Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa
File:                     55751B541A2B11EDBA2C6D18C4F9AE02.roa (raw, json)
Hash identifier:          DVnyaXpktxnHQ3hoLaj91aZQnfyg4+dqcjoPZc6/pvU=
Subject key identifier:   39:21:A7:9B:8E:72:35:6E:48:B1:95:7F:A0:96:EE:AC:61:84:3B:91
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D316
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:23:55 +0000
ROA not before:           Thu 08 May 2025 16:04:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135726
IP address blocks:        103.132.56.0/22 maxlen: 24
                          2001:df0:1d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54038 (0xd316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:04:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bc7b-fd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:5d:20:66:11:86:f7:3a:1a:6b:d3:34:08:
                    96:d2:9c:ff:1a:e1:2c:9c:6c:e5:90:bd:b6:17:5c:
                    19:a6:1f:1c:00:1a:c3:47:a7:1b:b9:24:29:69:61:
                    d3:ba:2b:39:28:74:39:1d:13:82:5c:21:92:03:0a:
                    79:f7:ee:0d:bd:79:a0:66:4f:56:e0:32:22:19:65:
                    16:e9:99:1d:a8:ff:46:5f:8e:48:ad:08:ce:1a:8e:
                    43:d3:58:9d:37:08:ad:9b:a2:a4:b6:86:b1:a4:17:
                    30:0c:41:fd:96:b3:3f:77:3d:94:d5:3f:9d:8b:e5:
                    47:60:68:85:ac:90:20:34:5c:bc:fb:b0:61:5d:4e:
                    d8:42:60:90:d8:e3:e0:b5:8a:c5:0a:ab:92:19:07:
                    d0:97:f1:76:d9:69:be:04:05:00:7c:0a:a1:28:c3:
                    b3:7d:31:4f:ea:8c:d8:d0:c4:8b:2e:13:62:34:7d:
                    5a:59:f6:14:70:91:d5:10:e8:94:9e:2b:dc:ba:76:
                    53:b0:87:1c:95:4b:30:fd:06:e1:86:ac:e0:1d:fe:
                    68:d6:ca:4b:df:e2:95:23:3e:a6:41:3d:6a:0a:16:
                    5f:74:cc:99:3b:c9:6a:04:d0:05:c3:57:4b:63:3d:
                    11:a3:43:50:c2:ef:a0:f7:27:21:3f:8c:e5:26:c9:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:A7:9B:8E:72:35:6E:48:B1:95:7F:A0:96:EE:AC:61:84:3B:91
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.56.0/22
                IPv6:
                  2001:df0:1d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:07:67:47:7e:16:8f:33:c1:7e:0b:8e:d2:ac:40:ec:9a:
         d3:3c:cf:09:47:34:ff:00:57:5f:21:5d:c8:2e:1b:a1:2e:49:
         35:d4:3a:a4:7f:74:74:cc:01:70:ef:3b:48:3c:28:a1:01:73:
         20:46:97:6c:e8:49:b8:d2:d1:38:8b:6e:5f:ad:7f:6e:7b:b8:
         9d:b7:7d:56:86:ce:e9:70:64:38:a9:86:f8:29:2b:2b:3e:41:
         e5:8f:4f:0a:08:c6:ca:72:90:2c:56:82:0c:72:10:4c:ba:79:
         48:86:ae:f6:91:85:ed:d9:df:cf:d2:71:2c:6b:d5:e2:b6:f3:
         e9:72:84:6d:2e:6a:ec:57:f8:c8:f4:6d:16:b8:ec:f2:8a:8e:
         dd:95:1c:31:55:d1:b2:40:c1:3f:2e:e0:cd:50:ad:78:92:76:
         59:e3:bb:6e:51:b1:6f:6d:18:8d:d6:27:a3:f7:a6:1e:52:2f:
         12:a7:84:39:0d:0a:98:dc:94:c2:53:ea:55:6a:11:28:1b:03:
         58:04:42:20:d3:c5:18:ee:6c:a7:4d:b7:47:f6:cb:f4:60:b9:
         71:34:41:28:71:8c:d2:d1:bb:66:b7:f8:1b:28:52:ab:7e:96:
         f7:85:77:9c:9e:76:74:4e:b0:88:45:fd:a1:19:a4:5c:98:42:
         a7:9d:cc:ff
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDANMWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDQzMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJjN2ItZmQzZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJyBXSBmEYb3Ohpr0zQIltKc/xrhLJxs5ZC9thdcGaYfHAAaw0enG7kkKWlh
07orOSh0OR0TglwhkgMKeffuDb15oGZPVuAyIhllFumZHaj/Rl+OSK0IzhqOQ9NY
nTcIrZuipLaGsaQXMAxB/ZazP3c9lNU/nYvlR2BohayQIDRcvPuwYV1O2EJgkNjj
4LWKxQqrkhkH0JfxdtlpvgQFAHwKoSjDs30xT+qM2NDEiy4TYjR9Wln2FHCR1RDo
lJ4r3Lp2U7CHHJVLMP0G4Yas4B3+aNbKS9/ilSM+pkE9agoWX3TMmTvJagTQBcNX
S2M9EaNDUMLvoPcnIT+M5SbJU3MCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQ5Iaeb
jnI1bkixlX+glu6sYYQ7kTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU1NzUxQjU0
MUEyQjExRURCQTJDNkQxOEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAmeEODAPBAIAAjAJAwcAIAEN8B2AMA0GCSqGSIb3DQEBCwUAA4IB
AQA4OwdnR34WjzPBfguO0qxA7JrTPM8JRzT/AFdfIV3ILhuhLkk11Dqkf3R0zAFw
7ztIPCihAXMgRpds6Em40tE4i25frX9ue7idt31Whs7pcGQ4qYb4KSsrPkHlj08K
CMbKcpAsVoIMchBMunlIhq72kYXt2d/P0nEsa9XitvPpcoRtLmrsV/jI9G0WuOzy
io7dlRwxVdGyQME/LuDNUK14knZZ47tuUbFvbRiN1iej96YeUi8Sp4Q5DQqY3JTC
U+pVahEoGwNYBEIg08UY7mynTbdH9sv0YLlxNEEocYzS0btmt/gbKFKrfpb3hXec
nnZ0TrCIRf2hGaRcmEKnncz/
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:34 2026 by rpki-client