Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa
File:                     552D155464A711ED99D40117C4F9AE02.roa (raw, json)
Hash identifier:          D5QNOEYZTaVxGTG0sg1pVADh30TxHcQUWw6CHAWGbF0=
Subject key identifier:   16:3E:FC:96:05:A0:28:0C:79:00:76:B6:00:C6:E7:79:47:0F:C4:08
Certificate issuer:       /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Certificate serial:       026B
Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:25:15 +0000
ROA not before:           Sat 31 May 2025 02:30:25 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137816
IP address blocks:        103.114.192.0/22 maxlen: 24
                          2402:d1c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
                          rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
        Validity
            Not Before: May 31 02:30:25 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e9db-9b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:80:1b:6d:7e:ab:57:87:e4:da:0b:ec:a5:
                    36:bf:9e:ce:81:d6:0e:39:c5:00:6b:f8:4a:95:b6:
                    8c:cd:2e:22:21:30:d0:a7:34:e2:a0:ce:18:29:13:
                    a4:a8:93:1a:9d:00:1b:7d:d0:86:6d:65:2f:07:a1:
                    9c:4a:7c:85:20:03:e3:5a:f1:a2:96:c0:6a:bd:88:
                    7a:e5:68:26:af:97:8d:98:98:f4:11:26:6c:45:f4:
                    fd:03:35:ba:02:3a:de:8b:2d:6f:56:8a:15:b8:51:
                    a9:fb:6f:d5:7f:45:40:e1:ff:2f:3a:c6:7c:3a:b3:
                    35:af:5e:ef:78:b1:de:08:46:91:fb:1e:cf:0e:b4:
                    69:85:e7:a5:a2:5b:0d:a3:0b:0f:8c:89:5a:95:ed:
                    90:aa:a0:8a:d1:01:ef:29:e4:64:5b:f2:f0:ba:6f:
                    a8:1a:81:81:19:9e:34:0a:2d:f6:69:a6:c2:71:e5:
                    61:07:d4:50:53:90:73:70:a7:00:bb:38:a9:43:46:
                    a5:e5:21:fd:bd:ee:64:2a:6e:98:dc:33:d6:20:45:
                    f7:27:2c:64:90:2c:38:c1:32:e7:10:bd:d1:ff:9c:
                    a9:7a:89:9d:56:d4:14:05:bc:a2:d5:42:8e:53:d3:
                    cc:bc:c5:ca:ea:23:17:6f:c6:cc:17:9f:4b:1a:55:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3E:FC:96:05:A0:28:0C:79:00:76:B6:00:C6:E7:79:47:0F:C4:08
            X509v3 Authority Key Identifier:
                keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.192.0/22
                IPv6:
                  2402:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:be:a5:28:5d:05:50:98:1f:95:4a:eb:e8:9e:9b:99:90:b7:
         72:2c:82:d5:02:85:ac:e7:4c:4f:e4:88:13:cf:32:ed:ea:ae:
         3e:13:39:da:7f:40:07:f6:bc:eb:86:ba:8d:d4:94:3b:d7:98:
         aa:d4:c6:88:b7:3b:8d:c4:25:05:81:74:fc:9b:b5:41:f8:58:
         a3:70:c8:81:25:7d:47:87:b8:85:3d:d8:59:40:a8:7a:7e:bd:
         66:45:27:90:54:55:af:11:64:9d:54:69:64:4b:e6:be:4d:1e:
         aa:ae:93:c4:83:d6:41:e5:37:34:13:11:50:87:2f:4d:64:f0:
         4b:cc:b8:61:0f:08:00:5f:43:b2:e7:ed:17:9f:f5:fa:39:25:
         a7:f1:c4:3b:f3:89:7e:c7:16:25:19:0e:91:23:90:6e:78:0f:
         72:a3:9a:5f:b8:ad:e7:b5:14:62:78:7b:35:32:ef:f4:9f:29:
         d9:ab:58:54:38:01:de:36:41:89:54:a3:9a:c5:00:7b:f5:9d:
         0c:0a:fb:96:ce:2c:30:93:65:3a:39:66:8b:b0:9f:4c:9a:6a:
         59:bf:15:42:48:2e:4b:22:98:62:ab:18:f3:61:29:4e:68:30:
         b4:d4:07:1d:ac:44:d7:45:23:32:1a:34:38:6b:c6:d9:a4:13:
         8f:19:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:19 2026 by rpki-client