Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/01F3383E4A1F11EDBFDEFE29C4F9AE02.roa
File:                     01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (raw, json)
Hash identifier:          0dEgHfjdaDmXpIqs7bBG+Yt1VZ3EjEezx277VdYW0Gw=
Subject key identifier:   70:F6:C2:D3:EA:F1:A5:6E:7F:6B:61:A0:87:09:0D:DD:15:48:A7:C4
Certificate issuer:       /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial:       0284
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/01F3383E4A1F11EDBFDEFE29C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:05:03 +0000
ROA not before:           Sun 07 Dec 2025 00:39:18 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150340
IP address blocks:        103.16.248.0/24 maxlen: 24
                          103.16.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
                          rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
        Validity
            Not Before: Dec  7 00:39:18 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4559f-cded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:6c:fe:e4:e9:52:b0:05:a0:27:3e:af:6e:
                    01:a6:0c:15:fe:82:b0:8a:8a:ac:e1:9b:0b:6e:2f:
                    8d:23:12:f6:f3:70:98:99:58:92:3b:0e:e1:57:c9:
                    9e:c3:2e:97:fd:eb:e7:35:62:17:cc:3c:d7:0b:b2:
                    b1:8e:5e:f9:ca:87:d8:95:7b:31:47:fd:87:13:ad:
                    dd:07:9e:22:40:eb:e3:3e:f7:1a:ff:f0:07:cd:33:
                    7c:09:80:0d:af:7b:3c:92:e0:b1:8b:28:93:2f:a9:
                    99:1b:a0:ac:fe:59:da:81:c1:ac:b9:ea:0f:d2:ba:
                    04:18:57:49:bb:dd:17:c8:05:ab:9b:eb:3c:53:c3:
                    28:26:19:ba:1b:11:8b:71:98:77:99:4a:d9:38:75:
                    e2:15:9b:71:0b:51:76:4c:a1:b8:28:5e:83:8e:1c:
                    08:98:cc:0b:e1:2a:7f:0e:45:dc:af:ac:8d:83:35:
                    cd:d2:2d:3e:ee:5b:6c:f0:d5:6e:a6:e2:18:5c:5c:
                    2a:a8:07:9d:ac:11:6b:e1:49:73:88:2c:ba:0b:08:
                    ed:a3:16:d8:6e:a4:b1:c8:dc:20:9f:f3:70:41:bc:
                    00:a6:70:59:a6:c4:ba:b0:d9:19:1c:e3:14:72:3c:
                    3d:8d:f1:7e:85:8d:10:b8:81:81:d1:f1:56:42:de:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F6:C2:D3:EA:F1:A5:6E:7F:6B:61:A0:87:09:0D:DD:15:48:A7:C4
            X509v3 Authority Key Identifier:
                keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/01F3383E4A1F11EDBFDEFE29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:51:e4:2c:fb:fa:c4:fe:e2:ad:3e:55:7c:f1:40:a0:ce:
         ae:d8:2e:ec:58:5b:6f:f2:5c:af:70:00:fd:94:38:54:e8:1d:
         1a:92:d9:f4:87:91:1c:31:1a:34:7b:8d:fe:79:56:c7:c3:a4:
         40:87:41:66:84:e8:dc:6f:ce:7e:60:eb:8b:29:98:8e:c9:bf:
         4f:d9:ee:cd:7c:ad:b2:c7:4c:5a:64:3d:71:87:4a:ec:c7:97:
         24:fa:28:79:d4:77:93:25:d2:a8:00:9d:f9:17:65:08:f9:32:
         3d:35:7a:c5:49:80:bb:8d:e4:ac:45:0e:d7:e7:8b:71:d8:97:
         3d:18:50:97:7b:ac:8c:a3:a4:7f:48:22:9e:d8:33:c1:58:52:
         93:2d:65:b4:24:02:68:3c:29:31:08:9e:9c:58:01:f9:96:84:
         23:11:bd:11:06:82:88:13:f1:73:3d:99:17:9e:eb:20:69:71:
         d6:2e:7e:f9:d4:62:6b:63:60:d2:ae:fd:e1:f1:4b:ea:e4:e3:
         66:66:96:c7:f3:44:82:77:1c:d9:02:73:b2:7c:b9:f8:d9:f5:
         d0:f7:78:de:aa:fb:1d:78:7a:8a:5f:c7:10:7a:bf:ae:6e:ec:
         16:87:01:12:59:29:df:46:c4:56:de:2c:e6:8e:cb:1b:6d:67:
         93:9b:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:12 2026 by rpki-client