Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
File:                     F95379BE124411EB9E551E38C4F9AE02.roa (raw, json)
Hash identifier:          tVdm80GZciXDqxrsC1qu6sp6NqTX4sjazEOsOa9oXcE=
Subject key identifier:   63:26:BD:95:9F:AF:D1:EB:15:56:31:4B:26:D0:49:5D:80:91:09:83
Certificate issuer:       /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial:       0888
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:55:58 +0000
ROA not before:           Mon 02 Jun 2025 21:47:55 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140103
IP address blocks:        103.148.148.0/24 maxlen: 24
                          103.148.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA19, serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
        Validity
            Not Before: Jun  2 21:47:55 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4294d-5986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:a2:e9:f5:1b:12:7c:69:2f:22:3c:20:e2:
                    95:b2:bc:7e:2c:92:29:51:2d:ee:9c:e8:85:e7:f5:
                    d2:bb:d0:72:80:0e:0b:80:49:7c:84:c0:0a:56:c4:
                    f8:d1:98:c1:1a:e2:3a:46:16:c8:28:ac:3b:c0:92:
                    9f:4e:a5:df:89:27:66:55:37:2d:db:90:a3:7a:63:
                    95:f7:81:46:e3:f0:97:2c:86:8d:a4:60:3f:ad:86:
                    49:3a:26:c9:8e:d8:7c:23:b6:c4:37:51:8c:8a:a0:
                    8c:55:f7:58:59:58:a2:62:83:26:33:b2:e5:41:3f:
                    ac:56:5b:07:17:7b:73:27:10:03:ae:06:04:32:e0:
                    5c:d7:9c:39:e1:d8:79:42:be:ab:b3:44:25:41:b2:
                    cc:36:5b:32:95:a3:43:bc:db:a7:32:b7:49:b4:36:
                    cd:93:ce:29:30:ea:d7:3d:5a:b3:59:a4:fd:1b:bb:
                    67:c1:be:cb:82:6e:a9:c2:83:f1:38:96:e1:78:a1:
                    49:b8:52:7f:f6:99:3c:33:ae:0e:a4:75:f4:49:59:
                    e3:e5:2e:81:cc:d6:07:17:49:2c:6e:36:e3:3a:8a:
                    8c:e8:6f:74:5d:e0:36:f0:75:10:53:88:8a:76:3c:
                    fb:b6:c8:3d:37:36:ef:99:27:7d:4e:0b:03:4d:34:
                    fc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:BD:95:9F:AF:D1:EB:15:56:31:4B:26:D0:49:5D:80:91:09:83
            X509v3 Authority Key Identifier:
                keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:51:52:80:11:8f:2e:b8:22:da:38:c1:f4:41:67:ce:fd:23:
         9d:9e:df:14:51:1c:97:79:ee:36:52:0b:3b:35:f3:28:9c:9a:
         48:99:e0:c1:97:01:90:aa:b6:cf:75:1a:c9:cd:8b:bc:5f:49:
         8f:db:95:34:06:25:ad:1f:3f:77:5c:b8:78:f9:26:e9:76:c0:
         37:e2:d0:55:37:c6:47:10:2d:13:c7:91:a6:e2:b9:56:40:32:
         8f:30:70:3c:b4:32:a3:33:cf:32:62:48:c0:7e:6e:63:d4:ac:
         81:fa:5c:8e:70:d3:b9:35:72:87:3d:69:d6:67:22:3d:77:54:
         82:71:cb:68:34:aa:35:69:22:de:4a:ad:d3:e0:be:69:31:69:
         d8:84:99:b6:a7:99:c2:64:b1:50:1c:28:66:36:0d:12:f9:83:
         d9:f3:66:19:00:74:70:65:5b:28:e5:07:a2:f5:aa:87:58:c4:
         de:1d:9a:a5:48:68:06:93:8d:d8:a7:30:da:fb:ee:41:6a:c9:
         f2:d9:bd:07:80:55:b1:c7:8d:81:18:d3:92:ad:78:ad:98:c7:
         2f:f3:76:f9:6e:c0:0f:04:7d:ce:14:b4:a2:3c:e6:45:b3:53:
         b4:ac:af:04:37:e6:56:db:4f:b0:d1:82:6b:47:01:00:ca:22:
         f9:16:81:2a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURBMTkxMTAvBgNVBAUTKEU4MEY1NzgxNkVCODA2ODg1REM1RUIxRUMyRTFBRDU0
QTJGOUYyREYwHhcNMjUwNjAyMjE0NzU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mjk0ZC01OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlgKi6fUbEnxpLyI8IOKVsrx+LJIpUS3unOiF5/XSu9BygA4LgEl8hMAKVsT4
0ZjBGuI6RhbIKKw7wJKfTqXfiSdmVTct25CjemOV94FG4/CXLIaNpGA/rYZJOibJ
jth8I7bEN1GMiqCMVfdYWViiYoMmM7LlQT+sVlsHF3tzJxADrgYEMuBc15w54dh5
Qr6rs0QlQbLMNlsylaNDvNunMrdJtDbNk84pMOrXPVqzWaT9G7tnwb7Lgm6pwoPx
OJbheKFJuFJ/9pk8M64OpHX0SVnj5S6BzNYHF0ksbjbjOoqM6G90XeA28HUQU4iK
djz7tsg9NzbvmSd9TgsDTTT86QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGMmvZWf
r9HrFVYxSybQSV2AkQmDMB8GA1UdIwQYMBaAFOgPV4FuuAaIXcXrHsLhrVSi+fLf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREExOS8wMTNDRDdEMEVE
NEYxMUVBOTNDODE0M0RDNEY5QUUwMi82QTlYZ1c2NEJvaGR4ZXNld3VHdFZLTDU4
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZBOVhnVzY0Qm9oZHhlc2V3dUd0VktMNTh0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QURBMTkvMDEzQ0Q3RDBFRDRGMTFFQTkzQzgxNDNEQzRGOUFFMDIvRjk1Mzc5QkUx
MjQ0MTFFQjlFNTUxRTM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5SUMA0GCSqGSIb3DQEBCwUAA4IBAQBTUVKAEY8uuCLaOMH0QWfO
/SOdnt8UURyXee42Ugs7NfMonJpImeDBlwGQqrbPdRrJzYu8X0mP25U0BiWtHz93
XLh4+SbpdsA34tBVN8ZHEC0Tx5Gm4rlWQDKPMHA8tDKjM88yYkjAfm5j1KyB+lyO
cNO5NXKHPWnWZyI9d1SCcctoNKo1aSLeSq3T4L5pMWnYhJm2p5nCZLFQHChmNg0S
+YPZ82YZAHRwZVso5Qei9aqHWMTeHZqlSGgGk43YpzDa++5Basny2b0HgFWxx42B
GNOSrXitmMcv83b5bsAPBH3OFLSiPOZFs1O0rK8EN+ZW20+w0YJrRwEAyiL5FoEq
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:00 2026 by rpki-client