Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/EAAACB14A46111ECA6D7AC4AC4F9AE02.roa
File:                     EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (raw, json)
Hash identifier:          z9nPlpUkI9CipGsK73R+e0EsnY2AEoRQxMPi4v69wX8=
Subject key identifier:   87:5B:17:B4:7E:EE:DC:C2:7C:0E:7A:99:E4:0C:C7:58:0D:13:32:BE
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       0441
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/EAAACB14A46111ECA6D7AC4AC4F9AE02.roa
Signing time:             Tue 07 Apr 2026 00:33:31 +0000
ROA not before:           Tue 07 Apr 2026 00:33:31 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149638
IP address blocks:        103.183.68.0/23 maxlen: 23
                          103.183.68.0/24 maxlen: 24
                          103.183.69.0/24 maxlen: 24
                          2400:60a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Apr  7 00:33:31 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d450db-f24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:0b:f5:75:b5:f3:84:2b:b7:b3:11:32:fc:
                    69:a8:4e:81:b4:17:f1:c7:6c:9f:af:70:82:31:cb:
                    6e:f1:ff:6a:58:b2:f1:05:50:e7:fc:09:11:4b:cf:
                    e3:cb:98:a2:be:eb:2c:96:f8:97:f6:6f:87:b6:a6:
                    80:52:d1:cc:7d:a5:da:95:30:88:34:3c:4a:fe:2a:
                    e9:6c:ab:2e:72:6a:1b:7c:5a:48:bd:1d:38:18:7a:
                    28:c7:2b:39:6e:81:c5:6b:ba:cb:46:48:28:8a:1b:
                    4c:91:15:68:56:82:b2:73:6c:96:f4:30:49:ce:e6:
                    02:6b:73:72:66:04:72:5f:aa:ea:2c:5d:e7:31:b3:
                    5c:11:32:af:c8:2c:c7:b8:a9:e1:88:72:da:b5:cc:
                    9b:e9:bd:5c:ce:a6:60:4c:1f:06:95:1e:6a:51:6f:
                    96:ae:e7:7a:87:46:66:ca:95:7c:4e:66:9d:7d:e8:
                    6e:37:66:6a:03:c5:88:07:02:3b:b9:64:70:ee:24:
                    cc:1f:bc:0c:ea:65:1a:f3:55:be:1a:b7:9f:89:10:
                    7a:87:6a:43:5c:62:88:f2:a5:06:5b:ce:3a:17:32:
                    57:4e:d8:3e:f4:fd:a0:5f:de:97:30:b5:0e:95:cb:
                    14:ae:d0:63:24:f1:17:19:87:2a:49:f5:e2:7d:1e:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5B:17:B4:7E:EE:DC:C2:7C:0E:7A:99:E4:0C:C7:58:0D:13:32:BE
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/EAAACB14A46111ECA6D7AC4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.68.0/23
                IPv6:
                  2400:60a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:7e:4d:37:03:c3:b7:4a:36:e8:46:8c:2c:0c:22:29:49:
         86:12:c1:49:74:ee:48:94:1d:02:b3:f1:2a:c0:e2:db:cb:00:
         16:6b:55:45:47:fc:07:e3:b4:d2:16:c6:df:be:e2:f8:78:5f:
         65:77:af:9e:3d:36:42:a4:21:7b:20:76:2b:0a:3b:5d:19:fb:
         0e:78:81:ff:37:be:76:c6:57:0f:fe:e6:dc:df:61:c9:fe:4f:
         b0:46:78:56:58:2b:16:0f:bb:e2:4e:a7:36:eb:93:74:c6:70:
         b6:54:b5:2c:f4:7d:bf:37:85:07:36:de:33:f9:9c:3e:b9:41:
         4e:d1:38:74:1c:40:ab:05:3f:45:32:2c:12:25:79:12:db:78:
         70:1a:c1:4a:ab:72:31:27:ee:80:d1:ba:58:16:b2:bc:6c:4e:
         f4:6d:ee:bf:91:32:92:79:57:32:9e:7f:d5:23:be:de:55:85:
         a1:c3:1e:6b:b8:8d:f7:dd:fb:23:29:7f:d3:5b:7f:ca:f3:30:
         57:c2:d4:ca:93:9c:04:9a:c2:8b:56:4b:3a:da:45:b9:7e:af:
         54:a7:94:49:e8:fc:a6:6e:1f:47:0d:a8:35:c4:ee:82:df:a4:
         91:7f:94:6f:c5:82:53:43:42:82:66:37:22:6d:27:12:20:73:
         91:90:79:66
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw
NkQxOTc0NzMwHhcNMjYwNDA3MDAzMzMxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ0NTBkYi1mMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArkEL9XW184Qrt7MRMvxpqE6BtBfxx2yfr3CCMctu8f9qWLLxBVDn/AkRS8/j
y5iivusslviX9m+HtqaAUtHMfaXalTCINDxK/irpbKsucmobfFpIvR04GHooxys5
boHFa7rLRkgoihtMkRVoVoKyc2yW9DBJzuYCa3NyZgRyX6rqLF3nMbNcETKvyCzH
uKnhiHLatcyb6b1czqZgTB8GlR5qUW+Wrud6h0ZmypV8TmadfehuN2ZqA8WIBwI7
uWRw7iTMH7wM6mUa81W+GrefiRB6h2pDXGKI8qUGW846FzJXTtg+9P2gX96XMLUO
lcsUrtBjJPEXGYcqSfXifR6H0QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIdbF7R+
7tzCfA56meQMx1gNEzK+MB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF
NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUIxODAvMTAyQkExOUU5RTQzMTFFQzg3RDBCMjZGQzRGOUFFMDIvRUFBQUNCMTRB
NDYxMTFFQ0E2RDdBQzRBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7dEMA0EAgACMAcDBQAkAGCgMA0GCSqGSIb3DQEBCwUAA4IBAQBI
yX5NNwPDt0o26EaMLAwiKUmGEsFJdO5IlB0Cs/EqwOLbywAWa1VFR/wH47TSFsbf
vuL4eF9ld6+ePTZCpCF7IHYrCjtdGfsOeIH/N752xlcP/ubc32HJ/k+wRnhWWCsW
D7viTqc265N0xnC2VLUs9H2/N4UHNt4z+Zw+uUFO0Th0HECrBT9FMiwSJXkS23hw
GsFKq3IxJ+6A0bpYFrK8bE70be6/kTKSeVcynn/VI77eVYWhwx5ruI333fsjKX/T
W3/K8zBXwtTKk5wEmsKLVks62kW5fq9Up5RJ6Pymbh9HDag1xO6C36SRf5RvxYJT
Q0KCZjcibScSIHORkHlm
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:15 2026 by rpki-client