Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87F3E6F4EB5311EA9AC71F30C4F9AE02.roa
File:                     87F3E6F4EB5311EA9AC71F30C4F9AE02.roa (raw, json)
Hash identifier:          dwiemHrvNyUc69ui9ZdZ2DotrZF323W6nOw4/qbZ1r8=
Subject key identifier:   6E:E6:82:43:25:88:4B:90:64:6D:4C:34:B4:10:9A:5D:07:36:3D:8F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D1C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87F3E6F4EB5311EA9AC71F30C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:16:44 +0000
ROA not before:           Thu 08 May 2025 15:57:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132988
IP address blocks:        103.80.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53701 (0xd1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:57:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bacc-8a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a1:8b:4c:39:63:f9:74:93:ae:a6:c1:7d:4f:
                    97:ff:e5:a6:71:81:a1:f8:b2:8a:47:89:57:66:8f:
                    7b:bf:df:22:26:bc:11:94:ec:3e:61:38:5e:6f:3f:
                    3a:40:32:55:a9:af:90:e6:eb:1b:fe:54:8f:55:d8:
                    d3:47:86:20:c1:57:ba:ce:66:e0:d6:cc:4a:34:45:
                    2b:ca:3c:ae:b8:b0:44:c4:86:50:3a:bd:cb:05:86:
                    8d:2f:17:92:ed:58:3b:33:fd:65:6e:6a:fd:95:ab:
                    c0:ce:7b:4c:8d:df:e5:8f:bf:f3:48:aa:6b:35:f2:
                    57:47:31:e4:0e:d6:83:c7:ec:29:4e:c7:d3:b8:76:
                    e6:9e:b0:76:00:f3:37:42:68:d1:3e:57:23:f9:04:
                    bb:02:c2:12:14:8a:6c:09:98:d1:55:53:72:aa:ef:
                    b0:5d:5e:57:6d:5e:ba:c7:06:d7:27:c9:b7:d8:03:
                    8f:d4:87:f8:6e:ca:16:8f:d3:c8:48:f6:3b:f7:e8:
                    2b:31:b6:d9:14:07:2b:32:68:fa:2c:17:13:fa:52:
                    0c:be:94:89:e4:6c:d8:f7:ae:9c:26:bf:69:33:47:
                    00:e5:df:49:a1:c8:91:f1:04:c4:b8:bf:16:a7:22:
                    0d:62:be:e9:3b:65:8b:e1:7c:a2:5f:63:12:78:ff:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:82:43:25:88:4B:90:64:6D:4C:34:B4:10:9A:5D:07:36:3D:8F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87F3E6F4EB5311EA9AC71F30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:48:37:84:fb:1d:cf:75:be:92:62:92:f6:58:3f:02:06:b2:
         0d:c2:8c:ab:9b:ff:0f:5d:8a:16:0b:e9:9d:bb:28:5c:96:b8:
         aa:9f:d9:cd:70:33:5d:5a:78:6f:8d:c5:98:ec:06:12:ad:b4:
         01:c0:18:70:41:c1:33:ab:2b:45:e8:a9:ad:5f:74:46:72:5b:
         60:dc:a9:ee:3f:40:28:51:f7:b7:8a:59:70:69:81:31:16:d3:
         1b:e2:77:5d:b6:13:92:c6:7f:50:cf:de:1b:b8:1d:92:8f:d0:
         88:12:ae:9d:21:26:8f:fb:8f:4b:61:c6:33:a1:65:ed:34:87:
         49:10:39:aa:6b:9b:41:2e:25:d4:c5:c8:62:8b:38:18:1f:10:
         0b:5b:92:98:51:13:70:61:56:f7:56:74:92:a0:d8:8e:59:fd:
         97:da:e8:ec:8b:93:44:88:55:7e:de:f1:ee:1c:af:6e:e4:62:
         e0:32:a0:38:e3:e0:75:b4:97:91:c4:bf:3d:8a:21:ad:52:08:
         7a:36:31:ed:23:29:94:f0:6a:f2:d8:4f:60:70:e2:7a:0c:c4:
         f6:b6:b0:2a:53:3c:f9:56:4f:34:7d:5a:9b:d1:14:4d:b7:de:
         8f:87:c0:6d:f1:ea:2b:28:f1:a8:6b:29:a6:9d:ce:cf:34:7a:
         73:00:fc:7b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANHFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE1NTczM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJhY2MtOGEzZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANyhi0w5Y/l0k66mwX1Pl//lpnGBofiyikeJV2aPe7/fIia8EZTsPmE4Xm8/
OkAyVamvkObrG/5Uj1XY00eGIMFXus5m4NbMSjRFK8o8rriwRMSGUDq9ywWGjS8X
ku1YOzP9ZW5q/ZWrwM57TI3f5Y+/80iqazXyV0cx5A7Wg8fsKU7H07h25p6wdgDz
N0Jo0T5XI/kEuwLCEhSKbAmY0VVTcqrvsF1eV21euscG1yfJt9gDj9SH+G7KFo/T
yEj2O/foKzG22RQHKzJo+iwXE/pSDL6UieRs2PeunCa/aTNHAOXfSaHIkfEExLi/
FqciDWK+6Ttli+F8ol9jEnj/aR0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRu5oJD
JYhLkGRtTDS0EJpdBzY9jzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg3RjNFNkY0
RUI1MzExRUE5QUM3MUYzMEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdQcDANBgkqhkiG9w0BAQsFAAOCAQEAYEg3hPsdz3W+kmKS9lg/
AgayDcKMq5v/D12KFgvpnbsoXJa4qp/ZzXAzXVp4b43FmOwGEq20AcAYcEHBM6sr
ReiprV90RnJbYNyp7j9AKFH3t4pZcGmBMRbTG+J3XbYTksZ/UM/eG7gdko/QiBKu
nSEmj/uPS2HGM6Fl7TSHSRA5qmubQS4l1MXIYos4GB8QC1uSmFETcGFW91Z0kqDY
jln9l9ro7IuTRIhVft7x7hyvbuRi4DKgOOPgdbSXkcS/PYohrVIIejYx7SMplPBq
8thPYHDiegzE9rawKlM8+VZPNH1am9EUTbfej4fAbfHqKyjxqGsppp3OzzR6cwD8
ew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:03 2026 by rpki-client