Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/1CDA8D8A613A11EF81FCD418C4F9AE02.roa
File:                     1CDA8D8A613A11EF81FCD418C4F9AE02.roa (raw, json)
Hash identifier:          LkivNn2o6AFH/sFLSdvUDaymalBDL4Gvz9GNLWgBFKc=
Subject key identifier:   01:E0:47:2C:B4:5C:4C:95:5A:27:D0:06:3A:23:2E:83:C4:83:1E:3E
Certificate issuer:       /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial:       017D
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/1CDA8D8A613A11EF81FCD418C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:24:15 +0000
ROA not before:           Wed 25 Feb 2026 04:24:00 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141718
IP address blocks:        103.163.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
                          rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A132, serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
        Validity
            Not Before: Feb 25 04:24:00 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43dff-f0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:a0:ce:fc:ce:0b:64:5b:00:9c:a3:89:4c:
                    e7:77:54:6d:30:73:f7:d2:d8:cc:ed:d5:c5:4a:cd:
                    b4:16:2b:0e:01:5a:72:2d:4c:a1:c9:12:14:ba:68:
                    28:83:a2:b6:47:97:00:55:66:47:65:53:74:e5:51:
                    74:de:57:bd:7e:f1:94:1b:fd:38:7a:54:de:e4:8f:
                    c7:fc:78:2d:2a:d9:4c:e1:0a:d7:d2:6b:ff:31:03:
                    ee:ce:27:4d:9d:ac:d4:c6:a5:f8:5d:fc:d4:31:43:
                    1d:65:a2:3b:c7:c3:da:0b:3b:c0:04:bc:10:50:e2:
                    9c:d7:6c:ef:03:c1:08:ac:d5:86:8f:2f:2a:bc:03:
                    07:16:a8:28:f6:40:20:09:67:a0:1d:3a:c1:a9:de:
                    08:78:9f:1a:c2:f6:4a:1c:05:00:a5:39:10:e6:9f:
                    8e:04:18:1c:12:ff:12:56:76:02:0c:45:1a:58:8d:
                    d2:bc:ec:00:db:3d:bb:af:40:39:98:71:d7:b9:2a:
                    48:35:74:13:51:05:f4:8c:16:bf:b1:bf:84:da:50:
                    d8:fe:54:0f:6a:e5:67:84:d0:93:0a:e6:29:ae:71:
                    5b:77:f3:af:f9:30:5d:c9:16:07:2d:5c:14:ea:c8:
                    9f:c7:cf:ca:51:90:81:6c:46:f2:47:e7:44:17:dc:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E0:47:2C:B4:5C:4C:95:5A:27:D0:06:3A:23:2E:83:C4:83:1E:3E
            X509v3 Authority Key Identifier:
                keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/1CDA8D8A613A11EF81FCD418C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:b5:f9:1b:e8:af:9c:32:e9:08:9b:08:e0:83:75:2a:f3:
         9e:aa:a3:18:0c:40:83:9e:5e:f2:3f:0a:fb:58:01:4f:b7:44:
         51:88:b8:1f:e2:6c:aa:9c:5f:e4:5c:67:96:42:a1:be:12:ff:
         10:0c:92:5c:ea:97:de:de:7e:0f:00:4b:29:8c:84:ab:b1:0b:
         8f:5a:a2:1b:22:ef:ba:f7:22:b2:9f:0a:53:dc:d8:60:13:0e:
         e0:01:5c:f4:ca:49:4a:76:bc:05:4f:ca:a6:71:70:13:f2:50:
         c9:e4:f8:17:c8:c3:1f:f9:f5:f7:99:e6:4e:e3:28:8b:50:cb:
         f0:0c:4a:6c:1c:b6:9e:a5:6a:7f:28:5e:9c:b5:c6:f2:2c:4c:
         48:26:6f:fb:bc:cc:f5:12:14:b6:18:ea:a4:14:ba:6f:c9:ed:
         49:3d:aa:2b:40:f9:61:96:10:25:3c:2e:24:d4:8c:da:fa:f8:
         56:1d:87:0e:65:20:d7:ee:24:74:89:1f:e9:91:05:1c:15:49:
         9c:a6:60:4b:ea:f1:73:8f:09:c0:f3:83:bb:a6:68:2c:f8:b8:
         8b:b1:00:7e:7c:04:7f:0f:93:f6:ea:ed:52:28:37:57:5b:00:
         bb:6a:c6:65:10:5e:c6:64:81:de:6e:9c:67:09:68:66:d9:12:
         d3:ab:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:14:37 2026 by rpki-client