Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa
File:                     183E52D8224711EB9EC51D58C4F9AE02.roa (raw, json)
Hash identifier:          0GPHGJSwVSQN+HbeQHFY1E7yMWeA5ao5zjgE2dX2Ib0=
Subject key identifier:   3A:09:39:DD:D9:20:64:AC:BA:E5:C5:BD:5A:B8:91:92:64:28:72:7E
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36BF
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:45:37 +0000
ROA not before:           Tue 02 Sep 2025 15:01:24 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     209181
IP address blocks:        103.230.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14015 (0x36bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep  2 15:01:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48951-c756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:09:3b:ed:28:6e:85:d0:f6:3b:e9:8d:66:
                    d6:cb:fb:0d:3e:2e:83:d3:20:17:cb:bf:16:f7:fa:
                    d0:ef:d2:7b:2f:50:29:0c:ae:91:51:f5:46:1b:f6:
                    a3:5f:58:ea:d8:8f:57:ef:b4:19:01:e7:f6:d3:6f:
                    ec:93:c6:8e:fe:f3:d2:da:bc:8e:b6:40:c5:4e:97:
                    38:8b:9a:15:df:f3:c4:1b:ae:91:76:95:48:6a:1e:
                    11:96:55:95:3b:15:ba:33:c4:fb:2d:34:aa:43:32:
                    5d:79:51:c0:2f:1d:52:25:73:b9:2c:a9:29:6c:41:
                    c0:08:46:e3:c6:44:25:95:68:78:60:10:71:0d:ea:
                    44:f4:51:cc:b6:a7:19:95:a8:55:2f:14:ce:aa:66:
                    74:20:9a:aa:f2:66:8e:eb:b0:cd:72:db:ab:e3:99:
                    2e:b4:5c:15:1c:43:09:1a:52:28:e2:2e:81:d6:cc:
                    ea:59:31:c2:d7:d2:bf:61:46:3c:07:c7:67:08:e8:
                    59:05:d9:e2:1f:6a:a9:95:9c:f0:d6:43:99:67:70:
                    4f:b0:ca:12:7a:ca:70:be:70:79:71:46:89:47:4f:
                    91:b6:44:32:3a:81:20:07:e9:b4:a1:4d:89:b5:0b:
                    6a:bd:8e:e1:6a:4e:65:da:0a:d3:da:eb:89:2a:c6:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:09:39:DD:D9:20:64:AC:BA:E5:C5:BD:5A:B8:91:92:64:28:72:7E
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:17:50:e8:fe:b1:f5:10:cc:20:11:87:08:54:85:86:a7:16:
         03:1c:be:9c:b0:14:51:c0:6c:90:87:d3:e9:fa:f2:18:65:5a:
         12:8a:b0:23:b0:05:3b:bb:4e:6a:10:9c:66:d9:cc:e2:85:bd:
         52:b6:ea:46:62:a9:61:b4:42:b3:09:3e:03:03:d8:4a:d7:3c:
         7d:8e:d5:1e:21:d3:b0:ae:e0:f5:c7:7d:36:21:ab:d7:d8:99:
         7d:e5:39:b8:b6:13:34:5c:bf:7e:de:3a:db:8d:24:d7:53:b0:
         3d:91:3a:bc:03:c7:17:75:4e:4b:54:9d:8c:f7:aa:11:08:49:
         1f:44:3e:5c:2f:2f:bf:84:fa:0a:a8:3e:d9:41:b5:49:a7:1a:
         44:d0:e4:35:0e:23:4b:ed:9d:04:6e:bf:47:0d:f0:dd:ba:7b:
         cb:85:1b:ad:73:9f:f1:3c:0b:d9:91:52:d0:30:bb:87:b7:d7:
         6b:1d:93:de:16:de:38:a4:3e:06:82:5d:7e:88:5d:83:2f:d0:
         20:58:14:2f:46:1a:15:56:42:c7:0a:48:c0:61:64:23:93:1f:
         61:76:de:fa:3c:53:36:68:a0:d7:71:ac:cb:f8:8d:e3:81:53:
         fd:5c:eb:8d:21:3c:23:4f:d9:14:c0:f0:1c:a1:ab:d0:5a:da:
         1e:bc:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:52 2026 by rpki-client