Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
File:                     886907F8EE9911EDB02DA367C4F9AE02.roa (raw, json)
Hash identifier:          bmeOKgril6EzWUQHkUUUItVtX1T9wdLJYOztkdNH6Cg=
Subject key identifier:   D0:05:5D:48:F1:36:E6:FE:5C:D9:F4:8A:9C:B4:37:D1:54:4D:91:3A
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       0440
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
Signing time:             Tue 07 Apr 2026 00:33:28 +0000
ROA not before:           Tue 07 Apr 2026 00:33:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134806
IP address blocks:        103.183.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Apr  7 00:33:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d450d8-3664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:09:ee:c7:67:18:75:fe:b6:cf:3e:61:09:
                    2b:88:ec:28:a4:19:b3:85:55:95:20:54:14:bb:bd:
                    39:4e:9d:8c:5c:d7:35:49:4d:69:cf:f7:d1:21:8a:
                    94:66:93:b1:dc:9f:13:40:96:f2:cd:1a:c8:b9:0c:
                    79:e1:35:32:30:52:8e:5b:a8:47:65:51:0a:12:78:
                    49:35:dd:26:0a:89:e5:9e:65:64:3c:9c:f5:32:2a:
                    28:5a:eb:c1:bb:16:70:39:2e:d3:a9:71:05:93:21:
                    bf:bf:53:1f:7d:80:4f:e8:25:b1:a5:69:03:a7:f2:
                    3f:4b:62:0b:fc:0c:fd:5c:2d:42:76:df:ca:34:ba:
                    ab:44:06:d8:3f:3d:b6:04:ca:1d:27:4b:a7:83:96:
                    8f:1d:85:4a:9b:c6:a6:00:30:38:8a:0a:f7:5d:43:
                    ea:e4:73:25:1c:56:c3:85:f0:22:88:aa:42:61:64:
                    40:a1:0a:58:65:88:d5:c4:c0:41:07:da:11:3b:ee:
                    fe:ff:f9:f5:28:c4:95:23:be:b5:6e:fa:45:a3:64:
                    d6:35:bc:1b:ed:e8:f9:8e:63:8e:a8:71:48:ff:00:
                    d2:12:ff:5d:9e:c2:08:ab:85:14:8b:8b:51:dd:6c:
                    dc:8e:fe:1e:9f:d7:00:7b:8e:65:32:88:40:02:96:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:05:5D:48:F1:36:E6:FE:5C:D9:F4:8A:9C:B4:37:D1:54:4D:91:3A
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:06:1a:aa:f6:e9:1b:eb:71:db:ef:28:45:c9:b9:eb:9f:7e:
         0e:03:bd:0c:1f:0c:e2:29:d1:e6:06:8d:64:6b:c9:39:62:9a:
         20:0c:1b:e2:21:77:be:3b:35:6f:2c:38:b4:a4:54:d0:62:d1:
         bb:11:f2:24:4b:7c:91:26:5f:30:e3:11:e1:b8:18:de:89:0e:
         42:62:ec:f0:d3:d8:dd:bb:26:53:32:f8:f3:f8:db:a5:28:f2:
         8b:28:0b:ab:88:21:4c:32:d7:37:05:ba:a7:60:ff:24:91:36:
         0d:e0:e4:2b:b1:36:ab:09:48:8d:4a:a0:aa:58:4f:f1:fe:46:
         bc:34:f6:28:41:fa:1e:60:5b:e7:92:38:42:4f:72:6e:5a:af:
         11:ce:ce:12:6d:b3:00:54:4b:cf:09:a6:d6:9d:47:04:3d:c2:
         64:14:ef:94:b5:13:60:16:ca:aa:dc:d7:dc:d6:e7:c1:85:45:
         e4:59:1f:d4:09:8a:29:da:0a:9e:a3:23:ea:7a:8f:7c:32:35:
         7e:ba:f0:1f:bb:07:01:5e:d8:c2:f5:f9:93:fe:d2:9c:e1:9a:
         5c:54:28:fd:65:a1:6d:87:3d:f3:2e:12:10:6e:5e:65:8e:c8:
         07:a5:7a:5d:9a:05:fe:17:b1:9c:69:67:f9:f1:a8:77:95:a0:
         95:82:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:16 2026 by rpki-client