Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/F5BCC96EF7EA11EF917C0251C4F9AE02.roa
File:                     F5BCC96EF7EA11EF917C0251C4F9AE02.roa (raw, json)
Hash identifier:          wfH9ZSnphBb3TGQSVEi9qxVFMUDtgonfHImgv6HMHnQ=
Subject key identifier:   30:88:87:75:40:15:56:08:FA:75:92:E3:72:08:60:5D:F0:2A:DB:0D
Certificate issuer:       /CN=A918FCB4/serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2
Certificate serial:       C6
Authority key identifier: B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/F5BCC96EF7EA11EF917C0251C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:07:14 +0000
ROA not before:           Tue 06 Jan 2026 20:17:04 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137491
IP address blocks:        103.154.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl
                          rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCB4, serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2
        Validity
            Not Before: Jan  6 20:17:04 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48e62-c949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:0d:ec:a2:c9:76:b9:9d:1f:1f:0f:c3:1b:
                    5a:bb:11:be:66:6a:54:48:18:28:20:40:af:b6:f5:
                    7e:ca:e5:52:e6:ac:1b:73:9a:c7:d5:82:55:da:e9:
                    af:4f:b5:e6:4e:17:2f:94:96:fd:e9:7c:ad:c5:ec:
                    91:d0:eb:de:19:0f:71:1e:a8:01:82:5d:8c:cd:89:
                    8c:88:44:85:e0:79:1f:a1:b8:81:8c:0a:d9:f3:71:
                    30:d6:25:3f:8a:08:8c:08:e7:f7:ec:60:60:38:ca:
                    b0:c4:16:14:a9:97:55:22:b6:d2:ca:fe:86:76:d8:
                    dc:10:8f:c1:08:e4:e9:18:f2:f7:3b:00:e1:ca:b1:
                    f9:45:1b:83:55:29:76:a5:e8:a3:11:a7:da:51:e3:
                    44:2e:c5:36:55:f1:89:97:61:2b:16:39:41:a3:73:
                    5a:23:42:b4:51:5e:22:41:15:38:c2:ce:c1:07:76:
                    59:a8:f8:a2:76:b9:5c:3c:ac:51:f5:97:d7:83:0b:
                    ba:76:ba:45:2c:fe:57:41:50:4e:41:97:f6:e7:d1:
                    c3:05:ef:8f:b0:0b:37:af:ec:d9:aa:93:78:2f:55:
                    9a:48:6e:c4:49:71:21:03:32:38:80:05:dc:04:a7:
                    04:bc:5a:54:9f:e8:a2:21:70:ff:e6:ba:65:40:e4:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:88:87:75:40:15:56:08:FA:75:92:E3:72:08:60:5D:F0:2A:DB:0D
            X509v3 Authority Key Identifier:
                keyid:B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/F5BCC96EF7EA11EF917C0251C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:33:69:d9:b9:60:a4:fe:cf:33:b3:38:09:39:27:67:72:b7:
         e6:c3:35:e7:99:f4:27:7a:82:bb:12:e7:84:70:69:17:84:8c:
         02:81:92:59:58:0e:71:5b:c6:51:30:f0:d9:62:68:c9:1e:bf:
         06:e4:12:85:c3:82:7c:6f:17:01:aa:41:cd:bd:78:99:e2:fa:
         73:5a:5a:72:b4:c8:f2:6e:76:ac:fd:8c:59:25:07:51:19:30:
         d2:c8:e8:78:f4:5c:e1:db:11:dd:69:c6:55:43:3d:6a:06:cb:
         cb:0e:77:fb:d0:12:18:8d:fa:dc:74:3d:d2:70:11:42:14:11:
         b5:40:f6:e9:9a:2a:6b:5a:89:31:a6:9a:82:09:7d:e3:39:32:
         75:cf:67:45:52:2c:9e:03:44:0e:3c:fd:da:cc:87:83:05:6d:
         c5:7e:77:d0:7f:5a:f0:c4:ca:9d:a4:11:ae:74:52:fe:65:55:
         d7:3d:ec:82:d5:2a:c7:99:b6:a6:45:95:ce:b2:a2:b1:6f:8f:
         48:47:31:a6:ef:33:98:d2:fb:d4:f4:cf:cd:4e:32:1d:be:7c:
         be:75:12:f0:07:45:64:68:d2:ee:79:fe:00:0b:d4:06:85:a5:
         82:8c:15:fc:99:07:c8:16:0e:55:20:12:10:51:e1:9d:2e:75:
         03:2e:9f:6d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDQjQxMTAvBgNVBAUTKEIyRkY2NUZBOTYxOTE0QTQ1Qjg5QkU1MTJEMzM2NTMw
ODlENkZGQjIwHhcNMjYwMTA2MjAxNzA0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGU2Mi1jOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApNkN7KLJdrmdHx8PwxtauxG+ZmpUSBgoIECvtvV+yuVS5qwbc5rH1YJV2umv
T7XmThcvlJb96XytxeyR0OveGQ9xHqgBgl2MzYmMiESF4HkfobiBjArZ83Ew1iU/
igiMCOf37GBgOMqwxBYUqZdVIrbSyv6GdtjcEI/BCOTpGPL3OwDhyrH5RRuDVSl2
peijEafaUeNELsU2VfGJl2ErFjlBo3NaI0K0UV4iQRU4ws7BB3ZZqPiidrlcPKxR
9ZfXgwu6drpFLP5XQVBOQZf259HDBe+PsAs3r+zZqpN4L1WaSG7ESXEhAzI4gAXc
BKcEvFpUn+iiIXD/5rplQOQeVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDCIh3VA
FVYI+nWS43IIYF3wKtsNMB8GA1UdIwQYMBaAFLL/ZfqWGRSkW4m+US0zZTCJ1v+y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz
ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi9zdjlsLXBZWkZLUmJpYjVSTFRObE1Jbldf
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N2OWwtcFlaRktSYmliNVJMVE5sTUluV183SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDQjQvM0E3QUQzQjJFMzg2MTFFQTlGQTIzQTM2QzRGOUFFMDIvRjVCQ0M5NkVG
N0VBMTFFRjkxN0MwMjUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5rsMA0GCSqGSIb3DQEBCwUAA4IBAQCQM2nZuWCk/s8zszgJOSdn
crfmwzXnmfQneoK7EueEcGkXhIwCgZJZWA5xW8ZRMPDZYmjJHr8G5BKFw4J8bxcB
qkHNvXiZ4vpzWlpytMjybnas/YxZJQdRGTDSyOh49Fzh2xHdacZVQz1qBsvLDnf7
0BIYjfrcdD3ScBFCFBG1QPbpmiprWokxppqCCX3jOTJ1z2dFUiyeA0QOPP3azIeD
BW3FfnfQf1rwxMqdpBGudFL+ZVXXPeyC1SrHmbamRZXOsqKxb49IRzGm7zOY0vvU
9M/NTjIdvny+dRLwB0VkaNLuef4AC9QGhaWCjBX8mQfIFg5VIBIQUeGdLnUDLp9t
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:16 2026 by rpki-client