Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa
File:                     05A179C2B02E11ECA990305CC4F9AE02.roa (raw, json)
Hash identifier:          Sp1tLOHgP1Vvckd77gK28KifubUUSmZqT6Sq31wKEBI=
Subject key identifier:   01:72:0D:B6:9C:69:57:EA:94:10:78:53:B6:C5:99:91:86:F3:90:BD
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       047E
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:49:40 +0000
ROA not before:           Mon 24 Nov 2025 23:15:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141181
IP address blocks:        103.155.184.0/23 maxlen: 23
                          103.155.184.0/24 maxlen: 24
                          103.155.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Nov 24 23:15:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a435e4-8622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:fe:6a:1b:85:1d:dc:36:b3:03:34:e1:1a:
                    f9:03:89:88:bf:fc:f8:97:9c:9e:08:c7:b8:19:86:
                    b1:07:ac:d7:86:31:03:9b:ae:9b:7a:11:ce:da:f1:
                    26:eb:3c:68:5a:ae:64:53:89:db:84:f5:bd:5d:50:
                    0e:b1:e0:6a:08:46:2f:6c:65:15:5b:d0:10:03:6c:
                    ca:54:4b:20:8a:80:c0:df:be:b4:dd:b6:92:35:98:
                    34:1c:2f:21:3d:2b:91:2e:ac:c4:b7:dc:dd:94:49:
                    80:71:ee:a0:3c:c7:3c:46:cd:38:10:93:52:9a:37:
                    8a:3c:a9:74:bf:29:93:9a:99:36:22:a5:54:f2:de:
                    42:02:2b:fb:5a:89:ba:72:e6:19:ed:76:bb:cc:f0:
                    9a:12:29:4a:5e:75:30:84:88:3a:33:79:63:70:97:
                    e2:b1:72:20:c1:f2:db:f9:00:24:5d:eb:25:73:12:
                    8a:49:a5:c8:4b:b9:e9:61:d9:4f:4b:ec:a6:cc:12:
                    6d:f2:ca:ab:2a:f2:06:66:26:26:c8:67:c5:44:05:
                    bf:09:35:f9:be:2e:bb:c1:e0:0f:4f:72:69:e5:d4:
                    c6:05:89:ad:91:f7:f4:41:e8:44:0c:ea:18:35:51:
                    8f:9a:9b:19:4e:32:e9:0a:b5:8c:4e:0a:29:5d:35:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:72:0D:B6:9C:69:57:EA:94:10:78:53:B6:C5:99:91:86:F3:90:BD
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:fc:4b:e0:99:a3:1a:b6:20:e3:31:74:87:18:e9:bf:8f:04:
         e0:3a:3a:5b:aa:34:de:70:7b:dc:fc:de:c8:e8:50:0d:17:41:
         03:0b:c2:eb:8f:c1:6e:8f:e3:0b:be:7c:1c:e6:2c:62:ae:61:
         4a:6c:19:45:76:87:64:73:96:ea:08:9b:31:d6:94:81:61:ea:
         21:94:14:34:30:53:ca:8a:04:90:9c:fa:38:2c:6b:2a:08:dd:
         14:e2:e7:34:f8:7b:0e:76:ca:36:0b:63:a8:75:fd:bf:70:bd:
         bc:68:b8:30:bc:2b:23:9d:7c:d4:e3:f7:8e:e0:45:fd:01:88:
         24:ae:a0:61:c3:3f:a8:9e:53:d5:b4:63:c5:dc:43:da:29:a3:
         1f:96:50:1e:c8:1e:30:a2:c1:f9:0a:92:7b:9e:f5:24:8e:17:
         75:e5:c1:a5:4c:ce:79:f9:2e:06:2a:6c:3a:15:07:6f:87:59:
         28:5c:ae:4b:7e:ef:21:c2:f0:fb:39:6c:6a:de:be:33:18:5c:
         97:2b:07:ec:70:3d:30:5b:83:56:ac:cf:4f:4c:13:94:47:e5:
         49:9f:a1:b7:79:d1:65:8d:55:da:d0:ae:78:e6:38:1e:fe:c2:
         61:f4:b7:10:ef:55:6e:76:0c:8e:92:bd:10:11:b3:09:06:43:
         be:48:bf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:17 2026 by rpki-client