Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/DC512D0473CD11EA8BE69127C4F9AE02.roa
File:                     DC512D0473CD11EA8BE69127C4F9AE02.roa (raw, json)
Hash identifier:          Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=
Subject key identifier:   9F:C4:4B:12:CA:79:FB:08:DC:30:C9:C4:D4:72:57:4B:C0:FA:D0:FF
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0B4D
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/DC512D0473CD11EA8BE69127C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:07:20 +0000
ROA not before:           Tue 12 Aug 2025 20:31:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     59214
IP address blocks:        103.98.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2893 (0xb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 20:31:19 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48058-6027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:b5:d7:bf:61:74:53:1e:78:d4:d1:d6:97:
                    50:46:25:14:03:fb:b5:c1:af:2c:c9:dc:f4:e7:07:
                    3e:c4:fd:a1:ba:31:c3:9a:0d:82:3c:7c:94:5f:26:
                    c4:12:dd:dc:f8:20:e4:ca:e5:41:61:14:41:82:f1:
                    38:73:d6:f5:8f:11:ed:fc:94:9f:88:fe:f7:e9:75:
                    45:6e:18:c5:b4:30:99:75:44:2d:45:a3:cc:8b:37:
                    a2:59:18:55:38:93:6d:31:d9:82:09:b3:2a:4d:13:
                    cf:4d:bf:6f:5c:0e:c3:32:d5:55:cf:20:74:3a:33:
                    28:cd:9b:79:3a:8f:29:0f:63:3b:de:3b:52:75:22:
                    1e:f7:4f:00:8a:f2:b2:55:4c:86:61:21:29:8a:fa:
                    9f:83:d3:8c:a4:c0:dc:0e:81:60:c6:59:cd:91:a4:
                    e4:61:c4:19:ff:68:ba:53:0f:17:a3:b4:3b:b3:d5:
                    5a:70:d4:0a:a1:2e:c5:cf:46:58:b0:b7:25:62:13:
                    70:b1:a5:34:c5:23:f7:15:4a:d2:97:20:3b:c9:89:
                    ec:4d:60:7b:8b:46:ab:7d:d6:f4:4a:e5:a8:ca:9f:
                    85:1d:f5:ab:9a:de:e8:73:e0:59:27:24:2b:e2:d2:
                    91:df:30:43:ea:bd:f0:85:78:89:1c:73:3e:34:d6:
                    7f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C4:4B:12:CA:79:FB:08:DC:30:C9:C4:D4:72:57:4B:C0:FA:D0:FF
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/DC512D0473CD11EA8BE69127C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:37:8d:1c:e2:92:52:f0:09:b3:76:e0:ea:21:a5:a6:eb:
         71:4f:56:55:2a:fa:70:7a:27:87:6b:f8:34:e0:e2:41:51:c3:
         d9:a9:94:5c:78:7b:15:67:22:a4:ab:03:fb:b4:46:d9:a1:4c:
         15:e4:66:06:11:b3:d1:b5:ed:3e:62:a5:e3:e4:ee:71:4a:68:
         52:ca:68:13:1a:85:b4:4f:e7:28:71:ea:6d:c6:73:91:a5:5e:
         5d:fc:da:67:96:9d:44:33:7c:b2:33:44:df:61:c2:02:03:0d:
         80:f1:b1:52:b2:f6:68:ef:45:ff:1d:94:71:a2:84:f9:36:27:
         8b:81:0a:66:7f:be:0f:f1:3a:f6:96:aa:4d:dc:8a:9f:8c:66:
         4b:01:2c:9e:9d:4f:8b:6a:b0:ed:ec:0e:2b:4a:a4:a4:2a:2b:
         96:5c:5c:00:7f:88:91:18:c2:af:11:ae:a8:ad:5b:c6:66:ac:
         af:41:7d:ff:f0:3d:dc:09:d9:05:f5:ce:bf:4c:7f:2b:ba:a7:
         70:b3:24:90:a2:b2:b0:a7:2a:92:ac:16:23:a9:bb:75:e0:63:
         b2:0a:9c:9c:eb:85:c8:61:0f:5c:d4:57:55:ac:3c:78:9d:c9:
         db:bf:b6:fc:1f:61:b7:00:11:4f:c5:f4:89:e6:de:f1:ca:a3:
         57:16:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:22 2026 by rpki-client