Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/51D222025DEF11F08A4EA06FC4F9AE02.roa
File:                     51D222025DEF11F08A4EA06FC4F9AE02.roa (raw, json)
Hash identifier:          Ht+AYFRYgTia5PfBCXy1G2MKk6pS05Kn+q7rQOjqmks=
Subject key identifier:   A5:E6:E8:96:09:91:6E:AA:77:79:EA:08:91:37:BB:87:79:C2:D8:B6
Certificate issuer:       /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Certificate serial:       7F
Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/51D222025DEF11F08A4EA06FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:20:26 +0000
ROA not before:           Mon 09 Feb 2026 07:29:14 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138477
IP address blocks:        103.108.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
                          rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
        Validity
            Not Before: Feb  9 07:29:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a420fa-11bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:10:dc:da:9a:b6:72:0f:52:38:66:7d:de:fb:
                    e6:9c:a9:f4:e9:31:85:53:46:58:a1:2d:1a:0a:49:
                    3f:cf:de:05:22:19:39:7a:28:fd:bb:50:f4:78:ec:
                    eb:12:de:17:8b:a6:80:b0:3c:f5:c3:de:f3:39:2a:
                    de:01:23:99:89:53:9f:92:f4:d3:bf:a8:8f:83:ac:
                    46:d2:b1:1d:97:fb:67:2d:55:cc:35:9f:db:a7:e9:
                    49:d3:2b:bc:49:ef:96:c9:0e:51:53:c4:d5:de:30:
                    6b:e3:97:cd:62:b2:8c:d4:e3:54:92:ec:6d:fa:ed:
                    14:a4:0a:5c:1b:d4:e7:54:76:73:47:3e:93:10:a2:
                    0c:24:29:64:bb:99:69:66:66:ac:70:2d:b9:e0:63:
                    42:47:2a:22:f3:db:f2:64:95:ed:29:24:55:fd:6d:
                    a0:0d:27:b5:e4:c4:d6:84:8e:a4:14:a2:de:30:4b:
                    72:10:df:d7:6d:32:5f:e8:8e:f6:40:3a:96:33:78:
                    e8:7a:e7:5b:88:17:fc:b9:d9:a6:df:a4:4a:39:6f:
                    dc:76:8e:14:ca:5f:4a:b3:36:f3:90:39:5a:d4:0d:
                    e0:f1:5a:9f:63:b8:b3:31:72:f3:8c:3d:4c:30:1c:
                    90:ec:bf:75:af:8c:32:91:9e:99:52:cb:58:16:d0:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E6:E8:96:09:91:6E:AA:77:79:EA:08:91:37:BB:87:79:C2:D8:B6
            X509v3 Authority Key Identifier:
                keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/51D222025DEF11F08A4EA06FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8c:58:58:78:cb:07:de:ce:44:01:1c:15:a1:68:e4:30:ce:
         51:ce:ca:d8:81:ed:11:b7:32:a3:96:93:31:08:6f:65:6b:1d:
         c4:b9:5b:82:1b:2f:b1:f2:57:1e:5e:4a:a2:67:4a:ca:13:dc:
         d5:b9:bb:4d:61:08:77:89:39:10:39:56:83:34:79:c1:cc:63:
         6c:1a:74:d9:e4:cb:25:70:44:59:8c:5a:c7:f6:e7:2a:40:6e:
         69:51:de:22:b2:9f:a6:92:38:c1:d1:1d:0a:36:a0:2c:73:b9:
         9a:7c:2a:35:73:19:2d:9f:22:08:04:a9:e6:04:0c:77:0f:a4:
         4a:a5:d4:10:b8:ba:02:e1:71:4d:20:da:68:6c:d6:d7:1d:f7:
         c8:a6:e2:6f:c4:53:18:68:22:1c:68:09:65:e5:cb:46:d4:27:
         ba:77:f6:f0:6e:99:91:a9:a8:48:dc:86:c2:e5:77:62:db:de:
         44:e3:5a:ba:70:db:45:46:d8:90:8e:91:05:1f:0f:66:ef:2a:
         0b:87:be:59:92:92:5b:67:72:04:c5:b0:69:12:11:ab:b9:49:
         19:47:8b:8a:dd:d5:11:7d:2b:52:19:62:a3:46:d5:bb:2d:11:
         d1:c5:71:e9:a4:8a:6f:91:e0:fa:1c:fd:19:6f:cd:d1:45:58:
         43:5c:99:d5
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
ODQyRTExMC8GA1UEBRMoMTlBMDQzODE5OUZERkUyNERDRjg1NjYyQTQ4QkRCNTc1
MUUxQjVEOTAeFw0yNjAyMDkwNzI5MTRaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTQyMGZhLTExYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDhENzamrZyD1I4Zn3e++acqfTpMYVTRlihLRoKST/P3gUiGTl6KP27UPR47OsS
3heLpoCwPPXD3vM5Kt4BI5mJU5+S9NO/qI+DrEbSsR2X+2ctVcw1n9un6UnTK7xJ
75bJDlFTxNXeMGvjl81isozU41SS7G367RSkClwb1OdUdnNHPpMQogwkKWS7mWlm
ZqxwLbngY0JHKiLz2/Jkle0pJFX9baANJ7XkxNaEjqQUot4wS3IQ39dtMl/ojvZA
OpYzeOh651uIF/y52abfpEo5b9x2jhTKX0qzNvOQOVrUDeDxWp9juLMxcvOMPUww
HJDsv3WvjDKRnplSy1gW0L+bAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUpebolgmR
bqp3eeoIkTe7h3nC2LYwHwYDVR0jBBgwFoAUGaBDgZn9/iTc+FZipIvbV1Hhtdkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NDJFLzYxOTlCRDU0NURF
RTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lUYy1GWmlwSXZiVjFIaHRk
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR2FCRGdabjlfaVRjLUZaaXBJdmJWMUhodGRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODQyRS82MTk5QkQ1NDVERUUxMUYwOEZBQTJCNkRDNEY5QUUwMi81MUQyMjIwMjVE
RUYxMUYwOEE0RUEwNkZDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnbLowDQYJKoZIhvcNAQELBQADggEBAGGMWFh4ywfezkQBHBWhaOQw
zlHOytiB7RG3MqOWkzEIb2VrHcS5W4IbL7HyVx5eSqJnSsoT3NW5u01hCHeJORA5
VoM0ecHMY2wadNnkyyVwRFmMWsf25ypAbmlR3iKyn6aSOMHRHQo2oCxzuZp8KjVz
GS2fIggEqeYEDHcPpEql1BC4ugLhcU0g2mhs1tcd98im4m/EUxhoIhxoCWXly0bU
J7p39vBumZGpqEjchsLld2Lb3kTjWrpw20VG2JCOkQUfD2bvKguHvlmSkltncgTF
sGkSEau5SRlHi4rd1RF9K1IZYqNG1bstEdHFcemkim+R4Poc/RlvzdFFWENcmdU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:07 2026 by rpki-client