Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/19BCD4A0728211F081B6E982C4F9AE02.roa
File:                     19BCD4A0728211F081B6E982C4F9AE02.roa (raw, json)
Hash identifier:          VkIzY3dIGkLvumTwjZ6D6f52TGNmXKEpaF1c0iRnJGQ=
Subject key identifier:   E1:7F:DB:CA:4D:F7:C8:A2:9E:53:0A:5E:8B:AB:1E:A7:05:AD:03:EF
Certificate issuer:       /CN=A918C519/serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F
Certificate serial:       6C
Authority key identifier: 4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/19BCD4A0728211F081B6E982C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:13:13 +0000
ROA not before:           Wed 06 Aug 2025 04:59:15 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132343
IP address blocks:        103.13.178.0/23 maxlen: 24
                          103.13.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl
                          rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C519, serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F
        Validity
            Not Before: Aug  6 04:59:15 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e709-eaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:28:3b:8b:28:82:bc:1c:0c:15:30:c5:58:
                    2d:48:e2:be:e2:31:14:f2:ac:b6:f4:a0:3c:c9:03:
                    8d:ec:8b:26:05:59:9a:27:27:9d:28:2d:c3:a7:37:
                    ca:19:0a:a1:2f:0f:4b:9a:0c:6a:ec:1e:e1:08:30:
                    7d:a2:c9:11:71:86:f4:58:75:f1:ff:8e:a8:22:20:
                    a6:d5:44:d2:ea:42:2f:78:42:03:4d:84:cc:51:83:
                    50:f1:69:f1:dc:eb:41:5a:a5:97:37:7c:56:1d:bf:
                    4b:a8:f1:de:37:00:74:af:9c:3c:e5:fe:d0:a9:f7:
                    97:2b:66:fe:49:a6:a7:e3:37:66:f5:35:8d:2e:78:
                    59:1f:a2:e2:c5:f2:68:a1:14:77:7e:9c:4e:8d:1e:
                    bb:7f:fa:bb:77:71:5d:66:27:75:0d:58:bc:cc:14:
                    9a:b6:93:02:3c:55:7a:3e:9b:c0:7c:82:c6:d2:04:
                    d1:f7:5a:ae:33:a9:48:57:17:f3:cd:9c:33:36:6e:
                    0e:10:59:a7:45:76:3d:4c:e0:92:0b:05:51:87:37:
                    bc:6c:b9:c8:a6:32:12:d5:c3:8b:31:56:c3:23:a0:
                    c9:d0:1d:00:71:e9:cf:2d:6b:e9:ca:cf:08:5f:fc:
                    6d:6d:37:e2:9f:4b:f9:35:e1:d4:d9:e4:66:c8:db:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7F:DB:CA:4D:F7:C8:A2:9E:53:0A:5E:8B:AB:1E:A7:05:AD:03:EF
            X509v3 Authority Key Identifier:
                keyid:4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/19BCD4A0728211F081B6E982C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.178.0-103.13.180.255

    Signature Algorithm: sha256WithRSAEncryption
         84:09:0b:56:bc:a6:e0:88:44:de:44:c7:db:7c:80:4c:87:b0:
         06:fa:4c:89:45:26:36:85:05:6d:44:3d:c4:aa:18:b1:44:86:
         76:32:fd:6b:e8:c7:16:bc:77:a4:c8:a2:2c:97:27:75:2b:cb:
         3a:f6:16:58:13:89:36:91:46:29:c1:05:2b:c8:1d:97:61:d6:
         04:0c:b3:a2:dd:9f:07:54:f7:d9:aa:8c:33:74:3b:bf:42:bc:
         bc:ea:15:17:b2:b3:a0:88:13:c4:a0:5d:e8:08:6d:bc:a0:e2:
         56:d6:04:13:36:da:b9:fc:e2:3b:82:c7:73:e8:32:e3:e7:e4:
         5f:d7:a0:29:3a:76:8a:b4:57:50:ad:c2:66:b0:a9:5c:81:6f:
         be:4f:59:e1:36:bf:29:44:23:5e:ff:b4:7b:61:af:2d:86:2c:
         81:fe:ba:3f:71:22:54:63:73:36:d6:9f:d1:bc:23:d7:71:d5:
         72:0a:82:c7:cf:6b:0d:06:d6:bc:33:a4:9a:50:e5:57:2d:88:
         b9:de:a1:bf:2c:58:9e:21:5c:41:f6:e5:48:6e:0e:16:92:c4:
         26:b4:84:be:a4:c0:95:4f:6b:56:2d:8e:71:9c:c4:46:ac:8e:
         60:1a:b3:fa:e4:d0:20:22:7f:57:90:83:b8:2e:28:40:bb:3c:
         df:10:d1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:53 2026 by rpki-client