Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E649E89E6C0D11EB89BF4725C4F9AE02.roa
File:                     E649E89E6C0D11EB89BF4725C4F9AE02.roa (raw, json)
Hash identifier:          nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=
Subject key identifier:   FF:A7:F7:ED:A2:29:21:5B:7B:58:40:41:66:D3:C1:86:D8:01:8F:DA
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       074B
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E649E89E6C0D11EB89BF4725C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:04:40 +0000
ROA not before:           Thu 16 Oct 2025 23:33:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.153.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Oct 16 23:33:48 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46398-5928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:b3:c8:2a:6b:8c:fb:c8:d8:f3:5e:59:83:
                    86:f0:19:e7:d9:d5:e9:4a:d1:43:2b:f0:4b:0c:cd:
                    31:5c:ad:2c:2d:c9:6a:69:ff:04:5b:bc:24:f8:e0:
                    65:25:f4:40:67:98:77:17:98:bc:45:8f:01:f2:c3:
                    0c:17:a6:6a:25:18:d1:9f:77:8f:e1:77:de:6a:1c:
                    b8:82:8c:8d:f1:cb:70:b0:22:a7:c2:a6:62:df:95:
                    c9:ef:ee:78:06:97:a4:58:60:85:56:16:f1:65:36:
                    d0:4b:d3:52:66:80:04:a3:ab:c4:17:ba:25:f3:29:
                    db:18:1e:90:83:76:56:cf:f2:40:dd:f8:e3:53:8f:
                    5b:d3:bd:dc:9f:9e:6a:5d:80:6d:61:18:40:43:ce:
                    9e:4c:0c:84:bd:50:f4:4a:e9:52:5c:f2:e4:1a:14:
                    c0:98:6b:45:38:1c:ec:52:ad:fb:4a:cd:81:43:9e:
                    ed:c5:7e:35:a1:69:f8:bf:67:10:29:1d:9b:bc:38:
                    5a:6c:60:09:15:93:a0:99:0a:38:73:be:c7:85:3c:
                    a9:91:93:ed:dd:fc:36:48:45:9a:04:38:a7:cc:fb:
                    4b:6e:04:57:f8:55:92:87:1f:0e:09:82:fd:6d:d6:
                    c0:ae:14:b9:18:7e:13:ad:c8:78:54:14:0f:b8:f3:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:F7:ED:A2:29:21:5B:7B:58:40:41:66:D3:C1:86:D8:01:8F:DA
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E649E89E6C0D11EB89BF4725C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:bb:50:96:58:8e:65:96:ff:fa:1b:c7:cf:aa:20:a1:bb:
         17:df:00:30:80:b4:32:f6:0e:10:ce:e1:93:6d:bc:a8:d0:d3:
         6a:a1:dd:8a:55:34:55:93:0d:b8:c0:91:43:fb:86:51:c4:3c:
         1a:2e:99:00:a3:32:9e:6b:58:97:1e:1c:72:46:06:c9:6d:90:
         2f:3f:2e:3b:c5:9d:8a:fd:49:57:3b:38:db:57:8d:e6:4e:89:
         5f:21:20:6b:cb:b7:6f:33:6e:83:e2:63:48:74:85:c8:08:3d:
         03:15:32:73:f4:89:aa:3a:ff:28:08:6a:42:33:68:5e:65:49:
         29:1d:19:05:b7:75:62:df:1c:ec:1d:f1:d0:ca:8c:db:4e:52:
         b5:01:5b:be:bb:0c:49:38:3b:3a:34:54:7c:70:de:30:3c:87:
         b8:13:68:30:37:0d:29:12:5f:28:67:08:18:f3:f5:20:81:38:
         fd:3a:b4:7a:ef:b0:2c:f4:ea:53:c4:8e:ce:42:19:0b:13:a4:
         06:c0:9e:d1:a5:2b:05:e4:45:83:7c:20:80:79:15:3b:d2:35:
         3c:f2:e3:62:d5:80:d6:43:25:cd:b8:63:ba:d2:24:53:bc:64:
         1e:51:35:5a:d8:52:96:ca:c2:2d:c9:db:76:b0:cf:8b:7f:8b:
         d6:63:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:13 2026 by rpki-client