Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa
File:                     D31B3092F40911EA8A5C9E70C4F9AE02.roa (raw, json)
Hash identifier:          xE0G8jy0x1aFTqJiiedpm0HY07HDA+9aAMGkr13aJlo=
Subject key identifier:   83:DD:D8:8B:C0:5A:13:2F:AC:75:21:DB:8F:02:FC:BD:69:13:D8:1C
Certificate issuer:       /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial:       0873
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:43:36 +0000
ROA not before:           Sat 30 Aug 2025 21:42:36 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     63969
IP address blocks:        103.155.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
                          rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
        Validity
            Not Before: Aug 30 21:42:36 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45ea8-8fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:32:64:73:20:1d:94:25:1d:03:ab:4a:bd:
                    b0:24:10:1b:b5:a3:e6:fd:99:b1:7c:32:92:f0:6e:
                    59:22:66:1d:65:dd:25:9f:c3:ac:98:bf:bf:9c:b1:
                    52:bb:ab:1d:0f:d0:58:bf:e3:43:12:19:73:5b:e5:
                    aa:82:22:f5:b6:fd:80:d7:22:ca:77:e8:03:c4:6e:
                    73:e7:f3:5d:48:33:b3:88:b2:b4:26:7d:77:b4:15:
                    94:a8:1b:cd:06:b7:e7:9c:43:e3:f0:05:41:eb:e5:
                    42:19:42:84:e0:cc:6d:77:c8:53:b5:3b:2a:f3:d8:
                    a2:ce:90:ca:5a:2d:33:00:26:38:90:5e:e2:36:57:
                    4b:d8:72:12:af:62:dc:ee:2b:c0:59:01:e3:e8:f1:
                    e8:be:72:a0:6d:f6:72:5c:41:91:1a:c2:c5:43:b0:
                    e7:21:57:ca:d5:7a:ca:5a:e0:bb:4e:fa:47:0a:79:
                    f9:bb:86:e6:14:c2:49:fc:2f:53:2b:79:4d:8e:e1:
                    5a:59:ab:ff:54:95:5e:7a:55:92:92:fa:8f:f5:b8:
                    b2:b2:4e:5d:fb:13:f3:10:23:e3:bf:76:23:9b:00:
                    96:34:98:ff:01:f0:b0:f1:7c:71:14:4c:d4:03:62:
                    23:87:0b:bb:07:bb:ec:88:87:83:69:1a:c1:88:ad:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DD:D8:8B:C0:5A:13:2F:AC:75:21:DB:8F:02:FC:BD:69:13:D8:1C
            X509v3 Authority Key Identifier:
                keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:2f:a5:4e:37:98:7d:46:f8:a7:68:70:1d:2f:12:1b:e3:1e:
         5d:1c:03:df:8b:fc:9b:13:58:64:52:8e:3d:48:05:2a:e6:03:
         0b:f7:c1:35:fe:00:2b:8f:09:e8:64:9a:c9:11:f4:09:d9:2e:
         27:11:f1:49:3c:56:cb:af:ee:df:56:8d:1a:26:17:55:e7:43:
         42:23:70:72:6b:6c:42:46:a6:81:b5:e4:b3:07:06:a6:09:0f:
         0e:8a:43:e3:7c:ac:ec:07:48:3a:69:f5:7c:fe:8c:08:b7:cf:
         d1:26:0b:46:4d:50:76:04:93:2b:ea:d1:28:22:9f:c4:a8:9c:
         be:d6:f4:74:61:1f:5f:19:32:9e:35:37:23:cb:21:86:27:a7:
         c9:06:14:06:4a:29:59:76:7a:66:6a:64:fd:5c:07:16:27:e0:
         48:6b:9d:b6:83:5c:d7:67:4b:1c:48:a8:57:6e:bc:a3:44:60:
         f6:21:d3:f1:f8:58:9c:9d:fa:06:28:50:6b:ce:68:43:c5:b0:
         52:1d:c3:c9:df:2d:32:72:b8:d1:80:d7:5f:d7:4a:7d:76:5a:
         67:84:95:80:c2:73:7e:76:74:4f:54:17:e1:5a:b6:75:f1:5d:
         72:bd:1d:b9:63:55:2f:e3:c7:90:0c:73:48:03:2b:34:c4:fa:
         8b:bb:30:91
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0
MjFBQUU1RkUwHhcNMjUwODMwMjE0MjM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWVhOC04ZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0gYyZHMgHZQlHQOrSr2wJBAbtaPm/ZmxfDKS8G5ZImYdZd0ln8OsmL+/nLFS
u6sdD9BYv+NDEhlzW+WqgiL1tv2A1yLKd+gDxG5z5/NdSDOziLK0Jn13tBWUqBvN
BrfnnEPj8AVB6+VCGUKE4Mxtd8hTtTsq89iizpDKWi0zACY4kF7iNldL2HISr2Lc
7ivAWQHj6PHovnKgbfZyXEGRGsLFQ7DnIVfK1XrKWuC7TvpHCnn5u4bmFMJJ/C9T
K3lNjuFaWav/VJVeelWSkvqP9biysk5d+xPzECPjv3YjmwCWNJj/AfCw8XxxFEzU
A2Ijhwu7B7vsiIeDaRrBiK0obwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIPd2IvA
WhMvrHUh248C/L1pE9gcMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0
MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVEMkIvOEI2NzAwQTZGNDA4MTFFQTkwQUM1NjZGQzRGOUFFMDIvRDMxQjMwOTJG
NDA5MTFFQThBNUM5RTcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5t2MA0GCSqGSIb3DQEBCwUAA4IBAQDOL6VON5h9RvinaHAdLxIb
4x5dHAPfi/ybE1hkUo49SAUq5gML98E1/gArjwnoZJrJEfQJ2S4nEfFJPFbLr+7f
Vo0aJhdV50NCI3Bya2xCRqaBteSzBwamCQ8OikPjfKzsB0g6afV8/owIt8/RJgtG
TVB2BJMr6tEoIp/EqJy+1vR0YR9fGTKeNTcjyyGGJ6fJBhQGSilZdnpmamT9XAcW
J+BIa522g1zXZ0scSKhXbryjRGD2IdPx+FicnfoGKFBrzmhDxbBSHcPJ3y0ycrjR
gNdf10p9dlpnhJWAwnN+dnRPVBfhWrZ18V1yvR25Y1Uv48eQDHNIAys0xPqLuzCR
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:47 2026 by rpki-client