Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/D5BD4314AD8911EBA9B50F25C4F9AE02.roa
File:                     D5BD4314AD8911EBA9B50F25C4F9AE02.roa (raw, json)
Hash identifier:          A1QiUiPUv8WbWh8tZ1naJTR7ks3s4Q1Vj2raq9KZ6YQ=
Subject key identifier:   79:78:AC:43:E3:69:48:92:98:8B:B5:57:C4:14:3B:3F:A5:A5:F5:28
Certificate issuer:       /CN=A918E6F7/serialNumber=5788B388ADFE0DFBEAF7C2D7F86143B505606E5C
Certificate serial:       0689
Authority key identifier: 57:88:B3:88:AD:FE:0D:FB:EA:F7:C2:D7:F8:61:43:B5:05:60:6E:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4iziK3-Dfvq98LX-GFDtQVgblw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/D5BD4314AD8911EBA9B50F25C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:35:17 +0000
ROA not before:           Tue 18 Nov 2025 21:43:00 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134493
IP address blocks:        103.161.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.crl
                          rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4iziK3-Dfvq98LX-GFDtQVgblw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6F7, serialNumber=5788B388ADFE0DFBEAF7C2D7F86143B505606E5C
        Validity
            Not Before: Nov 18 21:43:00 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43285-0e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:24:25:58:e5:c8:54:73:ff:4a:5e:a6:0a:19:
                    f0:c2:12:e7:ea:f0:e8:16:98:91:f7:c3:90:3d:75:
                    8c:98:47:6d:a9:18:a4:20:4b:9e:85:e4:c0:71:3e:
                    8d:d1:88:05:f2:a3:47:03:e7:74:1b:c3:32:df:08:
                    8e:a5:30:e4:69:2d:2b:da:3c:33:6e:93:15:fe:86:
                    2a:fb:1f:ef:55:49:d7:5b:fb:1a:d7:d6:95:51:54:
                    b0:eb:65:f7:10:93:10:bd:6a:ad:6a:4e:0f:2e:33:
                    a4:08:6e:54:09:3c:94:f7:e1:cb:cc:ce:21:36:91:
                    5f:05:f7:25:f4:e4:05:c7:09:e8:45:63:6f:9d:6f:
                    44:c9:b1:6d:4a:66:43:0b:54:c9:69:7e:ed:e8:a6:
                    78:2e:13:4b:34:b8:4e:32:e4:db:23:b4:10:9e:fd:
                    bd:1b:80:d8:4d:28:fc:b6:c5:cc:25:99:60:00:15:
                    62:ae:a5:82:93:39:eb:9a:e2:13:28:bc:a9:b2:66:
                    2d:38:09:be:e3:46:13:ca:99:ef:ea:d3:1e:b4:d7:
                    bb:29:1d:f0:33:e6:30:60:92:81:3c:67:44:bd:a4:
                    4f:09:18:7f:49:cc:f9:9d:d6:3c:9d:96:33:80:ca:
                    37:48:e7:77:5c:c0:a3:3e:88:ab:1f:e2:00:75:f6:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:78:AC:43:E3:69:48:92:98:8B:B5:57:C4:14:3B:3F:A5:A5:F5:28
            X509v3 Authority Key Identifier:
