Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/16745A82B1CD11EA9A31DA7DC4F9AE02.roa
File:                     16745A82B1CD11EA9A31DA7DC4F9AE02.roa (raw, json)
Hash identifier:          1rIHOb1BJq6BWs6+Vvfg37liR9JqZPHGf/sxMDb/MJM=
Subject key identifier:   4C:AE:06:79:CD:33:44:FA:25:D6:B1:5E:8C:F5:CE:13:A7:41:DB:51
Certificate issuer:       /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial:       0971
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/16745A82B1CD11EA9A31DA7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:20:45 +0000
ROA not before:           Fri 04 Apr 2025 21:02:49 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     56081
IP address blocks:        103.5.89.0/24 maxlen: 24
                          103.5.90.0/23 maxlen: 24
                          202.90.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
                          rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417 (0x971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
        Validity
            Not Before: Apr  4 21:02:49 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a42f1d-00b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:86:0c:a1:e4:c0:aa:2a:75:4a:26:f9:09:
                    ea:93:a1:bf:6a:53:17:e4:34:6b:d7:48:d8:15:c9:
                    4b:0b:2f:f7:8a:54:60:89:b6:e9:de:1e:fa:56:3b:
                    c2:7b:4c:46:20:11:cd:87:fc:73:42:87:90:f6:c4:
                    48:66:30:a6:26:27:be:cd:62:f1:99:95:14:63:5b:
                    46:10:c6:27:aa:fa:df:45:c2:e8:7c:ab:00:77:f4:
                    bd:e6:ee:60:18:48:0c:b4:22:d7:22:b4:f9:22:44:
                    bb:a8:eb:06:08:8b:62:22:a5:6c:c5:ad:03:7a:e1:
                    a5:18:f7:5a:e4:7c:ce:49:1d:d5:94:a2:a4:b2:70:
                    f7:f6:ef:a3:b4:c9:08:53:57:e7:fb:77:ee:07:69:
                    e5:40:07:11:81:c2:c3:43:01:a8:07:56:82:88:50:
                    ba:05:ac:90:88:e4:3c:b3:08:d1:a5:18:5b:36:a0:
                    94:4a:2a:94:f6:05:52:e1:d1:06:42:c0:6d:00:2f:
                    09:1f:ad:0b:2d:74:22:44:31:0e:ab:8e:6c:42:96:
                    4e:b1:0e:cb:49:15:59:81:e0:4c:3a:a5:3e:41:3a:
                    84:ba:52:eb:fd:ea:7a:74:de:ca:14:89:b0:bb:72:
                    96:21:83:79:5e:28:4c:47:31:4f:04:66:85:93:3b:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AE:06:79:CD:33:44:FA:25:D6:B1:5E:8C:F5:CE:13:A7:41:DB:51
            X509v3 Authority Key Identifier:
                keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/16745A82B1CD11EA9A31DA7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.89.0-103.5.91.255
                  202.90.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:0f:b3:8b:9f:6e:55:7b:05:98:1a:7f:fd:d3:2d:ee:e7:76:
         c4:ef:a3:6c:50:64:64:f8:e3:cb:ec:e6:67:be:28:0c:76:6d:
         d6:39:3c:5a:33:aa:28:bc:a6:e4:a2:90:26:8a:2a:5a:84:3d:
         26:b3:52:52:8a:c6:e1:61:a3:fa:a9:15:f1:c7:4e:95:3e:95:
         42:3a:71:85:de:df:50:8d:2b:98:9c:60:8b:33:e6:50:2a:ba:
         67:7f:12:b4:a7:3f:56:08:fe:e2:ec:c1:42:01:96:c5:35:9d:
         68:48:97:bf:cc:35:86:a0:62:22:14:ca:fd:32:1a:64:44:c0:
         47:6f:68:06:38:16:e5:11:10:0f:a3:f9:f1:ff:4e:aa:14:05:
         f6:ff:1a:73:f1:ef:21:c2:cb:3e:0e:67:63:ff:2d:41:d5:32:
         97:ab:58:e1:bc:e7:1c:b3:39:db:c9:0f:a5:ec:37:2a:f5:b5:
         c0:62:ed:8b:4b:82:50:42:9f:37:8a:7d:29:24:4c:dc:ca:a3:
         d9:cf:5c:b0:a4:af:4f:15:de:fa:9d:74:f2:81:05:f0:ca:23:
         ff:db:06:c0:4e:18:11:3b:cd:31:0c:2e:b7:87:a5:ef:07:4b:
         95:44:40:85:48:e4:a5:84:1e:75:6b:4a:12:dc:68:db:6e:58:
         6d:45:1d:82
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE
MDIwRkNBOEEwHhcNMjUwNDA0MjEwMjQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmYxZC0wMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwE+GDKHkwKoqdUom+Qnqk6G/alMX5DRr10jYFclLCy/3ilRgibbp3h76VjvC
e0xGIBHNh/xzQoeQ9sRIZjCmJie+zWLxmZUUY1tGEMYnqvrfRcLofKsAd/S95u5g
GEgMtCLXIrT5IkS7qOsGCItiIqVsxa0DeuGlGPda5HzOSR3VlKKksnD39u+jtMkI
U1fn+3fuB2nlQAcRgcLDQwGoB1aCiFC6BayQiOQ8swjRpRhbNqCUSiqU9gVS4dEG
QsBtAC8JH60LLXQiRDEOq45sQpZOsQ7LSRVZgeBMOqU+QTqEulLr/ep6dN7KFImw
u3KWIYN5XihMRzFPBGaFkzt0FQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFEyuBnnN
M0T6JdaxXoz1zhOnQdtRMB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx
Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU4MEUvMDBFOTI1MDRCMUNDMTFFQUE2QTNDRDdDQzRGOUFFMDIvMTY3NDVBODJC
MUNEMTFFQTlBMzFEQTdEQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUMAwDBABnBVkDBAJnBVgDBADKWikwDQYJKoZIhvcNAQELBQADggEBAI8P
s4ufblV7BZgaf/3TLe7ndsTvo2xQZGT448vs5me+KAx2bdY5PFozqii8puSikCaK
KlqEPSazUlKKxuFho/qpFfHHTpU+lUI6cYXe31CNK5icYIsz5lAqumd/ErSnP1YI
/uLswUIBlsU1nWhIl7/MNYagYiIUyv0yGmREwEdvaAY4FuUREA+j+fH/TqoUBfb/
GnPx7yHCyz4OZ2P/LUHVMperWOG85xyzOdvJD6XsNyr1tcBi7YtLglBCnzeKfSkk
TNzKo9nPXLCkr08V3vqddPKBBfDKI//bBsBOGBE7zTEMLreHpe8HS5VEQIVI5KWE
HnVrShLcaNtuWG1FHYI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:45 2026 by rpki-client