Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
File:                     886907F8EE9911EDB02DA367C4F9AE02.roa (raw, json)
Hash identifier:          ugYyh2tWa/EfFa2n6GBnKXjm3DO0Nx4EENY2rTL3k2Y=
Subject key identifier:   45:3D:30:8D:9A:58:C8:E6:7B:84:D2:21:76:DA:03:48:26:02:E6:C0
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       0428
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:02:03 +0000
ROA not before:           Thu 03 Apr 2025 00:57:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     134806
IP address blocks:        103.183.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Apr  3 00:57:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40e9b-4f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:e3:72:02:8e:3c:4a:6d:29:f9:d5:3e:10:
                    5a:c3:19:18:1c:a9:0c:e7:5c:e7:7e:f9:12:40:24:
                    a6:87:85:41:b5:42:6a:0f:0f:04:bd:9b:18:d9:63:
                    11:ae:ef:7f:39:b9:aa:63:c6:bc:d5:55:f3:59:3b:
                    42:7f:5e:7e:55:02:13:1f:6a:48:e5:f8:1d:bc:ac:
                    9c:d5:f1:19:db:a9:ee:58:4a:14:28:48:6e:14:83:
                    29:d6:0b:6d:57:4a:20:fd:09:71:58:cc:ba:79:56:
                    b6:c7:e0:59:b9:90:63:fc:f6:6d:65:9a:a1:68:95:
                    cb:6a:36:34:32:73:a6:54:c8:5f:2b:b6:c9:17:b1:
                    0d:b1:3a:fa:f4:7c:85:a0:cb:ac:16:64:7d:8f:58:
                    98:bf:4f:93:4f:74:b4:8a:40:ae:bb:d3:cf:05:ac:
                    ea:2c:c0:16:fc:c7:ed:a1:a1:60:01:af:41:8b:c3:
                    1f:a3:71:f2:c6:b4:2e:b7:37:d9:cf:05:b9:a5:44:
                    ba:0d:b1:93:02:25:89:e9:83:91:02:32:62:44:94:
                    ec:68:1f:59:26:10:ff:f3:aa:86:86:c9:f5:f2:45:
                    23:71:40:26:e0:2a:05:ff:2f:4a:5c:d9:73:c9:ce:
                    56:be:32:aa:b7:08:61:27:17:82:ba:d9:e0:58:4d:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3D:30:8D:9A:58:C8:E6:7B:84:D2:21:76:DA:03:48:26:02:E6:C0
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a0:50:1c:9d:99:b8:1c:53:8a:6d:a2:56:6a:7f:fb:58:40:
         4b:20:f2:0d:a1:da:b9:7c:1a:69:6e:9b:96:8f:2a:2c:60:8d:
         8b:50:ad:fc:b6:b1:98:eb:69:dd:d3:90:d5:19:a8:91:23:5b:
         03:f9:bb:ac:b2:82:d2:1d:68:79:7a:e9:c5:d1:2e:48:18:17:
         60:6e:aa:d0:44:d4:d0:c0:d1:31:08:45:18:8a:a3:c5:b6:e9:
         b2:c0:75:47:c0:7b:28:1b:66:1e:3b:db:14:b3:8e:f7:7c:9d:
         5d:5b:3c:d0:74:f4:f8:bf:29:97:3d:c4:93:e6:87:57:9a:ca:
         31:38:37:12:a9:a7:e5:58:be:5d:c2:30:53:d6:47:16:20:c2:
         e0:ce:64:1c:42:29:85:2e:06:cc:c4:5a:b2:9a:a0:d9:42:73:
         08:da:58:5f:01:4b:82:0b:13:7f:c2:4f:44:e6:a9:e3:f7:64:
         b4:e4:53:0f:bd:99:e5:79:99:31:3c:c0:79:d6:1f:11:c3:4c:
         9c:3f:8e:a3:95:42:c1:54:74:da:75:15:7e:c7:95:22:9e:d4:
         c5:c7:26:3f:86:80:db:1c:a3:3a:5b:2a:66:67:de:4b:82:e2:
         fc:79:9f:d9:39:d3:8a:f4:d1:e8:64:4b:c2:61:99:b7:59:90:
         a1:81:05:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:10 2026 by rpki-client