                keyid:57:88:B3:88:AD:FE:0D:FB:EA:F7:C2:D7:F8:61:43:B5:05:60:6E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4iziK3-Dfvq98LX-GFDtQVgblw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/D5BD4314AD8911EBA9B50F25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:6f:e3:f3:84:1c:eb:6c:e9:e6:71:ee:94:62:04:5e:9f:
         8d:bf:4a:c9:e1:3f:3f:ea:25:c8:b5:92:1e:83:1d:5a:09:fe:
         ce:d2:a1:27:64:56:b1:31:ac:fb:26:11:34:83:48:98:f9:4d:
         a7:5c:6e:b0:5a:c0:ec:8f:44:ad:b3:11:5a:61:68:09:88:ad:
         38:b7:8a:c7:e0:38:87:32:27:f2:12:2a:0f:40:a6:29:8b:56:
         fe:4f:21:b8:51:5d:b9:d7:08:32:de:44:c5:07:06:13:8b:24:
         a8:1c:92:8c:1c:d6:63:0b:14:35:ef:ab:73:20:3e:f9:05:f7:
         7e:f3:0d:0f:45:60:52:b6:82:2b:1f:2f:12:fc:ef:7a:19:b9:
         0b:25:f1:eb:2a:18:8e:45:7f:7c:34:e0:55:5e:0f:ee:a3:79:
         3b:83:27:72:4f:1a:81:b5:ff:bf:d8:75:89:33:e7:14:ff:98:
         69:51:85:71:3c:6e:83:ed:49:f0:9c:58:f9:51:2b:9a:7d:c4:
         35:84:c1:e5:c6:92:c3:24:65:6d:05:ec:6a:86:e1:6d:b3:44:
         08:83:9a:2a:ee:dc:28:62:f9:02:70:79:42:cd:7c:3d:d8:57:
         f4:23:ba:61:8b:cd:29:3a:b5:10:21:86:dc:38:cf:fc:2b:47:
         f5:9c:d6:c5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU2RjcxMTAvBgNVBAUTKDU3ODhCMzg4QURGRTBERkJFQUY3QzJEN0Y4NjE0M0I1
MDU2MDZFNUMwHhcNMjUxMTE4MjE0MzAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzI4NS0wZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+iQlWOXIVHP/Sl6mChnwwhLn6vDoFpiR98OQPXWMmEdtqRikIEueheTAcT6N
0YgF8qNHA+d0G8My3wiOpTDkaS0r2jwzbpMV/oYq+x/vVUnXW/sa19aVUVSw62X3
EJMQvWqtak4PLjOkCG5UCTyU9+HLzM4hNpFfBfcl9OQFxwnoRWNvnW9EybFtSmZD
C1TJaX7t6KZ4LhNLNLhOMuTbI7QQnv29G4DYTSj8tsXMJZlgABVirqWCkznrmuIT
KLypsmYtOAm+40YTypnv6tMetNe7KR3wM+YwYJKBPGdEvaRPCRh/Scz5ndY8nZYz
gMo3SOd3XMCjPoirH+IAdfaaAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHl4rEPj
aUiSmIu1V8QUOz+lpfUoMB8GA1UdIwQYMBaAFFeIs4it/g376vfC1/hhQ7UFYG5c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZGNy81MTU2OUVEMkFE
ODgxMUVCQjk2NjEzMjRDNEY5QUUwMi9WNGl6aUszLURmdnE5OExYLUdGRHRRVmdi
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Y0aXppSzMtRGZ2cTk4TFgtR0ZEdFFWZ2Jsdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU2RjcvNTE1NjlFRDJBRDg4MTFFQkI5NjYxMzI0QzRGOUFFMDIvRDVCRDQzMTRB
RDg5MTFFQkE5QjUwRjI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6EsMA0GCSqGSIb3DQEBCwUAA4IBAQA0f2/j84Qc62zp5nHulGIE
Xp+Nv0rJ4T8/6iXItZIegx1aCf7O0qEnZFaxMaz7JhE0g0iY+U2nXG6wWsDsj0St
sxFaYWgJiK04t4rH4DiHMifyEioPQKYpi1b+TyG4UV251wgy3kTFBwYTiySoHJKM
HNZjCxQ176tzID75Bfd+8w0PRWBStoIrHy8S/O96GbkLJfHrKhiORX98NOBVXg/u
o3k7gydyTxqBtf+/2HWJM+cU/5hpUYVxPG6D7UnwnFj5USuafcQ1hMHlxpLDJGVt
BexqhuFts0QIg5oq7twoYvkCcHlCzXw92Ff0I7phi80pOrUQIYbcOM/8K0f1nNbF
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:52 2026 by rpki-client