Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/F145A4846C3E11EEA0F26B63C4F9AE02.roa
File:                     F145A4846C3E11EEA0F26B63C4F9AE02.roa (raw, json)
Hash identifier:          7Yjv2D+C4s/JmkOjYex+PzbIpnr1u2qQg3ovSsYkAKA=
Subject key identifier:   BF:9B:6F:5E:43:BA:39:61:C4:21:E6:85:2F:D2:8E:FD:90:02:4D:77
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       086A
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/F145A4846C3E11EEA0F26B63C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:24:44 +0000
ROA not before:           Wed 02 Jul 2025 22:31:17 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149448
IP address blocks:        103.54.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
                          rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: Jul  2 22:31:17 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4846b-d33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:2a:ae:e4:78:fe:f9:04:1e:70:e5:e6:ae:
                    5c:f1:de:07:f0:74:a5:51:e9:dc:b0:f0:f6:9a:2b:
                    fc:5d:ea:38:6d:d2:8d:21:85:ed:58:0c:dd:22:0e:
                    54:7f:ea:5d:9e:8a:cb:07:fc:78:28:1a:26:d4:76:
                    6f:7f:23:55:4c:ac:13:d2:0c:d4:03:eb:ff:16:ce:
                    da:01:79:b5:7d:9e:0b:91:f3:78:d3:3c:b3:39:d9:
                    fe:75:4f:a9:72:21:8b:c7:4c:62:55:3c:a4:04:67:
                    e7:69:ac:65:b7:24:95:c1:38:ea:61:c8:cf:7b:10:
                    dc:91:1a:b2:58:e8:ce:cf:4f:eb:a5:a8:55:44:0a:
                    57:ac:4f:0f:1c:36:cd:f5:5f:a0:ca:c5:4d:2a:42:
                    e6:5c:61:ba:b9:90:22:42:20:7a:75:e2:e3:59:0a:
                    5d:b4:41:92:a4:36:88:80:9e:a8:84:7d:4e:d5:69:
                    a1:6d:d6:84:f3:8c:02:f1:9f:7d:09:d6:6f:e7:94:
                    4b:f2:8a:5e:ed:aa:47:77:62:c6:d2:a9:cd:c2:76:
                    c7:ba:bb:e3:55:97:57:67:17:ad:af:e0:47:ce:dc:
                    ff:cb:00:a6:4d:dd:cf:9a:81:eb:5b:27:bc:4c:28:
                    2d:39:0f:1d:b4:c4:7b:0d:9a:58:01:c6:ae:d9:20:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:6F:5E:43:BA:39:61:C4:21:E6:85:2F:D2:8E:FD:90:02:4D:77
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/F145A4846C3E11EEA0F26B63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:c9:16:5c:ed:13:8c:67:3c:bc:6e:ca:6e:77:fd:c7:6b:
         d6:33:73:d6:95:8b:cb:f6:12:c1:37:08:75:cd:c5:13:c0:5e:
         ee:ba:8c:cd:a1:b9:38:62:98:5f:05:b0:0e:c6:78:e1:eb:45:
         ac:e1:f1:55:e5:38:b5:a4:67:88:13:0c:cc:b5:99:91:ce:51:
         69:21:e9:63:ff:95:67:94:f4:04:e4:32:cd:51:f8:cb:fd:90:
         ec:62:43:0f:32:93:61:87:d4:eb:8c:c2:ca:53:3d:33:a3:e8:
         0f:a7:89:b8:4e:4a:e3:34:7c:a2:01:a1:b0:0d:0e:08:12:4c:
         f3:37:ab:ad:d1:fb:43:e0:f4:86:77:af:ac:41:71:44:e7:b1:
         08:92:7e:eb:66:c7:6c:3e:df:93:77:a8:f4:68:98:a8:35:45:
         d3:01:1b:97:67:64:4d:9a:4f:48:3a:45:8b:16:ee:b3:6b:68:
         2b:60:a8:5a:b8:ae:39:68:99:5d:34:9b:6a:31:0d:e8:01:fb:
         75:65:b7:a2:fe:0e:1a:84:c7:f1:f4:1e:70:18:12:f0:79:b0:
         1d:ff:b9:08:1e:52:72:8d:39:a1:a5:8d:31:09:c1:8d:9b:29:
         77:c5:3d:92:6d:98:f5:65:9c:d5:70:2a:6c:c2:2a:37:90:67:
         5b:6d:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:51:11 2026 by rpki-client