Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/89FDE0EAF51F11F0B37CE3A3596F56BC.roa
File:                     89FDE0EAF51F11F0B37CE3A3596F56BC.roa (raw, json)
Hash identifier:          J6sqcK9PMbCRqvKW2qybt86lcW9b54084Ji0qFsYxGw=
Subject key identifier:   F8:39:EC:79:B8:DA:94:B9:83:D9:7F:34:42:7B:C7:2D:01:88:21:7F
Certificate issuer:       /CN=A919F82C/serialNumber=D0DE88114A368E0A87776E9D7CBCAD2A60CD0B51
Certificate serial:       19
Authority key identifier: D0:DE:88:11:4A:36:8E:0A:87:77:6E:9D:7C:BC:AD:2A:60:CD:0B:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N6IEUo2jgqHd26dfLytKmDNC1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/89FDE0EAF51F11F0B37CE3A3596F56BC.roa
Signing time:             Sun 01 Mar 2026 05:41:55 +0000
ROA not before:           Mon 19 Jan 2026 10:13:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142563
IP address blocks:        103.151.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.crl
                          rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N6IEUo2jgqHd26dfLytKmDNC1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F82C, serialNumber=D0DE88114A368E0A87776E9D7CBCAD2A60CD0B51
        Validity
            Not Before: Jan 19 10:13:46 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3d1a3-289d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:48:33:6d:8e:41:9c:45:15:c3:4c:6d:57:
                    d2:5c:9f:2b:de:fa:e9:48:9c:82:1f:da:3c:b8:9a:
                    87:fb:0f:88:cd:90:7f:1b:cd:24:9c:33:e9:a9:10:
                    08:59:d8:44:f7:de:b9:56:a1:fd:a4:24:50:dc:46:
                    50:de:1d:f5:4f:26:65:2e:ed:d5:36:82:9e:96:94:
                    28:42:b9:23:e0:10:2a:02:a9:53:34:90:34:82:f1:
                    49:2d:2e:b7:ad:8b:59:36:96:42:42:e9:22:60:6c:
                    80:ca:61:a2:58:2a:a3:5f:f6:eb:c8:1f:f8:62:0d:
                    aa:5b:fc:a4:a3:6d:5e:21:97:82:6e:e1:f8:cd:88:
                    15:44:9f:d7:74:e7:30:43:3c:3b:14:9f:a0:d4:2c:
                    24:7a:f2:f7:8a:31:e6:3b:dc:b2:90:e7:6c:56:f8:
                    da:5e:21:96:45:12:f4:17:e1:01:25:a0:88:4f:42:
                    b1:87:9e:7d:ce:fc:d2:e2:01:6d:03:86:7d:94:a6:
                    c0:0d:fb:4e:55:fc:d3:5c:44:c5:d7:03:ef:db:77:
                    c9:b2:7f:34:9b:b1:e8:1b:a7:99:c6:da:48:3b:7f:
                    c5:cd:ab:4c:3e:ba:0f:dc:7c:c0:c9:1d:91:be:0a:
                    64:26:39:51:bd:af:e0:65:7b:33:e9:e5:18:f5:6b:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:EC:79:B8:DA:94:B9:83:D9:7F:34:42:7B:C7:2D:01:88:21:7F
            X509v3 Authority Key Identifier:
                keyid:D0:DE:88:11:4A:36:8E:0A:87:77:6E:9D:7C:BC:AD:2A:60:CD:0B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/0N6IEUo2jgqHd26dfLytKmDNC1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N6IEUo2jgqHd26dfLytKmDNC1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F82C/392215FCF51E11F0B8547CF0586F56BC/89FDE0EAF51F11F0B37CE3A3596F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:d9:e3:dc:d0:a3:83:61:05:9d:44:94:15:93:2c:c3:71:
         8c:49:cc:fa:a9:79:b7:a7:b1:19:49:fb:b0:06:c9:47:16:3c:
         2e:03:27:c0:0e:cf:2b:5d:65:c2:64:2b:2e:aa:d4:bb:09:eb:
         f0:6c:8b:44:28:94:10:dc:87:af:b4:6f:78:16:cf:d5:11:96:
         d4:68:ea:b6:b5:55:86:4b:29:93:06:cc:02:a3:dd:5d:be:10:
         87:ae:6d:e3:63:ee:7a:4f:e6:b4:de:45:57:c5:65:99:72:0e:
         41:8a:bc:60:c6:f1:f7:b6:7e:d4:7a:ea:77:65:3c:fa:85:e2:
         2f:cf:29:97:46:76:31:95:dd:03:38:59:99:93:49:06:8a:db:
         04:53:21:7b:a0:fd:06:af:5f:25:bd:2f:d4:7b:3d:02:7f:fe:
         30:98:c5:af:0d:dd:0e:8c:8c:8d:18:69:d9:5b:96:7d:24:e7:
         90:b3:fc:33:51:cc:ab:7c:33:15:66:cc:57:28:3b:29:1c:32:
         3c:9b:ff:85:f0:ef:96:be:2f:e1:3c:0d:cf:3b:ed:da:0e:16:
         32:1e:ce:9c:32:2a:40:ac:6f:55:87:9e:72:a9:16:1c:f7:77:
         7c:b2:b4:c6:db:f9:1f:55:91:93:0b:80:ba:b0:b7:75:95:50:
         df:17:27:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:44 2026 by rpki-client