Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/86312104899311F0ACB13D20C4F9AE02.roa
File:                     86312104899311F0ACB13D20C4F9AE02.roa (raw, json)
Hash identifier:          4R4HH9YkSknxkUbt13TnGXzzMtWUOqurt8XzdKRa/T8=
Subject key identifier:   C9:61:78:78:67:75:7B:A4:98:87:8D:F7:0F:1D:73:D0:16:BA:41:8A
Certificate issuer:       /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial:       025B
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/86312104899311F0ACB13D20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 03:22:49 +0000
ROA not before:           Sun 01 Mar 2026 03:22:49 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     147006
IP address blocks:        103.74.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
                          rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
        Validity
            Not Before: Mar  1 03:22:49 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3b109-221f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:f2:08:52:ef:88:f0:2c:96:9e:01:d0:1d:
                    e1:f5:97:43:61:57:a4:c7:9d:68:d4:1d:44:b4:0a:
                    a0:66:b4:05:4f:64:c8:bf:86:a9:e6:78:9b:a2:8d:
                    05:9f:6a:37:f6:a1:f4:96:b3:78:ff:13:9a:de:33:
                    5a:1c:00:80:01:b2:8f:34:05:6e:05:ba:c7:42:76:
                    05:bc:4e:1e:29:d9:29:b8:c8:32:4c:66:fa:72:7f:
                    4a:7e:51:87:7c:d3:09:b8:80:d9:08:f2:d7:97:fb:
                    ad:fc:28:0a:a7:86:5e:47:06:bf:3f:a4:a4:b0:a4:
                    0c:68:8d:57:61:2a:f4:07:76:78:96:de:02:fe:ce:
                    c3:8b:ab:5d:58:e0:94:02:74:48:01:a8:a6:4e:c9:
                    87:c6:2c:b1:90:8d:8f:62:e1:6b:59:3a:c4:39:80:
                    11:a6:0b:6d:3c:d8:1a:97:70:77:bc:fd:52:a9:0f:
                    7b:06:1a:2a:33:79:89:eb:c4:b2:ac:c7:90:bd:ff:
                    65:4d:f2:17:d9:34:8c:66:42:88:68:84:2b:69:e9:
                    af:e7:e5:27:d0:5b:2e:3c:84:9a:c4:ce:ee:16:67:
                    78:17:06:b9:9c:01:45:6e:a2:05:61:ee:d4:94:19:
                    c8:f6:5f:f5:a1:34:ed:f8:04:0b:c4:42:63:ee:61:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:61:78:78:67:75:7B:A4:98:87:8D:F7:0F:1D:73:D0:16:BA:41:8A
            X509v3 Authority Key Identifier:
                keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/86312104899311F0ACB13D20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:b1:06:03:24:79:a3:cc:2e:23:c8:bb:62:94:52:2d:47:
         ae:2f:1b:bc:49:97:1f:2c:01:52:fe:39:90:2d:38:bc:ef:40:
         e6:72:b3:b2:10:32:68:d6:3e:6d:c6:99:2a:6f:e8:e6:b5:76:
         ca:78:e9:40:78:b2:73:42:21:fc:db:08:79:54:96:83:22:84:
         bf:26:3b:84:41:d7:a8:59:36:c2:7d:a0:47:e6:5a:be:e6:72:
         11:40:2d:88:6f:95:82:1e:f8:ae:f5:ba:ef:0c:25:62:fd:8d:
         4d:12:34:e8:2d:8d:66:db:82:b7:e9:bc:ff:5e:76:14:85:50:
         8f:95:7b:52:2d:c5:cf:d0:77:7c:44:b3:75:4c:b9:16:a0:fe:
         90:23:86:06:cf:72:03:cd:49:13:6f:8e:86:f7:66:47:3a:b1:
         eb:ea:c8:a3:f0:4d:0c:1f:e3:ac:f9:fd:ca:c2:b5:e9:0e:d5:
         62:ce:70:33:de:2b:7d:c3:e4:25:13:29:a3:64:35:71:80:4e:
         4f:f2:55:3f:f7:28:d6:cb:59:0e:61:30:15:05:31:cd:d3:92:
         27:0b:75:9f:b8:29:45:43:30:66:74:63:43:f3:a9:f3:58:20:
         39:64:47:4b:47:10:16:eb:6d:31:ba:fb:69:0e:4f:43:e3:92:
         76:79:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:50 2026 by rpki-client