Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa
File:                     4BECBAFCB99811E98000600AC4F9AE02.roa (raw, json)
Hash identifier:          e2hj/VgpX5o9xzRU7qTEPDMxfSaulRInvkdOWz8lhh0=
Subject key identifier:   DB:94:74:A1:68:4B:C2:D5:F8:D4:6F:69:94:62:96:B7:99:6B:9A:EC
Certificate issuer:       /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
Certificate serial:       0E5F
Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:50:09 +0000
ROA not before:           Thu 02 Oct 2025 18:17:31 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134722
IP address blocks:        103.198.52.0/23 maxlen: 23
                          103.198.52.0/24 maxlen: 24
                          103.198.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl
                          rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3679 (0xe5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
        Validity
            Not Before: Oct  2 18:17:31 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44411-0e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:c7:ee:57:b1:50:2e:db:51:5e:f2:57:d3:
                    7e:34:08:cf:22:66:cc:18:37:3d:86:a9:74:86:e6:
                    62:08:2c:03:7e:c0:74:d7:00:1e:41:00:aa:87:5b:
                    a3:a5:73:6b:e9:6f:26:55:d4:6f:63:55:05:77:f1:
                    07:f7:da:c6:86:ab:24:43:56:f8:5c:b1:5b:13:8c:
                    43:da:5c:dd:56:f7:d3:d1:bf:86:cd:60:dc:88:f3:
                    f7:84:1c:47:99:79:ad:5c:06:6a:15:1a:dd:f7:59:
                    e4:42:3d:12:13:23:18:b1:31:62:92:47:b3:ed:7f:
                    2f:4f:d9:60:a4:e3:f1:be:e9:87:2a:4d:81:c3:24:
                    28:86:92:fb:38:7e:38:92:88:61:c8:6f:f7:66:8d:
                    32:50:65:4b:3b:c4:21:d7:c6:a5:ac:03:17:05:9f:
                    90:2a:8d:6e:bd:72:76:b1:4f:09:98:dd:33:f2:c1:
                    a0:2e:84:54:42:49:a9:55:44:14:9b:58:cf:0c:96:
                    c0:e3:81:2e:28:b3:eb:e3:f4:34:04:44:76:2a:4e:
                    3f:46:ee:f3:44:9d:94:e1:69:af:a0:88:f5:89:94:
                    2f:dd:3a:29:61:4b:a8:6a:10:a1:10:9f:67:84:b1:
                    0b:03:90:85:67:01:18:d3:65:45:48:09:75:83:15:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:94:74:A1:68:4B:C2:D5:F8:D4:6F:69:94:62:96:B7:99:6B:9A:EC
            X509v3 Authority Key Identifier:
                keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:bc:9b:98:d3:59:fd:11:9a:4b:4b:98:d2:dc:de:18:7e:
         0d:f9:14:d5:4d:64:b8:0b:05:d2:52:b8:9a:2f:bc:45:bc:7b:
         88:66:5b:d9:5b:11:66:48:cf:5a:b0:f0:08:d3:5a:3b:9f:4f:
         78:27:3d:ad:f4:34:83:06:b9:f2:08:68:9a:a3:4f:ad:f0:13:
         fb:49:51:95:c9:8a:35:97:bc:a1:27:41:06:44:8c:ef:e8:70:
         71:24:df:ea:24:69:72:37:8d:22:10:34:ea:ae:31:b7:e5:ff:
         14:59:42:55:41:c1:56:36:38:56:54:27:a9:a1:17:86:8b:cc:
         99:49:42:71:01:9e:82:8c:36:6d:14:44:fa:cd:89:76:c3:69:
         6e:d1:5e:0b:84:0b:09:fa:14:4a:ca:56:d5:8c:24:df:78:d0:
         08:39:3d:d0:e4:39:0e:43:d6:cd:b4:66:bc:32:fe:07:99:45:
         f7:f2:5b:c8:c1:3f:f5:74:19:bc:be:18:22:c9:c9:a1:65:f2:
         d4:2f:88:1c:b3:82:61:b9:50:83:51:13:8c:b0:9f:a2:6a:00:
         e4:96:85:0b:f9:66:9e:da:80:e5:ff:8e:70:7f:26:7b:16:27:
         dd:db:b2:33:c3:db:57:25:f9:0f:fb:b3:4f:eb:f3:9f:85:cc:
         5b:31:33:2a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0
RDQwNjY0OTUwHhcNMjUxMDAyMTgxNzMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDQxMS0wZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ArH7lexUC7bUV7yV9N+NAjPImbMGDc9hql0huZiCCwDfsB01wAeQQCqh1uj
pXNr6W8mVdRvY1UFd/EH99rGhqskQ1b4XLFbE4xD2lzdVvfT0b+GzWDciPP3hBxH
mXmtXAZqFRrd91nkQj0SEyMYsTFikkez7X8vT9lgpOPxvumHKk2BwyQohpL7OH44
kohhyG/3Zo0yUGVLO8Qh18alrAMXBZ+QKo1uvXJ2sU8JmN0z8sGgLoRUQkmpVUQU
m1jPDJbA44EuKLPr4/Q0BER2Kk4/Ru7zRJ2U4WmvoIj1iZQv3TopYUuoahChEJ9n
hLELA5CFZwEY02VFSAl1gxVsDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNuUdKFo
S8LV+NRvaZRilreZa5rsMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5
OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEIyRjgvREZFRTYxREVCOTk3MTFFOUIwOTkwRTBBQzRGOUFFMDIvNEJFQ0JBRkNC
OTk4MTFFOTgwMDA2MDBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ8Y0MA0GCSqGSIb3DQEBCwUAA4IBAQB27bybmNNZ/RGaS0uY0tze
GH4N+RTVTWS4CwXSUriaL7xFvHuIZlvZWxFmSM9asPAI01o7n094Jz2t9DSDBrny
CGiao0+t8BP7SVGVyYo1l7yhJ0EGRIzv6HBxJN/qJGlyN40iEDTqrjG35f8UWUJV
QcFWNjhWVCepoReGi8yZSUJxAZ6CjDZtFET6zYl2w2lu0V4LhAsJ+hRKylbVjCTf
eNAIOT3Q5DkOQ9bNtGa8Mv4HmUX38lvIwT/1dBm8vhgiycmhZfLUL4gcs4JhuVCD
UROMsJ+iagDkloUL+Wae2oDl/45wfyZ7Fifd27Izw9tXJfkP+7NP6/OfhcxbMTMq
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:58 2026 by rpki-client