Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/55E37598C47511F0ACA5C266C4F9AE02.roa
File:                     55E37598C47511F0ACA5C266C4F9AE02.roa (raw, json)
Hash identifier:          bbo3wujRBFZR/I1e9XUJu0ggVku894tahXDxcT4fOHA=
Subject key identifier:   46:55:2E:BC:47:7E:BC:EB:A0:84:74:A4:4B:41:E1:1C:8B:F8:29:D6
Certificate issuer:       /CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
Certificate serial:       1320
Authority key identifier: 10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/55E37598C47511F0ACA5C266C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:20:32 +0000
ROA not before:           Tue 18 Nov 2025 11:54:28 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     10075
IP address blocks:        103.18.80.0/22 maxlen: 22
                          103.18.80.0/23 maxlen: 23
                          103.18.80.0/24 maxlen: 24
                          103.18.81.0/24 maxlen: 24
                          103.131.156.0/22 maxlen: 22
                          103.131.156.0/24 maxlen: 24
                          103.131.157.0/24 maxlen: 24
                          103.131.159.0/24 maxlen: 24
                          2403:cd40::/32 maxlen: 32
                          2403:cd40::/48 maxlen: 48
                          2403:cd40:4::/48 maxlen: 48
                          2403:cd40:5::/48 maxlen: 48
                          2403:cd40:6::/48 maxlen: 48
                          2403:cd40:7::/48 maxlen: 48
                          2403:cd40:8::/48 maxlen: 48
                          2403:cd40:a::/48 maxlen: 48
                          2403:cd40:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl
                          rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4896 (0x1320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C6FA, serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
        Validity
            Not Before: Nov 18 11:54:28 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47560-da14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:dd:69:46:5e:21:32:bb:0c:8c:c1:04:4e:
                    0d:dd:6c:32:ed:56:51:b4:29:81:de:b7:0b:93:fc:
                    5b:28:6c:74:0e:75:f1:b8:4f:8d:21:a6:c1:f8:89:
                    d7:26:49:92:26:0c:7a:64:2d:5d:b1:91:48:86:ee:
                    e8:65:9f:e1:8c:4d:30:dd:a9:38:fe:20:0d:a3:52:
                    4e:49:e9:07:c9:65:89:15:5c:19:c3:30:6b:9f:24:
                    23:9a:61:8f:ba:b6:ae:51:76:56:bc:4e:ba:63:94:
                    16:56:bc:c0:34:af:5d:9b:32:e0:95:55:cc:bf:cb:
                    12:7b:56:7a:a2:b7:28:32:64:aa:74:34:bd:fa:09:
                    7b:bd:2c:5b:28:56:9e:70:0c:4c:6f:ed:dd:0d:68:
                    bb:c3:f0:8b:70:a1:d1:c8:63:53:21:2e:07:e1:b8:
                    98:fe:61:01:2f:bb:9a:52:b2:a3:84:b6:c1:11:8e:
                    7a:88:63:40:d4:cf:92:a6:a9:1c:9a:14:dc:12:0c:
                    76:14:ab:75:88:dc:41:9a:87:3b:f5:ca:a5:0c:d9:
                    3e:e6:d1:34:43:a5:c2:f7:52:b8:ad:6d:dd:78:e0:
                    43:e2:35:65:0c:06:8a:96:0d:6d:cb:19:e8:18:4b:
