Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa
File:                     E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (raw, json)
Hash identifier:          q0abZtXbwM+RdYlxyf43KbPihkwSPUUbTGx0xSv8PcQ=
Subject key identifier:   0D:6E:DB:89:21:EF:0B:B3:D5:C6:7A:8B:99:68:E6:DA:DF:2A:24:C4
Certificate issuer:       /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial:       018E
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:11:01 +0000
ROA not before:           Sat 05 Apr 2025 05:10:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.149.152.0/24 maxlen: 24
                          103.149.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
        Validity
            Not Before: Apr  5 05:10:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5a884-a65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:7d:cb:08:68:d5:b9:46:41:f7:c2:cd:03:
                    35:cc:c8:89:10:c4:e9:c7:4a:03:bf:91:58:37:53:
                    97:14:bb:86:14:58:51:2c:93:57:7d:34:47:77:e6:
                    4f:85:f4:39:09:ba:a2:e2:cd:49:d2:84:b9:5e:49:
                    69:c4:13:3e:e3:08:bb:c8:3d:3e:ce:b3:60:4a:aa:
                    e3:c5:77:a3:a1:69:58:a0:04:96:f0:f7:1a:7b:9f:
                    ff:a3:59:ae:53:1b:82:91:3f:51:d2:79:15:c9:71:
                    b3:54:0a:53:a4:66:ff:ce:ed:d9:2a:7e:6b:63:35:
                    a3:2d:45:56:c2:17:8e:d4:85:3d:e0:56:30:f2:3f:
                    e7:f4:fc:3f:d0:26:eb:9c:08:82:57:1c:1f:f6:f9:
                    a3:b6:e3:e3:f6:2a:13:a1:06:14:a4:00:1b:84:0a:
                    f7:24:3e:fe:6c:93:7c:18:fd:df:d1:24:d3:67:17:
                    b8:0e:76:f0:49:e0:21:e3:61:ab:30:fa:de:96:bc:
                    65:55:9f:4e:a6:97:9e:cf:ba:68:c7:dc:85:37:d3:
                    75:a1:1d:87:f6:f9:43:4f:c6:67:d1:80:85:fe:43:
                    ca:94:cf:54:52:c5:17:ee:37:75:bd:b3:47:af:98:
                    c6:56:94:69:e1:91:9b:9a:92:76:68:4d:70:e6:68:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:DB:89:21:EF:0B:B3:D5:C6:7A:8B:99:68:E6:DA:DF:2A:24:C4
            X509v3 Authority Key Identifier:
                keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:6b:44:f0:69:77:27:ac:71:2b:76:bf:38:ba:28:c5:9e:
         c6:e9:ec:a4:cf:e2:17:4a:b3:63:ec:b0:59:c5:d7:67:ef:23:
         ee:ae:92:89:b3:0e:ae:7f:98:2d:0b:95:0c:17:77:a1:4c:ef:
         92:9c:5f:cf:5e:6b:c7:e2:c4:44:68:40:73:3b:c4:61:35:8f:
         6a:c5:f3:fa:18:c6:bb:4c:96:f0:36:6b:bb:86:f1:64:28:e2:
         3e:82:0d:9a:97:28:7e:3c:70:ea:6a:7a:73:0c:5f:17:ec:6a:
         b6:8d:0b:5e:02:40:90:f5:01:c9:80:24:8e:05:d4:2c:92:f8:
         b6:41:d1:44:5d:bb:a0:f6:1a:92:a9:e4:64:50:75:c6:91:2b:
         42:c5:e8:cc:3e:55:17:bc:74:c3:72:2c:32:27:30:ac:cc:56:
         c6:a5:58:fe:8a:f2:97:b4:f0:db:07:2e:7c:3b:8c:aa:ea:ca:
         8a:db:7c:55:11:99:25:3f:4d:33:f7:ee:01:9d:39:34:5f:e2:
         ff:95:27:49:2c:4f:c9:41:40:5e:20:b3:55:a6:39:94:c5:d1:
         ea:1c:75:79:49:e5:c7:f8:80:6c:10:29:3f:5a:c2:a5:fb:24:
         04:f2:49:be:84:08:6b:3f:e4:7c:82:e0:d0:d9:d8:72:db:a4:
         fa:c9:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:18:44 2026 by rpki-client