Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/CE84D1823BFF11EE80C18D54C4F9AE02.roa
File:                     CE84D1823BFF11EE80C18D54C4F9AE02.roa (raw, json)
Hash identifier:          ftbUf7d1dxy4HPxyOc8VeUAscQ6waTvpR4D/yI1qLzw=
Subject key identifier:   64:67:23:58:3D:D1:7B:6E:2C:82:FC:FB:2E:1C:DF:31:BD:CA:FF:A8
Certificate issuer:       /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial:       06AA
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/CE84D1823BFF11EE80C18D54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:57:17 +0000
ROA not before:           Fri 30 May 2025 23:33:25 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     131646
IP address blocks:        103.183.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1706 (0x6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
        Validity
            Not Before: May 30 23:33:25 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a453cd-3188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:73:20:8d:18:f1:aa:97:96:a1:29:e3:1a:
                    0a:ee:d0:0f:5b:c8:3f:a3:d6:c7:11:11:42:14:3a:
                    c7:9c:06:ef:20:bd:54:cf:e8:f4:f2:27:96:62:4a:
                    60:40:0e:35:48:46:03:26:45:37:52:2e:ec:3e:f3:
                    e6:34:31:06:34:86:28:61:f3:2d:6c:3d:a1:f7:78:
                    b2:3b:41:5a:89:27:03:37:f3:02:df:49:f9:ca:a6:
                    55:52:31:2c:05:05:b9:f7:c3:35:14:47:ae:38:3a:
                    75:31:5d:e8:5f:8d:c4:f9:71:e4:50:4c:b8:3e:5c:
                    43:a4:9e:7b:1c:2f:9e:36:2c:5b:7b:d5:e0:62:4e:
                    82:ff:8c:42:80:92:df:f5:c2:e6:15:57:92:57:2c:
                    76:14:a2:d8:4f:09:27:17:d6:ac:fb:cb:f9:15:85:
                    ea:2c:e1:74:94:44:b9:03:51:44:76:2a:b2:ac:c0:
                    ef:14:4d:53:a3:d0:01:e8:7c:92:eb:09:55:28:59:
                    23:df:44:72:d6:25:4a:c3:a7:ae:80:bf:13:b0:42:
                    1f:cd:6d:1b:0a:52:ab:92:c9:03:e3:8b:f5:40:39:
                    9d:3a:62:3b:5d:f6:76:1c:68:7c:ba:a4:ba:6d:42:
                    e5:67:22:ca:61:38:84:42:fd:c5:ee:85:d2:89:b8:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:67:23:58:3D:D1:7B:6E:2C:82:FC:FB:2E:1C:DF:31:BD:CA:FF:A8
            X509v3 Authority Key Identifier:
                keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/CE84D1823BFF11EE80C18D54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:78:0a:ae:7b:7a:4b:d7:2e:15:6e:59:5a:b2:ce:35:66:
         0f:77:57:8e:17:79:f9:ad:26:12:79:d4:b1:2b:11:cb:79:b0:
         e1:8f:d8:91:1c:fc:78:4d:4c:22:6d:a0:fc:81:16:c8:d0:16:
         95:cd:3c:da:89:00:39:aa:21:ab:78:1d:23:d1:4c:97:cd:51:
         c9:bb:79:e2:bf:cf:a3:32:be:e1:4e:a7:79:d4:9c:19:d1:51:
         8a:6e:2e:87:2a:bf:fa:13:1f:d7:9b:4a:c2:b1:cf:19:28:21:
         7b:7d:d6:d6:fd:15:85:f4:ee:3a:6f:0c:23:e6:dc:9f:54:d2:
         01:60:99:b3:6a:28:77:04:36:02:b6:9d:a7:62:d2:97:4a:08:
         52:ea:48:ed:f4:a0:4e:1c:d3:24:48:58:0c:54:d6:e4:1a:39:
         43:72:d8:28:57:c4:3a:11:be:71:ba:d6:90:ec:73:33:7d:fa:
         9e:ea:d4:59:bd:0e:35:23:74:4d:0f:a8:2f:15:8c:5d:dd:24:
         2a:5f:92:79:01:be:be:d0:31:5f:3a:20:fe:8e:9f:d0:aa:a9:
         28:8b:59:8f:55:41:d3:aa:f8:48:85:1a:e3:9a:45:c1:a1:a1:
         47:2a:cb:01:33:e6:d4:85:02:e9:53:25:1c:38:d4:08:4e:e8:
         6c:39:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:38 2026 by rpki-client