Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B54C3DBA169411EBBEBD9A23C4F9AE02.roa
File:                     B54C3DBA169411EBBEBD9A23C4F9AE02.roa (raw, json)
Hash identifier:          uHAJeAX70wsp/eeV5Bp1w19TMmSSBJmKzqhhCVPk8Ng=
Subject key identifier:   41:11:72:1D:EE:2F:E7:86:47:AF:95:DF:F8:2D:C3:2E:C2:48:8B:0E
Certificate issuer:       /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial:       0811
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B54C3DBA169411EBBEBD9A23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:44:26 +0000
ROA not before:           Wed 02 Apr 2025 21:53:25 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58915
IP address blocks:        103.18.150.0/24 maxlen: 24
                          103.209.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
                          rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
        Validity
            Not Before: Apr  2 21:53:25 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a45ed9-5d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:74:c6:a4:ae:a2:98:0e:8d:16:f2:9f:4d:
                    60:c4:22:03:60:f5:44:96:8d:67:cb:b7:93:31:39:
                    dc:8c:ad:b2:e2:0e:8c:4c:40:cc:ce:46:19:ff:55:
                    83:f2:e1:a8:05:a5:45:e1:de:45:02:96:4d:e4:b6:
                    5e:9b:77:0b:f8:9c:7f:d2:95:23:e6:7a:30:b2:a4:
                    4d:bf:ca:4f:5e:e6:a3:2c:f5:b2:d6:11:58:07:29:
                    37:0a:63:6d:7a:5c:7d:bb:67:b3:32:c0:aa:f2:8c:
                    4a:cb:18:03:15:ca:71:f2:a9:a0:a1:19:a9:af:d8:
                    07:05:dc:1c:f0:56:91:f9:64:a7:7a:45:26:79:b4:
                    d8:6f:80:cc:20:fc:33:9d:5e:f8:a3:d5:f3:c5:5a:
                    ed:ec:d0:d1:b3:5c:70:e5:84:2a:24:ab:d6:67:df:
                    d8:a3:dd:02:ac:9f:94:f5:58:52:be:d3:12:05:34:
                    6d:39:8f:8d:63:b9:d8:b7:e0:92:b8:9f:be:8f:3a:
                    99:01:56:5d:e6:ac:d6:90:60:80:bf:34:87:d8:f5:
                    91:ab:9e:49:0d:20:ed:9a:65:48:59:cf:04:73:cf:
                    43:41:80:51:09:30:2c:42:fe:51:93:94:f5:7e:0b:
                    d2:74:dc:f7:40:ae:47:1d:25:e0:c8:b2:9a:a3:3a:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:11:72:1D:EE:2F:E7:86:47:AF:95:DF:F8:2D:C3:2E:C2:48:8B:0E
            X509v3 Authority Key Identifier:
                keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B54C3DBA169411EBBEBD9A23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.150.0/24
                  103.209.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:1a:f0:5a:14:ed:a9:95:5f:c2:4e:d7:c3:2b:85:25:2e:
         29:66:01:ad:c8:c5:48:91:c0:8d:6b:2c:78:14:ff:c4:a5:64:
         78:c3:dc:d3:87:98:48:29:ed:15:fc:b4:eb:4d:1c:e6:7d:f4:
         3f:ff:98:00:a0:6f:97:e6:57:61:ff:f8:bb:af:c9:e7:8f:37:
         d9:aa:7e:d3:0f:24:d7:09:83:f8:f2:c6:a5:5b:8f:a0:ae:8d:
         ee:97:3b:08:f0:15:a4:f5:eb:ad:ab:86:c9:b0:76:33:5a:ae:
         b2:42:85:99:39:b8:85:0c:9c:d1:e0:e5:e1:ea:57:48:1f:bd:
         aa:d0:37:e4:21:c9:ba:d9:d8:23:e4:ea:e0:48:58:ac:0d:6c:
         6c:ca:ef:90:37:8f:ed:2a:a9:0e:4e:39:12:9d:c0:a9:60:4e:
         c5:db:4d:18:e2:29:82:6f:a9:29:1e:1a:bd:ed:7a:e6:be:2e:
         ae:61:fb:81:d9:3f:82:78:9c:36:2e:cc:3a:a6:44:e8:7f:7f:
         93:77:29:04:31:02:1f:4f:40:1e:da:71:ff:d0:4c:01:65:b1:
         6c:d4:5a:2c:0a:a8:d0:bc:b9:4f:d9:a8:2b:3c:dc:d8:45:47:
         4a:aa:84:7c:a7:75:dc:bf:d4:13:79:e5:1f:aa:dd:5a:ab:a1:
         6e:2f:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:19 2026 by rpki-client