Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa
File:                     8224E55C345F11F0BD514C6CC4F9AE02.roa (raw, json)
Hash identifier:          k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=
Subject key identifier:   E1:A7:07:52:53:F7:06:EC:C6:50:D6:62:0E:76:9D:38:93:85:C1:1F
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       11EA
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:16:54 +0000
ROA not before:           Wed 20 Aug 2025 17:57:29 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152918
IP address blocks:        103.149.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4586 (0x11ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 20 17:57:29 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48296-cb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:63:ee:46:3b:eb:f4:11:d0:fb:d9:19:ff:a6:
                    d8:d1:d6:0f:96:a8:48:12:8f:98:22:db:68:36:2c:
                    88:a0:eb:3a:5a:5d:85:00:e6:30:cb:ed:15:6d:4d:
                    a8:59:a9:98:69:3e:38:4a:64:25:a4:fa:2b:63:d2:
                    26:36:53:d5:e3:aa:f8:82:3b:39:2d:55:8a:45:50:
                    57:4c:e5:b4:95:fc:10:5b:e0:6e:4c:51:43:98:27:
                    a6:c6:5b:21:6b:fa:f3:be:38:d7:7c:0f:c7:bb:be:
                    d5:b7:88:7a:89:43:36:10:91:32:b1:a3:56:03:34:
                    ff:fa:45:0c:a6:fd:55:27:2c:5e:ba:f3:d6:ef:0d:
                    11:04:b5:7d:3c:7b:ea:1f:09:95:38:1e:49:7a:06:
                    8d:f3:26:ee:58:b4:3a:6a:51:b1:5c:31:25:69:da:
                    a0:42:33:60:e4:82:d4:08:46:32:f7:4c:2b:9c:17:
                    82:b9:8b:74:3a:24:78:6f:1f:6f:26:dd:05:fc:6f:
                    e0:fc:08:15:63:32:ef:c1:ae:5b:52:f0:86:5d:36:
                    16:e3:cc:76:8c:f1:65:9f:15:79:de:7e:dc:fe:5d:
                    b9:a8:23:85:44:11:8d:14:50:36:0e:d7:a0:4b:39:
                    db:95:12:a5:39:3d:63:78:44:e2:f6:0a:a6:52:73:
                    09:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:07:52:53:F7:06:EC:C6:50:D6:62:0E:76:9D:38:93:85:C1:1F
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:53:bc:04:b9:4f:7c:a5:ee:2e:d5:2f:a4:bf:34:48:c7:35:
         e4:90:5c:55:38:b8:fe:6b:aa:ce:94:ba:c3:6e:ef:39:1a:f1:
         20:37:fb:d1:9e:8e:52:f3:30:aa:4b:d7:db:92:1e:ad:ca:2c:
         ec:ed:52:89:47:82:a6:68:a1:19:33:de:ae:0f:4f:bf:bd:56:
         ff:8f:d4:83:3b:02:a2:56:17:e3:a2:19:3d:dc:35:f4:1a:d7:
         32:6b:71:2c:3a:7b:b1:ad:b4:c3:e7:bb:d4:6a:98:db:4d:27:
         04:05:f3:7a:0d:71:2b:9f:80:88:29:1f:92:10:c6:c4:b2:89:
         b4:28:ed:a9:49:9b:a6:06:39:e8:b3:96:69:6b:6f:ef:df:96:
         79:91:db:a7:39:b9:16:a4:ec:13:c8:97:6b:44:33:01:98:25:
         fa:b6:dc:79:a3:4e:92:f2:63:45:78:3b:a8:2d:33:23:e2:6d:
         69:3c:b8:8e:64:0a:03:f9:bd:0a:3f:6f:a2:ff:69:58:50:a9:
         d9:58:48:4a:82:26:2d:ec:cd:50:4d:ff:10:d7:ce:70:3d:ab:
         9d:37:d8:19:72:b1:db:7d:54:c2:06:0a:f4:25:32:26:94:11:
         f2:ec:05:84:11:e2:a8:d9:bb:6d:4d:d4:eb:2d:48:2d:5d:5e:
         f8:86:b5:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjUwODIwMTc1NzI5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODI5Ni1jYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA92PuRjvr9BHQ+9kZ/6bY0dYPlqhIEo+YIttoNiyIoOs6Wl2FAOYwy+0VbU2o
WamYaT44SmQlpPorY9ImNlPV46r4gjs5LVWKRVBXTOW0lfwQW+BuTFFDmCemxlsh
a/rzvjjXfA/Hu77Vt4h6iUM2EJEysaNWAzT/+kUMpv1VJyxeuvPW7w0RBLV9PHvq
HwmVOB5JegaN8ybuWLQ6alGxXDEladqgQjNg5ILUCEYy90wrnBeCuYt0OiR4bx9v
Jt0F/G/g/AgVYzLvwa5bUvCGXTYW48x2jPFlnxV53n7c/l25qCOFRBGNFFA2Dteg
SznblRKlOT1jeETi9gqmUnMJ5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOGnB1JT
9wbsxlDWYg52nTiThcEfMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvODIyNEU1NUMz
NDVGMTFGMEJENTE0QzZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5WQMA0GCSqGSIb3DQEBCwUAA4IBAQCRU7wEuU98pe4u1S+kvzRI
xzXkkFxVOLj+a6rOlLrDbu85GvEgN/vRno5S8zCqS9fbkh6tyizs7VKJR4KmaKEZ
M96uD0+/vVb/j9SDOwKiVhfjohk93DX0Gtcya3EsOnuxrbTD57vUapjbTScEBfN6
DXErn4CIKR+SEMbEsom0KO2pSZumBjnos5Zpa2/v35Z5kdunObkWpOwTyJdrRDMB
mCX6ttx5o06S8mNFeDuoLTMj4m1pPLiOZAoD+b0KP2+i/2lYUKnZWEhKgiYt7M1Q
Tf8Q185wPaudN9gZcrHbfVTCBgr0JTImlBHy7AWEEeKo2bttTdTrLUgtXV74hrVs
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:40 2026 by rpki-client