Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/AA314EC8249811EF971CED52C4F9AE02.roa
File:                     AA314EC8249811EF971CED52C4F9AE02.roa (raw, json)
Hash identifier:          ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=
Subject key identifier:   8C:AA:4F:97:0E:58:8A:8B:6C:BA:37:F4:E8:43:D3:12:B7:3D:E7:9A
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       036F
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/AA314EC8249811EF971CED52C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:56:03 +0000
ROA not before:           Tue 23 Sep 2025 01:50:09 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     150114
IP address blocks:        103.190.226.0/24 maxlen: 24
                          103.190.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
                          rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Sep 23 01:50:09 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a51863-a667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:86:57:9f:ab:44:e7:80:cd:aa:52:f4:f6:
                    bd:ca:54:e0:d0:85:62:02:f4:b9:67:7c:c4:ec:4c:
                    2d:be:a0:7f:50:e5:69:9d:bb:3e:23:64:12:1b:00:
                    2f:a3:04:17:8e:d2:d6:00:e1:7b:4b:3e:20:08:a8:
                    37:46:92:6a:c5:a3:9e:f4:ab:0d:b3:07:f1:d2:64:
                    e4:ca:97:33:f5:83:c9:8d:41:1f:3f:78:82:fc:ca:
                    12:4b:bf:73:73:e9:c5:e9:c6:aa:8a:8f:28:d9:cb:
                    0d:92:14:63:74:ce:94:d9:68:c8:76:51:7c:82:a1:
                    d5:5d:de:d4:80:7d:19:ff:79:ce:c1:9e:35:61:96:
                    0e:ad:06:58:8e:d3:cd:1a:c9:33:1d:83:b9:b9:68:
                    a3:c5:07:ac:f9:18:0e:8a:27:ff:31:e9:b8:d7:07:
                    e1:0e:ca:3a:57:12:03:11:89:c8:aa:bd:c7:4d:f8:
                    a3:06:5e:7d:31:42:09:2a:15:ad:19:5c:d6:bf:8c:
                    98:02:d2:2d:bd:a3:d6:56:a3:02:ac:21:7a:2b:c1:
                    dd:e1:ce:dc:28:d6:70:c5:bb:c0:2d:8d:84:c8:a2:
                    3e:52:d8:46:2e:f8:58:94:3e:a3:92:55:7b:97:f0:
                    8f:07:6d:db:fc:64:1b:0b:ec:0e:b0:c2:d1:a2:98:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AA:4F:97:0E:58:8A:8B:6C:BA:37:F4:E8:43:D3:12:B7:3D:E7:9A
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/AA314EC8249811EF971CED52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:11:51:18:cc:d5:0b:ab:d9:9f:ef:9c:f3:d3:2e:40:14:
         a3:5d:2b:76:4b:fc:a4:d0:fe:47:df:9b:58:1c:91:9a:84:26:
         26:6c:74:31:18:c9:19:0e:e9:d0:8f:c1:66:9a:1b:fa:56:35:
         db:d1:7c:29:58:1b:b6:62:0f:a7:46:33:58:8f:bf:0a:b6:9b:
         ee:30:f5:a5:c8:7d:23:45:0f:a8:cc:17:99:a5:34:77:ae:bc:
         2e:ac:66:4d:67:93:68:55:b8:e4:6e:27:a2:0d:1c:40:94:42:
         bc:50:e4:8e:26:3f:0a:ba:01:b4:94:2f:75:43:29:6f:6c:9e:
         a7:17:ed:ed:9d:49:a6:8b:83:9e:d2:d8:5f:c0:2c:fb:67:f4:
         d8:b5:85:b3:4c:50:56:35:12:28:f8:1e:7b:7e:df:54:0a:09:
         ff:eb:58:b5:f8:20:8e:90:13:dd:cd:05:3d:0b:81:83:c8:68:
         3e:6f:9b:c0:63:9c:09:e3:25:34:70:d9:fe:6b:70:78:8b:da:
         f8:40:ac:3b:fc:2f:d5:4c:14:14:19:a3:83:4b:db:43:72:83:
         51:72:7b:93:9a:9d:bb:3d:92:d1:9b:bf:61:74:56:9c:71:92:
         aa:30:19:4f:eb:32:27:88:1a:b0:08:25:75:6f:d6:92:48:a4:
         78:dc:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:50 2026 by rpki-client