Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16DAA12648AF11EE9B1A6C27C4F9AE02.roa
File:                     16DAA12648AF11EE9B1A6C27C4F9AE02.roa (raw, json)
Hash identifier:          OTh0+0rWVu4sM3CNbLFtNxmaNnYn6mxV3da+Su2KY5Q=
Subject key identifier:   90:78:CC:3A:FD:04:62:2B:81:58:9F:FC:27:FD:7D:AE:62:14:9E:A0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D8A4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16DAA12648AF11EE9B1A6C27C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:55:44 +0000
ROA not before:           Thu 08 May 2025 16:31:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        45.113.76.0/22 maxlen: 24
                          103.52.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55460 (0xd8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:31:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c3f0-8084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:4a:29:74:e8:4c:3d:c7:4e:15:78:17:88:
                    29:ce:88:dd:20:21:22:de:e4:19:35:6a:81:a4:22:
                    37:d5:56:b7:5a:ca:70:8f:7b:6b:86:da:3d:e3:5a:
                    dc:73:f1:d1:43:f8:63:18:ec:a9:a1:61:2c:2c:de:
                    73:f1:19:fd:f5:70:c9:ae:71:e5:db:e4:3a:25:9f:
                    38:cb:18:e2:5f:bd:21:84:4a:f2:c2:38:e1:7d:3c:
                    e0:ee:b3:f1:7b:5a:c0:e9:06:6a:9c:1b:f3:df:b8:
                    d9:a0:c9:7b:54:25:a4:f5:e1:08:d4:06:4a:2a:b3:
                    5e:9a:26:b7:6c:02:99:30:79:cb:d6:d3:8a:28:a9:
                    02:b0:e6:34:58:d1:86:23:ff:47:44:bd:eb:e4:12:
                    8a:37:4c:17:1a:41:93:af:f3:6b:0c:a5:6d:46:90:
                    f4:e0:5d:73:56:b4:b9:45:aa:84:65:36:cb:7f:76:
                    b7:e2:3f:3d:ed:e9:e9:e4:92:84:96:61:bb:56:d5:
                    e8:8d:95:0d:f7:89:59:d9:fb:69:5d:8b:ec:7a:db:
                    8f:4d:c9:06:49:08:54:8b:6e:be:6b:bd:fe:29:32:
                    ba:ae:e8:80:78:49:2d:fb:a7:62:63:ea:db:d0:e9:
                    0d:ce:7a:3d:57:89:d4:5e:17:59:3d:99:b8:06:16:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:78:CC:3A:FD:04:62:2B:81:58:9F:FC:27:FD:7D:AE:62:14:9E:A0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16DAA12648AF11EE9B1A6C27C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.76.0/22
                  103.52.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:e9:72:82:18:b6:64:86:03:21:f6:7e:b2:cb:70:d6:fb:ad:
         99:36:96:a0:f6:00:49:dc:d8:05:c3:15:61:51:43:4a:57:07:
         ec:71:9d:0f:b6:c0:38:3e:75:ba:65:74:36:75:43:ff:dc:2e:
         cc:7c:a7:c9:5e:4b:65:5a:e6:06:6a:8c:cd:88:bc:90:99:31:
         e4:20:cc:4a:b4:44:6d:be:1e:d2:f6:63:ef:8e:39:36:c7:91:
         05:95:94:15:a8:69:95:a3:6c:19:e0:43:2a:97:5b:a2:5b:12:
         02:5f:26:fe:92:c3:6c:b2:ec:7f:62:ef:8a:66:4d:9e:cd:09:
         fb:5b:55:fa:86:ee:31:af:47:33:44:fb:62:5a:61:cc:4f:7c:
         40:05:91:a3:c0:4c:f4:6d:32:25:1f:ab:5a:0e:e5:4e:8d:9b:
         89:ea:80:a1:e5:ea:8e:50:83:11:cd:49:bf:c2:d0:d2:8c:4d:
         8c:f2:ee:b1:c2:7a:55:14:2c:f7:80:97:ee:3d:d9:a1:be:77:
         bb:9a:14:02:9b:89:11:54:11:6b:eb:72:10:ed:98:f1:ed:04:
         06:50:f4:ed:f2:d8:37:2c:a2:f3:cb:7b:fb:59:9b:3a:c1:3f:
         b2:bb:59:ee:ed:77:03:10:c2:66:c7:f7:7e:ae:d3:c8:fb:cb:
         08:18:a0:0a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDANikMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MzExOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMzZjAtODA4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMlOSil06Ew9x04VeBeIKc6I3SAhIt7kGTVqgaQiN9VWt1rKcI97a4baPeNa
3HPx0UP4YxjsqaFhLCzec/EZ/fVwya5x5dvkOiWfOMsY4l+9IYRK8sI44X084O6z
8XtawOkGapwb89+42aDJe1QlpPXhCNQGSiqzXpomt2wCmTB5y9bTiiipArDmNFjR
hiP/R0S96+QSijdMFxpBk6/zawylbUaQ9OBdc1a0uUWqhGU2y392t+I/Pe3p6eSS
hJZhu1bV6I2VDfeJWdn7aV2L7Hrbj03JBkkIVItuvmu9/ikyuq7ogHhJLfunYmPq
29DpDc56PVeJ1F4XWT2ZuAYWxPsCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBSQeMw6
/QRiK4FYn/wn/X2uYhSeoDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE2REFBMTI2
NDhBRjExRUU5QjFBNkMyN0M0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAi1xTAMEAmc04DANBgkqhkiG9w0BAQsFAAOCAQEAg+lyghi2ZIYD
IfZ+sstw1vutmTaWoPYASdzYBcMVYVFDSlcH7HGdD7bAOD51umV0NnVD/9wuzHyn
yV5LZVrmBmqMzYi8kJkx5CDMSrREbb4e0vZj7445NseRBZWUFahplaNsGeBDKpdb
olsSAl8m/pLDbLLsf2LvimZNns0J+1tV+obuMa9HM0T7YlphzE98QAWRo8BM9G0y
JR+rWg7lTo2bieqAoeXqjlCDEc1Jv8LQ0oxNjPLuscJ6VRQs94CX7j3Zob53u5oU
ApuJEVQRa+tyEO2Y8e0EBlD07fLYNyyi88t7+1mbOsE/srtZ7u13AxDCZsf3fq7T
yPvLCBigCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:58 2026 by rpki-client