Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa
File:                     AC549BBCD64C11F086D19BCFA9248E41.roa (raw, json)
Hash identifier:          dWYmbgaVBCtICno2DXbASgGqvt29K/L5vXNYpaWvnIU=
Subject key identifier:   4A:5D:6A:A0:C1:96:5E:4B:5E:B3:19:C8:6D:F3:AE:CD:73:96:1E:8B
Certificate issuer:       /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial:       0E9E
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa
Signing time:             Sun 01 Mar 2026 17:39:39 +0000
ROA not before:           Mon 12 Jan 2026 12:35:25 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138624
IP address blocks:        103.134.225.0/24 maxlen: 24
                          2001:df7:d500::/48 maxlen: 48
                          2001:df7:d501::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
                          rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3742 (0xe9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
        Validity
            Not Before: Jan 12 12:35:25 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a479db-579d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:1b:ed:73:80:c6:43:bb:63:7d:91:ba:89:
                    c5:02:10:4d:be:b9:cc:bc:00:5a:75:d2:38:41:67:
                    2f:f3:27:88:ed:cd:db:be:34:bf:71:a4:45:c8:f2:
                    98:b8:44:b3:35:8c:79:43:d0:cf:9a:83:fb:7b:0f:
                    ef:ba:84:67:1e:f1:7d:14:22:7f:e4:e9:38:58:4d:
                    ef:aa:86:07:4f:15:69:4d:97:c6:84:c5:60:f7:3d:
                    d9:27:77:56:9f:4f:1b:c5:a2:36:a0:c2:8f:aa:32:
                    bf:43:3e:51:b9:ce:56:5e:f4:ed:66:9c:55:95:da:
                    c6:b4:00:94:49:80:ed:62:cb:9e:f5:7c:cd:27:9e:
                    56:c8:55:99:40:60:d8:3c:4b:c3:30:53:7d:ae:6d:
                    a3:3c:1c:14:39:94:a7:52:c1:8c:89:e4:ca:d8:8d:
                    4c:7e:2d:48:d0:bc:80:63:63:f0:cb:8c:af:75:d0:
                    cd:1d:fa:4e:8f:6e:c6:66:80:a8:a7:b4:ed:55:37:
                    c2:f1:ca:e5:67:ac:ac:9d:1b:90:d7:ae:75:c2:cc:
                    8f:bd:1a:d7:26:75:11:21:70:e5:eb:1e:01:e2:42:
                    f5:46:aa:95:97:86:ba:9b:1c:b4:ea:87:d5:07:51:
                    42:3b:50:9b:8f:50:65:83:e0:dc:54:79:ef:97:3d:
                    05:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5D:6A:A0:C1:96:5E:4B:5E:B3:19:C8:6D:F3:AE:CD:73:96:1E:8B
            X509v3 Authority Key Identifier:
                keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.225.0/24
                IPv6:
                  2001:df7:d500::/47

    Signature Algorithm: sha256WithRSAEncryption
         46:72:85:60:e3:cb:ce:e2:4f:fe:a6:8c:8b:a9:d7:2b:73:f7:
         8a:64:ae:70:49:13:b7:95:0e:ae:be:a6:7d:0a:fa:68:c4:ce:
         3d:be:6a:61:cf:61:32:55:52:de:08:c6:e1:0b:50:bb:4c:14:
         a8:79:3a:f0:ae:7f:28:fa:a7:61:4c:53:c6:fe:0e:16:47:5d:
         d8:1a:17:e6:67:a6:f8:53:03:04:38:d7:75:a2:94:7e:1c:38:
         d4:8d:f4:87:09:3d:dc:da:1e:3c:e4:54:a3:a8:f3:c8:78:68:
         df:ea:3b:1e:79:ae:58:ba:03:95:b4:5f:8d:66:7b:5c:36:a3:
         74:55:5a:d2:b9:f5:7c:d0:f3:cf:41:e9:cb:ba:d4:31:06:99:
         41:71:f9:9f:6f:39:a8:8c:c4:67:d5:b5:b8:c7:66:6d:a0:95:
         1b:21:c5:b3:a1:1b:ab:14:d1:4d:6a:c5:ec:ac:8f:67:55:db:
         37:65:55:64:34:1b:cd:46:b2:e3:9a:c2:a5:48:9e:87:bc:04:
         a8:ea:c4:46:16:27:5d:fa:fa:6b:28:c8:78:6d:51:62:18:54:
         77:8c:d9:22:f4:4e:5a:1f:0f:e8:31:0e:db:8e:9d:20:f7:87:
         09:d3:aa:ae:8c:65:48:24:c0:5a:b0:ea:0c:06:38:61:46:5c:
         6a:ad:ad:ab
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF
MEY0MDU1MzAwHhcNMjYwMTEyMTIzNTI1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzlkYi01NzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYcb7XOAxkO7Y32RuonFAhBNvrnMvABaddI4QWcv8yeI7c3bvjS/caRFyPKY
uESzNYx5Q9DPmoP7ew/vuoRnHvF9FCJ/5Ok4WE3vqoYHTxVpTZfGhMVg9z3ZJ3dW
n08bxaI2oMKPqjK/Qz5Ruc5WXvTtZpxVldrGtACUSYDtYsue9XzNJ55WyFWZQGDY
PEvDMFN9rm2jPBwUOZSnUsGMieTK2I1Mfi1I0LyAY2Pwy4yvddDNHfpOj27GZoCo
p7TtVTfC8crlZ6ysnRuQ1651wsyPvRrXJnURIXDl6x4B4kL1RqqVl4a6mxy06ofV
B1FCO1Cbj1Blg+DcVHnvlz0FEwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEpdaqDB
ll5LXrMZyG3zrs1zlh6LMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1
ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEY4QjEvN0Q1NEEwQ0FCNTg2MTFFOUFBNUY0RDY1QzRGOUFFMDIvQUM1NDlCQkNE
NjRDMTFGMDg2RDE5QkNGQTkyNDhFNDEucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ4bhMA8EAgACMAkDBwEgAQ331QAwDQYJKoZIhvcNAQELBQADggEB
AEZyhWDjy87iT/6mjIup1ytz94pkrnBJE7eVDq6+pn0K+mjEzj2+amHPYTJVUt4I
xuELULtMFKh5OvCufyj6p2FMU8b+DhZHXdgaF+ZnpvhTAwQ413WilH4cONSN9IcJ
PdzaHjzkVKOo88h4aN/qOx55rli6A5W0X41me1w2o3RVWtK59XzQ889B6cu61DEG
mUFx+Z9vOaiMxGfVtbjHZm2glRshxbOhG6sU0U1qxeysj2dV2zdlVWQ0G81GsuOa
wqVInoe8BKjqxEYWJ136+msoyHhtUWIYVHeM2SL0TlofD+gxDtuOnSD3hwnTqq6M
ZUgkwFqw6gwGOGFGXGqtras=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:24 2026 by rpki-client