                    38:7f:92:3c:e0:91:77:07:c9:ee:40:34:e5:0b:d2:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:55:2E:BC:47:7E:BC:EB:A0:84:74:A4:4B:41:E1:1C:8B:F8:29:D6
            X509v3 Authority Key Identifier:
                keyid:10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/55E37598C47511F0ACA5C266C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.80.0/22
                  103.131.156.0/22
                IPv6:
                  2403:cd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:5a:40:f5:9b:72:62:79:d7:8d:b8:d6:88:30:1a:fe:06:6e:
         b8:aa:7a:1a:11:d6:2c:69:6d:c3:04:fc:2c:a9:68:f7:40:0f:
         53:fa:65:ae:06:b1:22:33:68:a2:20:66:8a:74:b3:60:5e:0a:
         31:6e:fe:6c:14:78:d1:57:54:49:a2:68:8c:30:78:4d:8a:84:
         64:50:0b:45:90:94:97:f6:42:85:dd:fb:1b:1f:9a:4d:df:c3:
         64:02:f5:99:71:0d:7d:b0:dd:33:2a:8b:3b:27:75:76:f1:8c:
         df:10:b8:fa:95:3d:e6:e7:86:7e:0a:0e:4d:a2:b5:7b:23:69:
         56:07:79:d6:26:d9:15:7b:12:14:0e:fd:04:8d:62:14:e8:23:
         d5:86:35:a4:93:5a:b8:64:11:ed:19:bd:e6:92:d7:68:7b:34:
         25:62:46:b6:a8:e4:5f:eb:47:2a:18:86:31:ac:92:cd:00:3c:
         3c:02:cb:2d:17:5d:1e:dd:f1:7c:86:06:1c:ec:b9:68:e2:23:
         33:bf:de:12:75:a5:fc:20:6e:ad:2e:c0:c4:ca:58:d9:3f:37:
         a6:87:e4:6f:c7:48:1f:f2:51:79:87:ea:2f:0d:71:81:c0:82:
         90:ef:ce:6d:ae:77:76:b1:45:95:b7:2b:bf:33:c1:95:24:4e:
         b1:2b:fb:5c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICEyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM2RkExMTAvBgNVBAUTKDEwQzZBOTZBQkZFNTY4OUJDN0JERTVBQkU4QTY2RDk1
MjQ1M0ZCMTgwHhcNMjUxMTE4MTE1NDI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzU2MC1kYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA28zdaUZeITK7DIzBBE4N3Wwy7VZRtCmB3rcLk/xbKGx0DnXxuE+NIabB+InX
JkmSJgx6ZC1dsZFIhu7oZZ/hjE0w3ak4/iANo1JOSekHyWWJFVwZwzBrnyQjmmGP
urauUXZWvE66Y5QWVrzANK9dmzLglVXMv8sSe1Z6orcoMmSqdDS9+gl7vSxbKFae
cAxMb+3dDWi7w/CLcKHRyGNTIS4H4biY/mEBL7uaUrKjhLbBEY56iGNA1M+Spqkc
mhTcEgx2FKt1iNxBmoc79cqlDNk+5tE0Q6XC91K4rW3deOBD4jVlDAaKlg1tyxno
GEs4f5I84JF3B8nuQDTlC9JQ6QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEZVLrxH
frzroIR0pEtB4RyL+CnWMB8GA1UdIwQYMBaAFBDGqWq/5Wibx73lq+imbZUkU/sY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzZGQS9BMTdCMzNDMkQ1
QUYxMUU4OEZGMDUyMjhDNEY5QUUwMi9FTWFwYXJfbGFKdkh2ZVdyNktadGxTUlQt
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VNYXBhcl9sYUp2SHZlV3I2S1p0bFNSVC14Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM2RkEvQTE3QjMzQzJENUFGMTFFODhGRjA1MjI4QzRGOUFFMDIvNTVFMzc1OThD
NDc1MTFGMEFDQTVDMjY2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCZxJQAwQCZ4OcMA0EAgACMAcDBQAkA81AMA0GCSqGSIb3DQEBCwUA
A4IBAQCLWkD1m3JiedeNuNaIMBr+Bm64qnoaEdYsaW3DBPwsqWj3QA9T+mWuBrEi
M2iiIGaKdLNgXgoxbv5sFHjRV1RJomiMMHhNioRkUAtFkJSX9kKF3fsbH5pN38Nk
AvWZcQ19sN0zKos7J3V28YzfELj6lT3m54Z+Cg5NorV7I2lWB3nWJtkVexIUDv0E
jWIU6CPVhjWkk1q4ZBHtGb3mktdoezQlYka2qORf60cqGIYxrJLNADw8AsstF10e
3fF8hgYc7Llo4iMzv94SdaX8IG6tLsDEyljZPzemh+Rvx0gf8lF5h+ovDXGBwIKQ
785trnd2sUWVtyu/M8GVJE6xK/tc
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:20 2026 by rpki-client