Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa
File:                     0CACB5AC198E11EBBDF60275C4F9AE02.roa (raw, json)
Hash identifier:          GobLIlYBkGNU9uPWpdV+qAlmLQ7h40rrOVM904qVtaE=
Subject key identifier:   BD:5E:20:3B:A8:70:34:BE:54:54:75:A7:32:9A:C7:3D:13:CF:F0:D0
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       0818
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:03:50 +0000
ROA not before:           Fri 12 Sep 2025 21:32:32 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141158
IP address blocks:        103.155.132.0/23 maxlen: 23
                          103.155.132.0/24 maxlen: 24
                          103.155.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 20:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Sep 12 21:32:32 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46366-21d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8d:74:e2:ef:f1:21:a6:83:e0:03:9f:26:3e:
                    6e:61:e9:ec:35:9b:42:1e:8f:0c:96:55:80:14:39:
                    e6:2a:0d:1b:e1:52:c4:fe:36:4e:de:6f:9c:26:9b:
                    1a:1b:84:a8:51:49:26:c5:0f:e5:01:8b:0b:63:be:
                    14:3e:12:58:9a:97:0c:eb:5d:f4:76:5b:a8:8a:a0:
                    aa:61:72:26:29:91:16:28:b9:93:3c:52:03:ec:ae:
                    21:ac:9f:38:d4:51:a6:37:19:22:b0:d4:c9:16:80:
                    33:a7:d7:c1:e0:90:96:8d:e8:7b:f0:f3:18:f6:d7:
                    72:e7:25:35:9a:7f:5c:3c:21:04:db:71:e6:37:a5:
                    9a:50:00:80:f0:c0:41:d3:ce:86:6b:ef:b7:82:cf:
                    90:3d:af:b6:f8:6e:13:e5:e8:6c:96:ec:4c:9e:cb:
                    f6:d0:0d:18:1f:1b:3c:0f:74:0b:96:fa:47:8a:07:
                    96:31:7b:28:60:fb:d8:b4:aa:6e:09:5b:70:7e:3f:
                    e6:02:57:6a:57:be:73:22:bf:b5:2e:aa:fc:af:34:
                    64:14:ee:d3:6e:7f:a9:58:6b:b5:9a:51:1e:50:fc:
                    d1:8d:da:4d:d4:72:91:bc:a5:c9:46:3d:68:08:08:
                    9a:88:a9:56:2b:f8:67:97:35:b3:07:04:7a:9d:14:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5E:20:3B:A8:70:34:BE:54:54:75:A7:32:9A:C7:3D:13:CF:F0:D0
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:05:91:7a:6d:1d:bd:93:10:a6:9a:34:dc:3d:a7:03:7e:fe:
         97:29:83:b3:56:f6:98:20:1d:07:9c:d1:ff:72:5d:30:43:c3:
         3c:9f:d4:20:d8:51:08:b0:fa:58:1f:4e:cf:01:6b:3d:50:99:
         d7:54:0a:37:e6:86:af:15:43:37:06:5c:3b:4f:b8:ec:04:6a:
         d0:cd:f5:a9:0d:1f:53:24:4a:94:f6:75:48:5a:c6:0d:ed:db:
         3c:35:37:b4:e7:78:9e:10:b0:47:98:49:6e:f3:71:d2:03:9b:
         4c:55:47:cc:bc:72:98:f2:90:eb:3b:05:81:71:ca:3d:38:0c:
         65:7d:a5:80:50:9f:13:c8:db:86:72:f3:d4:04:62:1b:f9:75:
         89:20:e4:ae:66:2a:48:4e:7b:a5:7e:8f:dc:af:81:65:e3:14:
         fa:ef:52:8d:54:93:08:ae:af:3c:12:8f:7f:8e:6d:a3:71:e2:
         c2:e1:7b:28:be:55:8d:f9:09:e0:d2:70:31:97:c9:4b:8e:86:
         2e:7f:62:24:4f:0e:eb:98:d4:81:ab:a1:75:d9:23:4e:3b:c9:
         30:31:fa:55:6d:6d:0d:4b:1a:6b:ea:aa:62:1b:b5:f6:08:f6:
         05:0c:18:e6:d3:0e:61:1b:08:82:1d:19:4c:1b:04:41:35:10:
         ec:4c:e9:41
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3
RUFFRkExNjgwHhcNMjUwOTEyMjEzMjMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjM2Ni0yMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA64104u/xIaaD4AOfJj5uYensNZtCHo8MllWAFDnmKg0b4VLE/jZO3m+cJpsa
G4SoUUkmxQ/lAYsLY74UPhJYmpcM6130dluoiqCqYXImKZEWKLmTPFID7K4hrJ84
1FGmNxkisNTJFoAzp9fB4JCWjeh78PMY9tdy5yU1mn9cPCEE23HmN6WaUACA8MBB
086Ga++3gs+QPa+2+G4T5ehsluxMnsv20A0YHxs8D3QLlvpHigeWMXsoYPvYtKpu
CVtwfj/mAldqV75zIr+1Lqr8rzRkFO7Tbn+pWGu1mlEeUPzRjdpN1HKRvKXJRj1o
CAiaiKlWK/hnlzWzBwR6nRQ2WQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL1eIDuo
cDS+VFR1pzKaxz0Tz/DQMB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5
OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA1NEQvNkUwODIzQjAxOThDMTFFQkFGQ0I5NDU5QzRGOUFFMDIvMENBQ0I1QUMx
OThFMTFFQkJERjYwMjc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5uEMA0GCSqGSIb3DQEBCwUAA4IBAQBUBZF6bR29kxCmmjTcPacD
fv6XKYOzVvaYIB0HnNH/cl0wQ8M8n9Qg2FEIsPpYH07PAWs9UJnXVAo35oavFUM3
Blw7T7jsBGrQzfWpDR9TJEqU9nVIWsYN7ds8NTe053ieELBHmElu83HSA5tMVUfM
vHKY8pDrOwWBcco9OAxlfaWAUJ8TyNuGcvPUBGIb+XWJIOSuZipITnulfo/cr4Fl
4xT671KNVJMIrq88Eo9/jm2jceLC4XsovlWN+Qng0nAxl8lLjoYuf2IkTw7rmNSB
q6F12SNOO8kwMfpVbW0NSxpr6qpiG7X2CPYFDBjm0w5hGwiCHRlMGwRBNRDsTOlB
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:19:04 2026 by rpki-client