Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa
File:                     503DC7FA547F11EE9512EE75C4F9AE02.roa (raw, json)
Hash identifier:          9NOvh4xlPVRSfSWTuNbA/nSCtcSOmekA1WPpJANxarM=
Subject key identifier:   59:9B:DD:E3:BA:A9:2C:F9:75:09:A3:5F:08:88:DA:E2:BB:9C:AD:5D
Certificate issuer:       /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Certificate serial:       01D3
Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:20:23 +0000
ROA not before:           Wed 05 Nov 2025 03:48:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150386
IP address blocks:        103.88.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
                          rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
        Validity
            Not Before: Nov  5 03:48:09 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a412e7-f383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:b4:3c:30:45:37:27:27:42:6b:80:76:03:
                    95:a5:94:29:50:fc:02:92:20:36:b6:49:47:23:ac:
                    15:59:97:be:33:ee:01:55:bd:a4:2e:a3:45:8f:d9:
                    cf:aa:8f:a3:10:ea:43:40:f0:94:2b:4b:09:6b:c9:
                    46:dc:14:5e:aa:97:80:40:8a:74:1e:40:69:fe:85:
                    d0:30:d8:10:22:d5:8a:b1:d8:e3:60:5e:13:59:08:
                    7f:5e:d3:7a:80:fb:b5:de:c6:2a:d5:50:08:b2:fd:
                    9f:cb:46:d2:86:23:b1:26:8a:7e:44:71:37:74:3a:
                    9e:b8:7f:16:24:1f:05:90:fa:2e:12:58:5b:05:8f:
                    0a:31:16:0c:69:5b:a8:d1:e1:20:fb:59:7a:da:ea:
                    60:ea:fd:18:2e:7d:8a:80:d5:4d:d4:37:22:03:28:
                    4b:4c:a8:88:37:df:f0:99:26:c7:60:99:1d:b9:9e:
                    2c:6a:de:88:8a:cf:c8:d5:30:ae:85:e7:3a:8a:bc:
                    05:6c:5a:d4:b4:eb:f4:cc:61:a1:28:d3:ce:1f:b5:
                    05:29:e3:04:5d:3b:a5:e3:93:db:fc:0d:52:50:2b:
                    a1:61:38:c4:ad:62:78:94:a3:1f:a8:25:18:c5:77:
                    5b:f5:72:f9:31:70:6d:51:53:fd:b1:59:e9:95:7e:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9B:DD:E3:BA:A9:2C:F9:75:09:A3:5F:08:88:DA:E2:BB:9C:AD:5D
            X509v3 Authority Key Identifier:
                keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ee:01:3c:dd:b4:af:a3:e1:c0:9d:3c:a7:f4:ce:70:5a:d8:
         8c:71:1f:64:d7:da:8a:9f:64:9f:bd:86:67:7f:b7:3c:d8:91:
         6d:80:46:ea:65:5e:ba:bc:71:74:d0:5a:c9:28:97:e2:b2:30:
         55:5b:62:9b:00:9e:51:3d:1a:ff:54:e3:62:f7:67:46:e9:6d:
         36:0f:aa:d1:e5:85:1c:22:08:f6:9c:78:35:c6:42:ed:ee:45:
         31:df:7f:aa:f9:b2:2d:9e:dd:e7:98:c0:5e:8b:ac:34:c7:6f:
         e6:8c:58:f7:c8:ec:18:5f:aa:3e:17:79:cf:c7:64:a8:e7:7f:
         2c:c9:d7:1b:08:4d:1f:e2:57:1a:ac:14:2e:13:a8:7b:9a:73:
         5e:39:b8:ad:e0:c6:f3:79:79:f3:1d:a9:54:61:7f:b8:bd:04:
         2a:d5:f2:4a:0f:ba:07:f3:01:88:f0:8d:e8:d6:8a:b9:91:a8:
         c2:18:66:4d:70:8c:7c:02:c3:a6:7d:a1:6f:98:df:16:de:e5:
         00:c1:ea:64:c7:53:e1:53:09:f5:82:93:4a:27:35:46:c0:49:
         00:66:7a:03:5b:0a:22:cb:50:02:75:03:b0:57:c7:62:ae:77:
         51:c0:64:63:c9:6b:81:f3:10:b1:4d:05:5e:98:34:44:6c:53:
         d3:4e:68:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx
MEQ1Q0NDQUUwHhcNMjUxMTA1MDM0ODA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTJlNy1mMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlS0PDBFNycnQmuAdgOVpZQpUPwCkiA2tklHI6wVWZe+M+4BVb2kLqNFj9nP
qo+jEOpDQPCUK0sJa8lG3BReqpeAQIp0HkBp/oXQMNgQItWKsdjjYF4TWQh/XtN6
gPu13sYq1VAIsv2fy0bShiOxJop+RHE3dDqeuH8WJB8FkPouElhbBY8KMRYMaVuo
0eEg+1l62upg6v0YLn2KgNVN1DciAyhLTKiIN9/wmSbHYJkduZ4sat6Iis/I1TCu
hec6irwFbFrUtOv0zGGhKNPOH7UFKeMEXTul45Pb/A1SUCuhYTjErWJ4lKMfqCUY
xXdb9XL5MXBtUVP9sVnplX5ABQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFmb3eO6
qSz5dQmjXwiI2uK7nK1dMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0
N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTAxNEMvMTU0RkFDMkM1NDdFMTFFRThFNzEwMDc0QzRGOUFFMDIvNTAzREM3RkE1
NDdGMTFFRTk1MTJFRTc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1g0MA0GCSqGSIb3DQEBCwUAA4IBAQBD7gE83bSvo+HAnTyn9M5w
WtiMcR9k19qKn2SfvYZnf7c82JFtgEbqZV66vHF00FrJKJfisjBVW2KbAJ5RPRr/
VONi92dG6W02D6rR5YUcIgj2nHg1xkLt7kUx33+q+bItnt3nmMBei6w0x2/mjFj3
yOwYX6o+F3nPx2So538sydcbCE0f4lcarBQuE6h7mnNeObit4MbzeXnzHalUYX+4
vQQq1fJKD7oH8wGI8I3o1oq5kajCGGZNcIx8AsOmfaFvmN8W3uUAwepkx1PhUwn1
gpNKJzVGwEkAZnoDWwoiy1ACdQOwV8dirndRwGRjyWuB8xCxTQVemDREbFPTTmie
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:02 2026 by rpki-client