Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
File:                     0F291AFE9D2811EC83448E6FC4F9AE02.roa (raw, json)
Hash identifier:          Kr35OqLAdLLcbYsUb9Idl/TWhv1QqY/qee8KwLiHvqE=
Subject key identifier:   D3:A4:D6:8F:E4:3F:6B:76:E0:D3:99:C6:68:AD:E4:06:02:D6:EF:2E
Certificate issuer:       /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial:       042C
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:55:18 +0000
ROA not before:           Thu 03 Apr 2025 00:56:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149521
IP address blocks:        103.182.118.0/23 maxlen: 23
                          103.182.118.0/24 maxlen: 24
                          103.182.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
                          rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068 (0x42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
        Validity
            Not Before: Apr  3 00:56:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fef6-f55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:8b:53:1a:e7:ec:35:a3:73:c8:61:fd:7a:
                    84:4c:76:42:dc:33:5e:23:a2:c5:a4:60:8f:09:ac:
                    8f:e1:47:53:27:d7:ba:c6:e0:8a:55:6f:d9:ff:00:
                    dc:d7:7e:a2:c6:e6:7e:71:f9:74:78:c9:bc:c9:a2:
                    ad:d9:50:35:3d:75:1c:47:12:98:7e:4a:a3:8f:5a:
                    b2:d3:d3:6c:62:60:87:86:0a:60:45:30:32:ea:8b:
                    69:10:8f:d6:ee:d5:16:03:e5:5a:c2:6c:0c:ef:54:
                    a3:90:61:5e:a2:47:5f:77:42:fc:be:4b:41:b4:d7:
                    ca:f6:f5:88:0d:af:5d:6a:c0:7c:6b:32:ea:33:18:
                    5b:ef:53:45:23:75:76:7a:5c:f3:54:22:bc:3a:87:
                    ec:a5:46:1f:14:0d:40:cf:37:c2:be:01:22:d1:51:
                    43:61:fd:34:98:22:3a:d9:e6:3c:12:d2:09:5e:7d:
                    d0:47:08:99:ce:c8:61:d0:65:6c:d7:81:c0:bd:72:
                    2d:82:a5:2e:d8:06:ff:07:5a:56:d7:08:64:94:b3:
                    d5:55:4d:df:23:47:92:81:60:5e:8a:8a:e6:f6:2f:
                    96:d9:27:0b:b3:f2:5f:d2:ab:e0:e9:5a:75:d8:af:
                    e2:65:4a:8e:e6:ae:99:80:1c:ed:d3:c2:ed:66:22:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A4:D6:8F:E4:3F:6B:76:E0:D3:99:C6:68:AD:E4:06:02:D6:EF:2E
            X509v3 Authority Key Identifier:
                keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:7e:00:58:e0:66:a2:70:26:b2:0b:cd:5f:bf:36:02:a5:96:
         45:06:6c:18:44:ad:24:06:17:95:ee:79:94:75:08:bb:b9:7a:
         a8:65:c8:30:ff:5f:fe:bf:ac:b7:f6:a1:f0:5e:e5:f6:ef:d8:
         60:a9:7b:1b:e0:6b:5e:c9:15:ca:6c:04:27:7c:c5:c7:20:bd:
         48:d7:73:e2:aa:6a:d4:a7:57:05:33:3a:5f:b2:d8:4e:9f:83:
         0e:0b:63:0e:5a:e4:75:7a:26:a5:3c:4f:c4:0e:13:41:63:11:
         ce:b3:d8:b2:22:39:fb:2e:b3:fd:63:8c:40:bc:e6:85:8d:f9:
         77:71:44:2b:54:17:cc:5d:a3:8f:b9:67:f6:6d:4c:ee:b1:dc:
         94:de:2a:8f:27:a7:76:46:8b:31:62:a5:67:e9:a9:2a:20:83:
         88:11:0d:53:a9:65:0c:70:ed:35:d9:4c:4b:2c:d9:03:de:77:
         3b:07:4b:3a:c2:a9:10:e1:1a:c2:1d:68:59:43:8d:66:57:4f:
         a6:51:32:26:96:37:b9:52:c0:62:ea:a8:5b:09:93:50:15:7a:
         b8:78:da:d8:80:27:5a:cf:4d:f0:02:5c:ea:07:d9:74:6a:2c:
         fb:2f:01:a9:22:eb:02:12:e5:3e:57:05:ae:b3:36:e7:7a:f2:
         a2:07:52:9c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE
NTIzM0Q5OTUwHhcNMjUwNDAzMDA1NjU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmVmNi1mNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/KLUxrn7DWjc8hh/XqETHZC3DNeI6LFpGCPCayP4UdTJ9e6xuCKVW/Z/wDc
136ixuZ+cfl0eMm8yaKt2VA1PXUcRxKYfkqjj1qy09NsYmCHhgpgRTAy6otpEI/W
7tUWA+VawmwM71SjkGFeokdfd0L8vktBtNfK9vWIDa9dasB8azLqMxhb71NFI3V2
elzzVCK8OofspUYfFA1AzzfCvgEi0VFDYf00mCI62eY8EtIJXn3QRwiZzshh0GVs
14HAvXItgqUu2Ab/B1pW1whklLPVVU3fI0eSgWBeiorm9i+W2ScLs/Jf0qvg6Vp1
2K/iZUqO5q6ZgBzt08LtZiJB7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNOk1o/k
P2t24NOZxmit5AYC1u8uMB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE
MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MThCMzIvRkY3NzFCQkM5RDI1MTFFQzg1RkRGMzZFQzRGOUFFMDIvMEYyOTFBRkU5
RDI4MTFFQzgzNDQ4RTZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7Z2MA0GCSqGSIb3DQEBCwUAA4IBAQBgfgBY4GaicCayC81fvzYC
pZZFBmwYRK0kBheV7nmUdQi7uXqoZcgw/1/+v6y39qHwXuX279hgqXsb4GteyRXK
bAQnfMXHIL1I13PiqmrUp1cFMzpfsthOn4MOC2MOWuR1eialPE/EDhNBYxHOs9iy
Ijn7LrP9Y4xAvOaFjfl3cUQrVBfMXaOPuWf2bUzusdyU3iqPJ6d2RosxYqVn6akq
IIOIEQ1TqWUMcO012UxLLNkD3nc7B0s6wqkQ4RrCHWhZQ41mV0+mUTImlje5UsBi
6qhbCZNQFXq4eNrYgCdaz03wAlzqB9l0aiz7LwGpIusCEuU+VwWuszbnevKiB1Kc
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:41:10 2026 by rpki-client