Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/B1D7938EC15E11EC9C718A0DC4F9AE02.roa
File:                     B1D7938EC15E11EC9C718A0DC4F9AE02.roa (raw, json)
Hash identifier:          CEhPrG7NEPUU+dLb+jSC6SEpeViY72/PdQAvCWxM9IY=
Subject key identifier:   FF:09:2D:54:83:09:F6:5E:DC:08:D9:A4:4C:6C:CD:B9:38:78:C9:8D
Certificate issuer:       /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial:       0414
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/B1D7938EC15E11EC9C718A0DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:24:26 +0000
ROA not before:           Mon 19 May 2025 00:57:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149791
IP address blocks:        103.186.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
                          rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044 (0x414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
        Validity
            Not Before: May 19 00:57:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44c19-3c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e8:1b:8b:40:61:31:df:e4:8f:b3:d8:20:15:
                    1d:47:d4:c3:c9:9a:46:cf:ed:b2:a7:30:f2:a9:f6:
                    6e:63:a9:d1:e1:d3:f7:5c:95:93:51:43:a9:22:99:
                    1c:bc:e8:f5:6f:c2:88:84:8e:52:29:0a:33:c2:33:
                    42:da:44:37:90:31:f0:d9:c3:34:d6:ac:cb:28:3f:
                    f1:01:17:8b:b3:ce:39:91:7e:c8:22:8b:1e:a5:95:
                    74:79:bc:0a:ff:1b:92:53:3f:bb:8d:e4:d2:cd:73:
                    93:c2:74:a8:c3:52:e3:c2:5c:8e:9f:e8:68:6c:6e:
                    41:97:c9:a1:45:26:38:49:2a:b1:65:ae:6f:22:8d:
                    9d:d2:80:fc:06:05:c6:a8:af:d8:e3:68:07:a4:34:
                    90:1b:7e:66:0e:6a:60:b3:82:f7:24:11:b5:04:09:
                    8a:26:c2:46:a1:b4:db:a6:df:06:9f:6e:8b:5b:06:
                    5c:23:72:8a:15:ef:56:51:d2:ab:09:f3:9b:0c:bc:
                    59:4f:08:e0:0d:eb:5a:de:c3:97:08:98:32:de:39:
                    40:4b:ec:6f:c4:0f:72:69:bf:7e:76:23:cf:54:0c:
                    64:05:40:d6:7e:33:7d:31:db:e9:c3:97:81:40:22:
                    00:09:5f:7b:70:a3:14:74:85:da:3b:cf:09:87:dd:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:09:2D:54:83:09:F6:5E:DC:08:D9:A4:4C:6C:CD:B9:38:78:C9:8D
            X509v3 Authority Key Identifier:
                keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/B1D7938EC15E11EC9C718A0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:c5:03:d0:4e:82:72:ad:ec:9d:8c:7b:cb:4b:54:f2:ad:
         56:5b:61:26:49:9f:b5:98:bb:fa:30:62:0b:8c:47:10:ae:a1:
         71:3b:86:0d:17:91:86:9c:79:78:03:cc:c1:cb:d7:ae:1c:5a:
         32:ce:68:87:0a:2f:8b:d0:ca:01:99:c1:94:21:37:cd:e8:9d:
         24:41:69:7b:a9:bd:23:f9:cf:81:6c:b5:29:91:3e:38:c8:98:
         ab:d1:e2:37:20:65:76:b4:de:47:ec:c2:12:6a:48:ca:30:9b:
         be:f1:f6:b2:1f:0e:06:3c:00:58:4b:31:95:7c:67:5b:7b:a1:
         fa:1c:5e:cc:c0:14:cd:16:3f:62:6c:bc:83:2f:7d:d6:af:78:
         c0:00:d5:96:3d:a0:c4:19:ed:47:d1:ba:b9:d1:9a:79:4f:b6:
         58:91:98:e3:6f:20:f9:57:a0:02:b7:2c:d9:a2:98:47:f3:15:
         7f:73:96:fb:d7:ff:a7:3f:e9:e7:eb:5b:c2:66:cc:38:03:23:
         41:62:f5:f7:43:77:1c:cf:0a:69:0e:31:2d:b4:4b:92:df:1c:
         94:84:5d:70:9a:9c:cb:9e:20:30:a1:2f:15:c5:36:8d:82:e5:
         73:69:67:e2:bd:1c:9a:03:86:a5:c7:57:c5:fa:77:b7:30:fe:
         c1:de:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:19 2026 by rpki-client