9:f4:4b:46:01:0c:7a:2b:64:0a:66:cb:
                    fa:20:9a:17:0e:2e:c4:c6:47:25:a1:03:df:c4:e4:
                    f7:28:0d:c0:86:23:90:3b:7d:1c:47:a9:9c:09:61:
                    a7:94:7c:77:7c:92:0e:df:9c:c1:8c:ba:0b:77:73:
                    74:f9:2c:cd:fe:5a:4b:f1:e2:0b:a0:13:31:7b:dd:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6A:36:FB:31:71:71:F5:4D:47:7C:45:CA:CD:D0:CE:E2:8C:C2:F7
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:63:27:8b:eb:c2:3c:31:65:19:35:fb:a0:3e:96:a6:15:14:
         3b:a5:01:cf:22:1e:72:f0:5b:fe:56:93:1d:55:1d:af:14:8d:
         4f:c0:16:09:25:f2:6f:c1:cd:fb:a7:82:ab:93:f8:63:61:d8:
         df:08:23:f2:e3:22:6e:cf:67:ed:e6:31:4e:2d:6e:09:f4:0f:
         e9:06:4e:0c:9f:a6:26:0d:c7:ab:e6:4a:17:ba:d8:22:87:3c:
         14:d0:e4:b5:90:85:67:84:2f:63:5b:e4:28:51:85:63:a0:2e:
         5e:3e:a2:53:6b:a4:d4:b3:a6:37:63:19:3a:52:74:11:3a:8b:
         e1:a1:2e:e9:2a:e0:6f:a6:3b:b1:cd:3f:ce:3d:7f:18:44:08:
         a7:44:01:20:53:e3:7e:50:07:77:bb:99:95:e5:ad:05:01:9c:
         32:d2:98:9a:7f:30:1b:00:4f:e5:36:d6:b8:59:3e:72:a5:f4:
         9e:08:fd:9a:ca:e2:b9:52:2b:b4:88:a9:9c:06:19:e8:38:69:
         8a:d4:a1:36:3e:91:c1:3d:a6:40:9b:ed:5c:d2:aa:3d:02:f6:
         48:00:04:bb:04:a5:f6:37:7a:1c:3a:09:f4:07:b3:af:83:f3:
         6a:eb:cd:e3:1c:20:51:f1:0d:f4:ee:84:13:d2:74:72:f0:2b:
         88:ee:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:46 2026 by rpki-client