Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/A48F17F6406411EF96445E28C4F9AE02.roa
File:                     A48F17F6406411EF96445E28C4F9AE02.roa (raw, json)
Hash identifier:          M61qd27ptIl4tr/PZhg8EV9ZMgEaQiibCuBb5jCASfI=
Subject key identifier:   A2:A6:12:D3:84:39:1F:A8:92:14:D3:3C:DF:55:E4:26:88:65:8B:A4
Certificate issuer:       /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial:       0138
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/A48F17F6406411EF96445E28C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:48:57 +0000
ROA not before:           Sat 01 Mar 2025 09:09:31 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     56067
IP address blocks:        103.30.124.0/22 maxlen: 22
                          103.30.124.0/24 maxlen: 24
                          103.30.125.0/24 maxlen: 24
                          103.30.126.0/24 maxlen: 24
                          103.30.127.0/24 maxlen: 24
                          2404:8240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
                          rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
        Validity
            Not Before: Mar  1 09:09:31 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a5a359-5069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:c4:f9:39:50:68:da:00:a4:f1:62:55:27:
                    33:81:31:6a:e1:b9:d0:d1:8e:be:7a:3c:a0:65:6c:
                    59:7a:69:f9:57:e2:23:7c:2a:e8:a7:e4:92:ec:de:
                    e3:06:89:16:68:fb:33:c8:c5:9c:8f:4f:9f:d4:63:
                    cb:02:a8:f2:18:e5:b3:f3:33:4c:b9:63:6b:bd:df:
                    f9:5b:a6:e6:32:62:ab:1c:49:f0:11:4c:17:c7:54:
                    13:fe:60:e5:b3:a5:51:0d:d1:78:30:e8:82:13:74:
                    e1:0f:b2:92:07:b8:1b:c4:77:09:78:81:61:ef:1f:
                    26:95:ea:a7:34:0a:05:5e:d2:75:f2:6d:3c:d3:1b:
                    49:8f:b0:1e:d6:38:7c:9c:a8:f2:1d:03:1f:09:b1:
                    76:c7:4d:13:57:5b:af:2f:d3:21:f8:95:db:d0:f5:
                    b6:a0:45:05:8c:4a:a5:78:5b:e4:04:9e:3f:e7:a1:
                    dd:d3:2a:05:38:9e:07:3e:56:ba:8a:d7:df:c7:ca:
                    be:e6:05:6a:f1:24:f2:19:e9:79:2f:d6:bf:6c:5f:
                    fa:68:e9:d0:01:d1:ee:0c:ec:22:68:ed:f4:d4:cb:
                    ef:5c:ba:41:56:4e:2a:45:8a:1a:ab:32:5e:6c:0c:
                    24:92:0a:2b:84:72:f3:4c:da:c3:1f:05:a2:c0:2e:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A6:12:D3:84:39:1F:A8:92:14:D3:3C:DF:55:E4:26:88:65:8B:A4
            X509v3 Authority Key Identifier:
                keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/A48F17F6406411EF96445E28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.124.0/22
                IPv6:
                  2404:8240::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:0c:b9:af:90:cd:d5:c5:5e:3b:fd:31:26:0b:af:e7:a8:94:
         70:22:b3:d4:89:b0:eb:44:41:77:b2:de:d2:31:2d:ec:85:5d:
         1f:7e:5e:bc:1b:b7:65:da:66:2b:c4:11:1e:29:d4:ca:e7:dc:
         ad:e9:d0:3a:3d:79:09:de:4c:43:f2:b5:b9:d7:34:8d:ab:2e:
         29:74:a4:1f:40:3c:39:0a:10:f7:51:3b:7f:4c:30:0b:7a:e9:
         36:32:c1:35:19:d1:89:2a:0a:d8:f4:97:69:a6:3f:d0:ea:c5:
         9b:4d:3a:29:7e:ee:1f:1f:4b:18:10:40:64:91:01:7e:3d:7d:
         3d:8b:b5:ec:62:ed:33:16:81:4b:8f:5e:9d:54:cd:2c:b9:ed:
         38:53:d7:08:a6:05:b4:92:10:4a:40:0d:cb:59:42:d7:ec:e8:
         9e:67:0a:26:88:bc:92:d1:a0:a4:72:b1:69:a3:2a:2b:a9:c6:
         ec:93:2f:8f:4a:b5:5f:9a:23:2a:bb:2a:c3:10:e7:75:41:58:
         8a:87:f7:30:3d:52:19:95:34:2a:4b:5b:4d:ab:3e:c9:b9:00:
         ef:6c:fa:07:4f:d1:54:30:d6:c3:a3:86:b3:7d:7b:16:3b:92:
         20:38:6d:0d:e7:89:27:bb:69:40:67:c1:f4:37:c3:9b:13:79:
         1f:56:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:12 2026 by rpki-client