Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
File:                     01553E10396311EAB24C5A5FC4F9AE02.roa (raw, json)
Hash identifier:          Uo93hzMxNF+jVqkGOria3VXRV3+weXxYw/vG0YhBuJs=
Subject key identifier:   A4:52:E7:94:BD:2D:F6:7B:0F:6E:1C:09:0A:E2:1C:88:5B:25:BD:D7
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0BD5
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:43:49 +0000
ROA not before:           Wed 30 Apr 2025 19:28:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55497
IP address blocks:        103.4.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3029 (0xbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Apr 30 19:28:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42675-9e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:9b:ac:c0:cb:d6:dd:78:a3:e5:74:72:07:
                    0a:79:b8:8c:41:d6:8c:9f:85:10:05:1c:17:6c:59:
                    2d:74:09:de:49:bf:9b:af:db:c7:44:0e:53:4a:61:
                    25:b6:11:ab:aa:ff:9c:23:95:79:b6:e0:a4:2d:15:
                    a5:9d:39:de:53:03:9b:c5:8e:dc:b0:31:45:02:8a:
                    3d:06:e3:9c:b5:b4:5f:b8:41:b6:fb:7a:ae:bd:e2:
                    0a:2e:d7:55:96:01:46:08:c4:34:65:e4:3a:da:3f:
                    1e:22:dc:6a:30:a3:90:13:5d:d3:b8:2c:88:a9:76:
                    70:6e:12:37:42:02:d5:5a:50:4a:9a:d3:11:91:49:
                    8a:7e:f7:ac:b2:bb:da:2e:de:02:49:f3:7d:b7:45:
                    ba:08:29:1c:d3:6a:9b:ec:0e:40:9a:1c:08:36:1b:
                    fa:9d:fb:9d:90:c9:09:23:15:d3:81:2b:46:21:07:
                    e8:59:4b:00:4f:6a:c6:ed:18:7f:a6:34:91:6d:b4:
                    72:5c:8c:06:c1:c1:9a:1e:ec:33:fd:19:08:dc:5c:
                    3a:b4:26:8c:3b:dc:b6:64:0a:79:80:a7:86:ba:e5:
                    99:b4:0d:e9:2c:74:9a:c7:1b:2d:d1:7c:f0:05:03:
                    60:c2:c1:a4:30:eb:23:a8:2e:57:df:93:87:99:31:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:E7:94:BD:2D:F6:7B:0F:6E:1C:09:0A:E2:1C:88:5B:25:BD:D7
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:f9:a5:66:15:90:f2:0d:91:4d:d2:96:5a:16:5f:a1:2d:
         c6:5e:02:8e:2a:4e:2e:fe:a3:09:42:3e:85:3c:68:7c:b2:8b:
         dc:f2:2f:bb:d6:d8:c6:ba:d4:37:b0:60:89:2a:d4:b9:d9:56:
         98:f5:13:2a:d4:a3:26:e5:09:c2:d4:bf:be:47:1b:41:44:9a:
         54:96:93:87:0e:5c:62:34:49:0c:a5:20:d8:7f:38:95:61:72:
         b8:ea:ed:27:9a:3b:65:e6:66:e1:2c:be:fa:f3:cc:52:36:b8:
         8a:bb:1e:01:84:79:a7:cb:cb:d2:94:59:f0:f3:7d:15:ce:0d:
         3f:c9:a0:dd:95:97:46:73:ff:28:3a:1d:33:87:16:1e:28:71:
         b6:8b:a1:53:1b:d2:9d:0e:b2:ab:a5:1e:4d:4d:84:c9:7a:b3:
         57:d8:b4:a0:7e:d7:0f:f3:1f:6a:7c:c3:2a:32:c0:91:58:d8:
         4c:b8:41:2a:5c:f5:bf:c3:94:7a:35:74:5a:e6:47:3c:34:db:
         72:8f:f7:b8:fe:63:e0:ba:02:49:75:bd:96:2a:41:fc:ee:4e:
         cb:d0:f3:d4:ae:84:ee:b5:ac:88:8e:25:b5:87:7a:f2:b8:27:
         36:99:6d:71:06:fe:48:2b:cf:7d:48:13:28:bc:4d:70:29:6f:
         90:b5:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:07 2026 by rpki-client