Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/188F1CDC1FFD11EBAB33D75FC4F9AE02.roa
File:                     188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (raw, json)
Hash identifier:          kYaOsRbog8ab77eC2WEVdZwGiVyxt26e5YUyLj2yZpw=
Subject key identifier:   13:76:CB:B4:2F:CB:72:99:1B:0A:66:CC:D1:79:F4:AD:02:95:98:82
Certificate issuer:       /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Certificate serial:       080F
Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/188F1CDC1FFD11EBAB33D75FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:26:02 +0000
ROA not before:           Tue 16 Dec 2025 21:17:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141403
IP address blocks:        103.158.51.0/24 maxlen: 24
                          103.175.233.0/24 maxlen: 24
                          2001:df5:4880::/48 maxlen: 48
                          2400:cba0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl
                          rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
        Validity
            Not Before: Dec 16 21:17:45 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4305a-0192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:a2:cf:e2:70:01:dd:05:66:2c:c0:42:7e:
                    db:11:f6:fa:61:a1:3b:23:e6:9d:5e:3e:c5:3a:01:
                    53:09:42:bd:62:ff:99:18:6a:1f:75:35:c7:f8:d8:
                    f4:94:b6:e1:35:e1:74:9f:93:a9:36:1f:c2:d8:c6:
                    4d:b0:4f:df:11:f6:e2:02:15:f9:97:ca:99:a0:e9:
                    32:80:58:1a:4a:91:6f:c6:ae:70:f3:4c:35:0c:e4:
                    14:04:67:83:2f:2f:eb:34:c1:41:8f:6c:21:c1:a4:
                    26:ea:cd:05:a7:19:e2:ae:ed:cf:03:63:ca:38:85:
                    f4:53:4a:87:e5:9e:93:a0:d9:72:5c:b6:41:55:20:
                    87:6a:1e:47:a1:db:ca:ed:40:ba:3d:95:f0:1c:64:
                    c1:dd:ee:37:f0:a0:0a:37:5f:5b:8c:c7:60:78:81:
                    23:0a:bc:6b:35:1b:01:de:68:8d:5c:da:fa:f8:fb:
                    fb:05:96:72:78:c1:c6:a7:42:8c:2a:49:ab:d1:bf:
                    77:7e:06:45:ec:36:65:9c:0f:23:a5:af:17:25:e4:
                    ac:f2:c2:3e:23:5e:e9:3d:4d:4d:f6:37:ba:5f:de:
                    f7:19:e4:8a:ae:9f:ed:df:44:18:6f:a2:53:d2:26:
                    61:fe:5b:8b:a6:e6:e9:3e:52:04:a6:42:81:25:74:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:CB:B4:2F:CB:72:99:1B:0A:66:CC:D1:79:F4:AD:02:95:98:82
            X509v3 Authority Key Identifier:
                keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/188F1CDC1FFD11EBAB33D75FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.51.0/24
                  103.175.233.0/24
                IPv6:
                  2001:df5:4880::/48
                  2400:cba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:32:b2:a7:80:2a:04:01:eb:cf:fb:22:7b:a9:15:ad:23:
         5c:e6:cd:62:54:79:a2:08:ab:b6:13:ea:d3:3d:86:09:75:df:
         7a:4d:04:66:8d:42:b3:00:19:92:40:57:4a:0a:64:a2:1c:67:
         77:aa:d9:45:9a:56:b2:a7:43:98:3b:ca:10:ff:0a:9a:89:6a:
         ea:1c:db:4d:0d:db:df:33:ce:0c:28:ad:88:61:7b:01:d6:3e:
         e9:80:5c:2a:bf:f3:d2:d1:70:60:ac:40:5a:1e:49:80:52:db:
         36:e0:0e:a2:c2:d0:c7:f2:34:2b:c8:1c:8a:60:ff:94:6b:93:
         cc:44:6b:c6:d5:e2:c3:b5:fb:bd:11:a7:46:db:17:c1:d9:ce:
         9e:81:b8:03:51:fd:6d:68:9d:87:f9:be:b8:cc:94:d4:22:fb:
         1a:50:32:f8:32:c6:a6:2e:8d:92:66:be:a6:a0:78:a1:a3:cd:
         f1:28:09:5f:97:3d:c1:ca:42:85:3e:6e:60:c9:7b:bb:02:b0:
         56:31:6a:de:82:9b:61:d6:67:e6:46:41:70:08:e4:30:89:b8:
         9b:03:1d:66:77:34:02:dd:c3:fa:67:82:88:5c:1e:da:f9:ef:
         05:73:cd:54:9c:64:29:e7:54:a5:d5:3d:43:64:0d:43:ba:30:
         33:73:05:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:01 2026 by rpki-client