Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/114E5E6A54DF11EDB7409267C4F9AE02.roa
File:                     114E5E6A54DF11EDB7409267C4F9AE02.roa (raw, json)
Hash identifier:          uMB1cvVhprKp86XWev+HO3mpwPNrzk9do4ee899gfzY=
Subject key identifier:   E0:A8:DC:C4:8A:06:4F:B3:6B:86:3E:3C:DF:59:FB:82:3B:5B:F2:10
Certificate issuer:       /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial:       02A5
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/114E5E6A54DF11EDB7409267C4F9AE02.roa
Signing time:             Tue 05 May 2026 02:33:26 +0000
ROA not before:           Tue 05 May 2026 02:33:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149647
IP address blocks:        103.184.32.0/23 maxlen: 23
                          2400:6660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
                          rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
        Validity
            Not Before: May  5 02:33:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f956f6-9f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:84:cb:c8:83:f2:4c:86:c1:7b:33:05:f5:
                    64:51:e2:cd:08:63:50:cd:35:1a:59:88:52:d7:58:
                    aa:97:74:07:83:f2:d6:fe:1f:8d:0d:a2:f0:fe:f5:
                    52:b8:da:9a:ec:44:73:e1:15:91:af:ca:03:04:ba:
                    bc:3c:e9:80:55:bc:82:30:b0:2a:ee:f7:b1:ec:e9:
                    46:fd:02:bf:5a:36:5b:af:50:c6:20:40:05:fe:d6:
                    3f:58:53:29:a8:09:1b:f0:e0:53:b8:88:18:0d:f4:
                    a2:8c:76:81:a3:f9:c6:64:c0:10:7a:13:2b:26:b9:
                    12:d3:5f:a1:5c:84:37:08:27:57:b5:69:96:62:da:
                    c6:cf:46:9c:28:77:88:c4:16:be:2b:2b:50:9e:c1:
                    fb:ff:a7:07:39:99:cf:a5:d3:9a:c8:12:c5:a4:05:
                    29:a7:f3:5d:93:62:72:2f:33:cf:f3:82:25:a8:fa:
                    6a:78:0d:7c:9d:29:3e:95:42:5a:2c:d0:7b:be:48:
                    e3:2b:2a:d4:5d:5b:88:0c:a6:f1:c8:4b:28:f1:65:
                    c8:38:ad:b5:28:9e:c5:d6:90:88:21:5c:70:91:cb:
                    45:08:d2:2e:d3:24:51:bb:1a:dd:38:05:c9:59:ae:
                    da:42:c7:d7:70:92:91:1b:9a:c9:e3:aa:c3:e5:6d:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A8:DC:C4:8A:06:4F:B3:6B:86:3E:3C:DF:59:FB:82:3B:5B:F2:10
            X509v3 Authority Key Identifier:
                keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/114E5E6A54DF11EDB7409267C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.32.0/23
                IPv6:
                  2400:6660::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:09:da:c6:28:17:a0:ef:9a:de:fe:7e:b1:22:06:ac:0e:3c:
         4f:59:9d:1f:97:62:15:63:32:61:e5:f2:03:ae:81:b1:10:33:
         69:9a:a1:ce:d1:ca:3d:49:58:f5:31:ed:cf:bf:2c:8a:50:a4:
         ca:d2:41:83:2b:ae:c4:aa:9a:60:c5:be:da:61:71:6f:e4:41:
         f0:f4:4d:aa:bc:d8:f6:c4:3c:40:0c:a9:ee:33:78:8d:3c:52:
         18:85:c0:e2:5e:8a:05:0c:02:4d:96:1a:4c:38:92:aa:69:32:
         88:c5:6a:9d:ea:85:e3:f4:56:c0:3f:8b:58:66:3d:37:92:4c:
         57:fc:f9:b7:37:54:ea:c7:46:4e:11:a7:46:5c:fb:0a:24:7d:
         ef:ac:b5:cd:e6:5e:b5:04:d6:51:f7:e8:c7:73:f8:a4:84:e2:
         d5:06:be:ff:a3:dd:e1:44:ce:46:2b:ef:a1:22:c4:64:2f:4a:
         c5:20:8b:9e:0f:0e:72:32:82:a4:b1:be:3a:a4:93:64:2c:39:
         4e:d6:6b:07:67:50:77:c4:c5:59:56:e4:d7:98:8f:2a:78:4e:
         a4:6f:3f:47:1a:a2:91:cd:bc:d9:00:35:b0:ab:52:c9:81:c4:
         a1:bd:7d:09:dc:3c:cb:91:ad:5b:72:41:f9:3a:33:3e:10:e3:
         9d:1f:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:43:37 2026 by rpki-client