Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/55F7C16CABDE11EEA9B44639C4F9AE02.roa
File:                     55F7C16CABDE11EEA9B44639C4F9AE02.roa (raw, json)
Hash identifier:          +OOhEY2QYuVlJmHHeuO6Y/MNu74VTT7JnqNLcwMg9F4=
Subject key identifier:   DC:9E:8F:4B:48:D9:0F:EC:18:5A:F6:61:00:78:86:38:09:36:82:37
Certificate issuer:       /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB
Certificate serial:       019D
Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/55F7C16CABDE11EEA9B44639C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:31:21 +0000
ROA not before:           Tue 09 Dec 2025 02:11:14 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151982
IP address blocks:        103.250.102.0/24 maxlen: 24
                          2001:df3:1140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl
                          rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB
        Validity
            Not Before: Dec  9 02:11:14 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59f39-e4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:6a:e3:99:bf:33:3c:32:49:4b:61:db:c0:
                    2f:57:e6:b2:b7:aa:62:d8:45:bf:b7:b8:cb:0c:bd:
                    92:f8:ef:1c:3e:08:78:1f:31:c7:66:32:6b:90:3f:
                    a2:77:47:ea:5b:81:98:3f:64:20:85:57:c9:30:f0:
                    87:ac:bf:38:e3:5a:32:a8:59:59:e7:0d:3e:f5:06:
                    32:2b:97:02:d3:84:12:71:67:58:81:17:2e:61:c2:
                    0a:07:45:32:0f:cf:33:58:b1:d0:0d:8d:a4:91:a0:
                    92:42:7b:11:f7:f3:a2:59:63:f2:39:98:87:1e:a7:
                    65:ed:71:5c:85:ba:06:2b:9c:05:7d:30:14:ea:ed:
                    b3:02:e6:6a:b3:b8:d6:54:70:c3:9c:37:48:e0:9f:
                    8e:d8:ed:87:7f:ca:22:12:36:c8:62:45:01:6a:1d:
                    33:d8:d7:9c:2a:71:75:22:f5:ac:2d:58:53:37:b3:
                    14:94:f2:95:56:fb:fe:1e:55:56:91:4e:32:76:ec:
                    dd:c2:79:a5:7e:c6:ce:6e:5a:d9:c0:48:b2:05:d9:
                    4c:23:d7:cb:c4:d3:4b:cb:f1:50:ca:3b:33:cf:dd:
                    57:9a:c2:86:46:fc:80:c0:e0:75:93:98:e7:d3:47:
                    f7:72:2f:f3:b8:a1:43:de:d6:67:5e:50:0e:92:09:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:8F:4B:48:D9:0F:EC:18:5A:F6:61:00:78:86:38:09:36:82:37
            X509v3 Authority Key Identifier:
                keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/55F7C16CABDE11EEA9B44639C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.102.0/24
                IPv6:
                  2001:df3:1140::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:5a:6e:da:5c:e6:4b:92:77:72:b0:b9:31:1b:52:b3:f8:1e:
         ac:27:0c:39:ab:11:2d:98:91:dd:53:77:53:59:78:85:86:60:
         d7:1b:ff:bf:31:99:22:a1:9e:38:5e:9b:ac:fb:50:c0:52:de:
         1a:24:ef:db:26:0b:3e:89:56:30:49:ef:3d:39:52:48:fd:f9:
         17:49:63:3a:08:4e:6b:93:73:e3:6c:1c:fb:72:f7:19:5d:80:
         8d:24:0d:29:b8:06:69:85:88:59:7c:a7:80:a8:21:8b:aa:5f:
         e1:7b:90:a1:3a:f3:b9:59:73:ae:3e:7b:ae:b2:7c:8f:c2:69:
         b0:19:1d:e3:19:4b:70:8a:da:d6:a1:df:6e:a7:55:c5:32:a6:
         d5:de:f4:f9:ca:d6:14:77:44:b1:26:85:87:62:ad:7a:87:26:
         88:81:03:0b:47:64:ba:8d:26:71:3a:a0:dc:5f:2d:95:b5:e4:
         7d:d6:ee:5c:3d:e5:de:ed:bd:57:69:a0:f8:f6:eb:85:13:2f:
         70:24:a7:7b:55:e3:11:e6:33:ff:a4:ce:c7:82:b3:c9:ee:54:
         1f:d9:56:91:01:11:6f:d3:a6:92:72:2e:ef:18:26:00:80:41:
         bf:8e:11:29:c4:54:42:40:88:21:00:a5:6a:33:88:82:ff:c7:
         d4:12:f5:d9
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy
Mzc4NDQ1Q0IwHhcNMjUxMjA5MDIxMTE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWYzOS1lNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0JBq45m/MzwySUth28AvV+ayt6pi2EW/t7jLDL2S+O8cPgh4HzHHZjJrkD+i
d0fqW4GYP2QghVfJMPCHrL8441oyqFlZ5w0+9QYyK5cC04QScWdYgRcuYcIKB0Uy
D88zWLHQDY2kkaCSQnsR9/OiWWPyOZiHHqdl7XFchboGK5wFfTAU6u2zAuZqs7jW
VHDDnDdI4J+O2O2Hf8oiEjbIYkUBah0z2NecKnF1IvWsLVhTN7MUlPKVVvv+HlVW
kU4yduzdwnmlfsbOblrZwEiyBdlMI9fLxNNLy/FQyjszz91XmsKGRvyAwOB1k5jn
00f3ci/zuKFD3tZnXlAOkgn6ZQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNyej0tI
2Q/sGFr2YQB4hjgJNoI3MB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC
REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEIwODkvMEY4OTZBRkFBQkRFMTFFRTlFRjBERjM4QzRGOUFFMDIvNTVGN0MxNkNB
QkRFMTFFRUE5QjQ0NjM5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ/pmMA8EAgACMAkDBwAgAQ3zEUAwDQYJKoZIhvcNAQELBQADggEB
ABFabtpc5kuSd3KwuTEbUrP4HqwnDDmrES2Ykd1Td1NZeIWGYNcb/78xmSKhnjhe
m6z7UMBS3hok79smCz6JVjBJ7z05Ukj9+RdJYzoITmuTc+NsHPty9xldgI0kDSm4
BmmFiFl8p4CoIYuqX+F7kKE687lZc64+e66yfI/CabAZHeMZS3CK2tah326nVcUy
ptXe9PnK1hR3RLEmhYdirXqHJoiBAwtHZLqNJnE6oNxfLZW15H3W7lw95d7tvVdp
oPj264UTL3Akp3tV4xHmM/+kzseCs8nuVB/ZVpEBEW/TppJyLu8YJgCAQb+OESnE
VEJAiCEApWoziIL/x9QS9dk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:17 2026 by rpki-client