Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/114E5E6A54DF11EDB7409267C4F9AE02.roa
File:                     114E5E6A54DF11EDB7409267C4F9AE02.roa (raw, json)
Hash identifier:          0JBG3JjfF5NTvz1BrXwe7qxV2dsEYREu6KbN96r4FFw=
Subject key identifier:   5B:10:80:33:D9:BD:10:31:F0:5A:E4:4C:32:BD:AD:AA:78:5A:9A:83
Certificate issuer:       /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial:       027F
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/114E5E6A54DF11EDB7409267C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:14:10 +0000
ROA not before:           Tue 27 May 2025 03:00:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149647
IP address blocks:        103.184.32.0/23 maxlen: 23
                          2400:6660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
                          rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
        Validity
            Not Before: May 27 03:00:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f552-f1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:35:e4:11:60:ae:9b:d7:3a:e7:78:ae:5a:
                    b9:f8:cc:c3:70:4d:9f:e6:95:32:af:64:45:8d:94:
                    a2:59:80:f7:a8:a3:bf:86:4c:8e:0f:d8:0b:44:6e:
                    f5:58:e7:c0:69:f3:0b:af:b9:b3:6a:d0:27:11:e8:
                    89:42:5a:ea:3a:c5:31:b5:5f:60:79:6f:d9:e3:d3:
                    8b:7a:50:b2:cd:ba:a7:87:fe:15:ad:e6:e3:70:d9:
                    97:20:13:c4:17:b8:7a:df:e2:5d:06:fe:8f:5f:98:
                    be:d7:c9:a6:98:c3:1d:29:66:4e:39:f8:b5:5e:f3:
                    7f:83:39:e0:90:e3:26:1b:87:09:81:2a:8e:e7:7f:
                    41:69:be:ea:bc:8c:8b:e0:30:c2:4c:f4:99:98:ce:
                    14:66:fb:12:d9:2b:bf:5e:a6:5d:4d:06:51:51:a8:
                    0b:57:f0:f2:e1:e6:6b:1b:d2:34:be:e8:88:3c:45:
                    9a:f6:e7:2d:df:d4:a4:58:69:da:40:a3:1c:5e:39:
                    dc:6f:34:df:7e:21:77:f2:e1:50:21:54:8f:b9:70:
                    cf:bb:e5:78:f0:0d:c9:4e:38:9f:c1:57:e4:96:5a:
                    76:28:18:1b:bb:39:c4:bf:2f:e7:f0:0b:31:e6:f9:
                    20:7f:0d:78:21:99:09:c3:43:e4:e8:f2:25:6f:96:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:10:80:33:D9:BD:10:31:F0:5A:E4:4C:32:BD:AD:AA:78:5A:9A:83
            X509v3 Authority Key Identifier:
                keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/114E5E6A54DF11EDB7409267C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.32.0/23
                IPv6:
                  2400:6660::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:89:01:f1:b1:ea:01:f8:54:b8:18:25:fc:14:66:db:b2:43:
         f1:53:f2:b2:94:14:36:d8:36:1e:77:97:30:2f:17:c7:d5:46:
         32:b2:dc:52:29:77:7d:65:9f:cb:5e:96:17:69:0f:13:cf:81:
         4f:e5:69:8a:16:a6:67:97:96:f2:32:97:87:be:c0:f0:5e:ba:
         38:c1:21:c8:fb:85:58:47:4c:1d:be:14:ed:cb:13:89:26:2d:
         54:b2:8d:4e:b5:fd:46:17:a5:f4:57:48:bc:38:6f:b1:c3:74:
         71:d0:05:16:40:81:f9:e1:06:94:24:ab:8a:49:47:7b:66:ca:
         e9:44:19:db:be:d6:26:2c:02:db:cb:a0:ad:95:ec:49:ee:3e:
         e6:21:89:7b:8f:bf:58:17:1c:aa:d7:9b:c4:3f:62:d8:6e:84:
         1d:c6:6d:bf:7b:e5:41:d9:e2:d7:47:3d:58:32:78:9b:a9:6a:
         0a:b6:c6:bb:86:2c:07:79:91:bc:80:51:31:72:c2:95:47:69:
         43:ff:dc:ab:f6:ad:8f:38:34:4a:f7:ff:a8:ab:dc:6a:46:9a:
         69:06:bf:1f:58:5f:51:b5:0d:2a:e6:40:8a:8d:85:16:f8:d5:
         91:38:4d:2e:82:7c:04:29:9a:ad:ae:67:59:8a:80:25:b0:23:
         53:4b:ef:f6
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0
MDMzQjM1MkQwHhcNMjUwNTI3MDMwMDM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjU1Mi1mMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNA15BFgrpvXOud4rlq5+MzDcE2f5pUyr2RFjZSiWYD3qKO/hkyOD9gLRG71
WOfAafMLr7mzatAnEeiJQlrqOsUxtV9geW/Z49OLelCyzbqnh/4VrebjcNmXIBPE
F7h63+JdBv6PX5i+18mmmMMdKWZOOfi1XvN/gzngkOMmG4cJgSqO539Bab7qvIyL
4DDCTPSZmM4UZvsS2Su/XqZdTQZRUagLV/Dy4eZrG9I0vuiIPEWa9uct39SkWGna
QKMcXjncbzTffiF38uFQIVSPuXDPu+V48A3JTjifwVfkllp2KBgbuznEvy/n8Asx
5vkgfw14IZkJw0Pk6PIlb5aLaQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFsQgDPZ
vRAx8FrkTDK9rap4WpqDMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0
REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEM1MzgvRENBOTUzNjY1NERCMTFFRDlEMjA1OTY1QzRGOUFFMDIvMTE0RTVFNkE1
NERGMTFFREI3NDA5MjY3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7ggMA0EAgACMAcDBQAkAGZgMA0GCSqGSIb3DQEBCwUAA4IBAQCV
iQHxseoB+FS4GCX8FGbbskPxU/KylBQ22DYed5cwLxfH1UYystxSKXd9ZZ/LXpYX
aQ8Tz4FP5WmKFqZnl5byMpeHvsDwXro4wSHI+4VYR0wdvhTtyxOJJi1Uso1Otf1G
F6X0V0i8OG+xw3Rx0AUWQIH54QaUJKuKSUd7ZsrpRBnbvtYmLALby6CtlexJ7j7m
IYl7j79YFxyq15vEP2LYboQdxm2/e+VB2eLXRz1YMnibqWoKtsa7hiwHeZG8gFEx
csKVR2lD/9yr9q2PODRK9/+oq9xqRpppBr8fWF9RtQ0q5kCKjYUW+NWROE0ugnwE
KZqtrmdZioAlsCNTS+/2
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:36 2026 by rpki-client