Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/D318E67076CA11EDAA4FE042C4F9AE02.roa
File:                     D318E67076CA11EDAA4FE042C4F9AE02.roa (raw, json)
Hash identifier:          4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=
Subject key identifier:   7A:02:C1:A0:6E:F7:D4:84:4B:49:B1:54:C8:E7:4F:92:B3:B6:8F:BE
Certificate issuer:       /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial:       0271
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/D318E67076CA11EDAA4FE042C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:05:41 +0000
ROA not before:           Thu 25 Dec 2025 01:22:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     58715
IP address blocks:        103.49.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
        Validity
            Not Before: Dec 25 01:22:22 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a455c5-6eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:eb:97:d8:f4:04:13:60:9e:6d:29:ea:db:
                    e3:a6:26:43:42:ec:c5:5d:f2:14:1c:1b:a7:da:12:
                    04:f3:fe:39:4f:1d:14:ec:c7:90:34:c5:18:ef:e2:
                    1a:d4:fb:8d:ea:e9:fa:22:64:ed:28:38:96:09:ed:
                    5a:d1:78:87:8d:01:33:92:b9:fc:3f:16:c5:d3:47:
                    e5:ac:a2:b1:c6:9a:c0:f6:ef:9e:75:fd:e6:4a:a0:
                    05:2b:b1:3c:8e:da:77:fd:dd:90:59:15:d9:94:42:
                    b9:da:0a:35:7d:3a:80:28:67:c7:c7:cb:63:7c:1a:
                    9e:2f:29:ed:50:08:c5:f0:49:52:16:f9:40:3f:7b:
                    a9:cc:3a:81:02:8c:7e:3a:9c:16:ce:17:6f:c1:a2:
                    ec:21:98:7e:1d:18:32:3d:fb:84:c1:fe:b7:43:52:
                    68:84:83:7e:85:00:9e:dd:36:a6:47:d8:9a:0d:4f:
                    ee:ce:40:0a:57:30:4c:95:60:70:e1:dd:f9:43:81:
                    0f:c5:bb:c5:38:35:80:90:6f:92:72:06:5e:96:41:
                    1e:54:6a:3c:16:3e:e2:d8:99:87:ff:ad:0b:ab:05:
                    78:08:23:0f:8c:bc:4f:6e:aa:96:0c:70:67:d7:40:
                    db:5e:a6:b6:84:b7:e4:ec:63:88:4e:2c:0b:2a:bc:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:02:C1:A0:6E:F7:D4:84:4B:49:B1:54:C8:E7:4F:92:B3:B6:8F:BE
            X509v3 Authority Key Identifier:
                keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/D318E67076CA11EDAA4FE042C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:e9:d5:a5:46:c1:07:2c:ab:8f:8c:d4:0f:87:a2:d5:79:1a:
         2f:b1:ca:80:06:cb:f0:9f:1f:04:a4:a1:a7:d9:18:aa:0c:c0:
         26:b9:fc:a3:7f:c3:5c:7e:3e:29:97:60:8d:1c:c5:89:bc:95:
         de:a7:f4:52:7e:9f:b2:c0:60:63:4f:b8:0e:a0:f2:f1:0d:41:
         0b:38:fc:97:ef:c9:f6:65:87:26:63:61:29:cf:fd:5e:e5:e9:
         50:79:b4:26:d6:45:88:b6:7f:5d:17:1a:e0:cb:ff:fa:fd:b9:
         34:65:92:9c:35:ec:9c:6b:d6:ff:43:64:8b:58:27:21:93:a0:
         67:eb:9a:6a:70:81:85:93:33:ad:f7:12:d1:3b:ec:c9:c3:bd:
         5d:9c:bb:5c:e0:5c:c4:a7:73:b8:70:d0:de:82:0f:ba:dc:c7:
         f8:a2:03:b4:cb:d8:0c:4c:6c:ed:8a:df:0c:23:d5:61:64:9f:
         e8:82:21:6f:03:fc:3b:f8:fc:6d:98:f7:fc:fe:ab:1f:97:89:
         3b:15:77:76:ee:9a:60:82:0e:79:3d:69:64:45:10:ca:a9:82:
         2b:73:aa:03:66:9c:4e:ee:54:af:f0:2b:a0:aa:08:aa:8a:18:
         c7:8b:30:d9:4f:99:3b:44:30:b8:d2:a4:88:0a:d0:f1:1e:2f:
         e6:88:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:13 2026 by rpki-client