Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa
File:                     303C97563EB611EBA4FCB055C4F9AE02.roa (raw, json)
Hash identifier:          QlgAUCXmC3Vf8gn3/9F5D2vvghvKK1U9Va+wORc0M0U=
Subject key identifier:   3D:1A:07:03:D2:DE:9D:1C:92:DF:72:41:B1:A8:95:9F:0D:86:7B:A5
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       0885
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa
Signing time:             Wed 16 Sep 2026 21:41:30 +0000
ROA not before:           Wed 16 Sep 2026 21:41:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.155.132.0/23 maxlen: 23
                          103.155.132.0/24 maxlen: 24
                          103.155.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Sep 16 21:41:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aab0d0a-109e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:b3:35:93:c9:8c:d8:c6:85:da:d8:87:68:
                    4f:a5:3b:3b:f6:ab:c6:dd:29:35:7f:43:05:da:56:
                    65:c4:44:34:5c:87:63:9b:30:a5:9b:1f:b4:e1:39:
                    9e:a5:a8:09:a4:24:54:45:47:17:0c:96:b5:7d:fa:
                    59:6a:e2:8c:ac:88:60:56:a1:24:2a:5a:23:9f:dc:
                    62:29:c1:f7:df:e7:c6:cc:8b:15:81:e1:29:ae:ee:
                    c0:5a:da:a5:f4:b2:b6:52:ae:85:2d:b5:04:51:6e:
                    f6:0a:19:fc:88:df:02:2c:c4:c1:74:42:05:8b:7c:
                    05:7a:4d:2c:b5:a7:37:c1:d2:08:b6:e5:21:45:31:
                    cd:74:f9:36:75:08:fe:4c:86:48:25:fd:67:a5:e1:
                    31:f6:09:16:cc:50:f0:ea:c1:41:e5:f0:06:4d:ee:
                    5e:c6:92:71:ac:24:eb:ad:0e:74:72:2b:e0:4a:dd:
                    f5:77:da:d0:01:39:6b:d6:f2:f4:2d:45:d0:b4:c0:
                    6f:f6:02:03:6b:32:1b:09:43:ba:ea:f7:a6:2b:49:
                    0d:99:b6:76:4a:f1:f1:81:c6:45:36:41:65:87:b0:
                    92:f1:c8:29:61:bd:ca:ef:37:2a:68:61:4c:ba:34:
                    bd:d1:60:48:37:33:4e:84:61:74:b5:e1:46:56:42:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:07:03:D2:DE:9D:1C:92:DF:72:41:B1:A8:95:9F:0D:86:7B:A5
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/303C97563EB611EBA4FCB055C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:a4:dd:c8:04:ee:58:3b:a6:67:f3:ac:fc:56:5b:f4:c6:fe:
         3b:45:15:5a:0d:c6:49:27:d5:c1:69:f3:cd:b9:4c:16:f1:5c:
         49:bc:7a:ea:74:e7:ef:33:09:4c:11:cd:38:91:f7:5e:f3:d8:
         2c:1a:09:cf:55:96:c3:4e:e8:10:77:58:a0:c4:89:80:8f:4c:
         a7:ff:d3:44:20:f2:69:51:35:82:f7:d4:b3:28:34:d3:35:58:
         0c:f6:df:42:a4:ec:10:64:d5:fa:31:bb:9a:9a:68:d5:63:39:
         ff:37:46:bf:f5:1e:15:c6:12:10:56:6f:68:f5:fe:09:25:2e:
         61:8a:12:64:79:5b:19:7a:22:99:ab:5e:50:af:f1:af:14:98:
         14:a2:5a:72:72:6b:8c:cb:2a:21:b6:63:62:04:81:ad:e9:20:
         55:34:ef:c6:e2:9a:99:2c:3e:07:88:bd:bb:b6:b5:53:87:6e:
         84:66:4c:ab:c9:25:5c:d5:74:98:c2:b1:12:1a:7f:28:c7:85:
         ac:92:d2:da:f5:8f:d6:c0:86:f4:b2:75:63:3b:02:8f:a7:4a:
         2e:f7:44:91:d0:32:ef:fa:b1:c7:38:6c:25:2b:fd:a1:0b:1c:
         0a:52:36:62:73:95:42:d5:50:d3:ea:d0:55:11:53:87:80:9e:
         5c:7b:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:57:32 2026 by rpki-client