Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa
File:                     314597D64EEF11EF8BACFA30C4F9AE02.roa (raw, json)
Hash identifier:          fatYWfUiC0oQ2aEV3e8JimC/cTTVSH0n1eBQkWzSdB0=
Subject key identifier:   37:29:3F:40:30:4D:CC:CE:14:3D:A2:D4:F1:8F:95:EE:55:B8:FA:87
Certificate issuer:       /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial:       01AA
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa
Signing time:             Thu 15 Oct 2026 05:54:30 +0000
ROA not before:           Thu 15 Oct 2026 05:54:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141016
IP address blocks:        103.154.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
                          rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 04:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
        Validity
            Not Before: Oct 15 05:54:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ad06a96-5136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:ec:85:c1:bd:af:45:d0:27:7b:c0:c1:15:
                    29:c5:e1:59:d2:c7:80:81:75:93:4a:e1:f1:cc:38:
                    67:34:cf:12:85:43:7e:72:a0:dd:c9:74:fd:e1:b4:
                    10:29:7e:2c:d5:d7:72:3c:f1:db:e4:bb:5d:fd:73:
                    17:ba:cc:c8:fd:ad:1b:09:97:34:00:ac:d4:20:97:
                    ac:13:69:5f:7f:42:92:a3:11:20:d8:f5:a4:88:73:
                    3a:cd:3e:c4:5e:c2:34:31:9b:75:e6:9b:9b:22:ff:
                    4f:cf:4d:96:cd:48:c1:37:35:19:32:12:50:25:b6:
                    7e:0d:d4:29:ac:99:90:4c:33:7a:cb:46:4a:d3:91:
                    2c:d7:57:4a:93:c4:6b:4d:79:69:0f:5f:87:f4:c3:
                    e1:ad:83:6b:7c:77:31:e4:41:fd:a2:e7:5e:4d:bc:
                    bf:07:1c:7b:5d:96:ac:a2:e9:c9:7b:9d:04:02:34:
                    9a:05:90:b8:d9:d5:54:01:0f:c6:58:b8:29:65:f3:
                    4b:3d:b3:4b:96:11:28:c6:03:59:9c:6d:92:8c:7a:
                    73:99:a7:19:1f:c1:1f:48:9a:1b:44:1f:dd:e2:38:
                    dd:42:a7:47:0d:0e:cb:5e:cc:0b:e7:10:97:4b:78:
                    99:10:7f:7b:62:59:ee:c9:0b:e6:35:26:13:74:d3:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:29:3F:40:30:4D:CC:CE:14:3D:A2:D4:F1:8F:95:EE:55:B8:FA:87
            X509v3 Authority Key Identifier:
                keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:92:3d:31:e0:db:33:86:3c:d7:32:f1:ef:42:1c:8a:c7:
         06:9e:16:e8:a4:f9:3e:df:36:d1:70:e4:0e:47:66:03:c2:86:
         40:a9:61:86:2a:45:b8:40:68:21:cd:7e:7f:10:50:b3:0d:f5:
         28:89:4a:c7:97:43:28:e6:57:5d:5c:2e:5f:f1:e5:5a:20:e9:
         15:3e:c4:c0:77:d0:41:02:ee:5b:e8:03:8e:a2:3b:a7:94:8c:
         82:98:a5:76:74:13:47:f4:9c:bd:89:d2:88:c6:f8:c8:58:93:
         98:d9:f8:83:0c:d2:57:e3:41:d6:23:89:b2:40:d3:24:9d:2f:
         08:80:ba:e0:68:13:d5:48:32:f3:92:d7:0e:b9:74:3c:e7:f0:
         97:88:85:9d:62:9e:96:17:96:63:4b:a1:e7:04:4c:30:86:af:
         cb:c1:7a:ea:b5:3b:03:b9:8f:12:07:e5:cc:92:35:35:08:4f:
         6d:18:13:fe:9d:66:3e:f2:8c:b8:d1:55:73:ba:2c:73:d1:d5:
         57:6c:58:91:11:81:ba:81:2a:52:7d:82:3c:c1:9e:42:3a:f2:
         d3:99:75:f5:03:42:ff:8e:7f:81:1a:81:cf:b2:1b:2b:6d:77:
         7f:ad:80:13:85:ad:24:3c:f3:59:36:4d:f8:65:9e:d1:6c:3f:
         54:36:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:21:19 2026 by rpki-client