Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa
File:                     676A2DE2564911F08353B443C4F9AE02.roa (raw, json)
Hash identifier:          ecnb3B//PetfjXKsXLiwuQ7U/4504jmNWHFH5xzzKKo=
Subject key identifier:   8C:D4:E3:B5:80:48:FF:B9:6D:92:9A:50:8D:5A:4E:A6:B0:6E:D6:FE
Certificate issuer:       /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial:       0B14
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:46:58 +0000
ROA not before:           Tue 01 Jul 2025 07:02:51 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153800
IP address blocks:        103.149.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
                          rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2836 (0xb14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
        Validity
            Not Before: Jul  1 07:02:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a42732-8ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:12:c2:a3:43:eb:89:ab:4b:cd:ba:05:b4:
                    6e:cf:12:18:03:2c:1a:63:cf:ed:42:95:9a:c8:75:
                    f7:94:c2:89:36:fa:f0:c3:a7:40:84:b9:5e:e4:79:
                    6c:a9:fc:2f:46:ef:8e:ff:39:d1:b7:05:22:3c:c5:
                    44:18:f6:54:fb:b5:40:e3:8a:c0:86:2e:8e:28:1a:
                    77:5c:21:c1:fb:cb:d4:3e:6a:0c:53:2b:10:c0:11:
                    64:bb:bc:06:12:6e:bf:fc:e5:79:47:ff:b9:72:07:
                    40:d2:82:e1:99:9f:58:7b:11:a2:21:fb:3e:46:ad:
                    82:07:30:71:df:58:a7:c5:a3:b8:a4:0e:9d:7c:35:
                    04:f1:65:78:95:32:0a:69:fc:de:ea:cb:2f:61:f8:
                    2e:ac:dd:4c:7c:a0:85:52:8e:c0:d3:30:b3:cf:98:
                    3e:68:9c:60:e0:48:ba:63:0f:65:ad:e4:b7:84:11:
                    17:2c:91:26:cb:81:c1:f5:63:f1:9a:37:ef:f8:62:
                    43:23:30:93:cc:ef:97:8f:41:33:e0:9e:d4:eb:d9:
                    1a:64:8d:c0:92:9f:0c:7f:c5:7f:ba:d4:e6:10:19:
                    61:57:a8:95:62:77:26:b1:a2:05:ba:83:fc:6b:a5:
                    d5:0a:ec:4b:72:84:4c:ce:ac:8d:aa:c9:b3:e2:01:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D4:E3:B5:80:48:FF:B9:6D:92:9A:50:8D:5A:4E:A6:B0:6E:D6:FE
            X509v3 Authority Key Identifier:
                keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:87:16:19:bf:6c:05:a7:d6:2a:0f:ed:8f:f4:6c:90:bd:
         7f:0f:d6:f3:14:7f:27:c6:91:81:4e:6e:7e:79:44:33:54:11:
         45:6c:d3:1b:35:a4:cf:47:3a:f3:be:95:7b:3f:dc:24:d6:e3:
         5d:ea:b7:4c:76:72:25:de:9a:ec:3a:b5:82:48:c6:9d:66:c4:
         fa:40:2c:e9:c2:a9:bc:90:22:06:eb:4e:fd:55:16:b5:1a:83:
         59:58:b0:b4:08:e4:da:8c:e8:06:00:0e:b2:c6:3f:0d:d8:8f:
         82:c2:a9:fd:07:a7:c0:00:c1:a5:49:e9:8c:24:9f:44:b2:f4:
         7b:ea:ef:4e:f7:31:af:91:82:69:e4:32:09:c1:04:48:2f:b7:
         49:7d:47:80:c7:fb:cb:2e:66:29:75:52:80:48:be:8f:74:10:
         16:74:38:58:a3:13:cb:ce:e0:96:12:c8:bc:d6:32:bc:11:5f:
         ee:99:a0:26:6e:9e:4c:77:e9:14:b2:69:c1:e0:6a:c9:c6:b2:
         5e:c2:fd:86:9c:6c:14:fe:c7:9b:de:bc:cc:8f:6c:44:95:47:
         47:dc:87:a7:f2:d9:a6:b2:91:ad:1c:e6:23:da:5f:e6:b8:48:
         12:b7:94:9a:d0:77:f7:39:a4:4c:17:6f:7a:f3:98:33:37:3a:
         9a:3f:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:46 2026 by rpki-client