Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
File:                     78AFDDB84A8211EB8760D667C4F9AE02.roa (raw, json)
Hash identifier:          mvrD5QWvYKdwFr7tS3PDXY6y+EhDGbDH0RckK+Dej1Q=
Subject key identifier:   FA:83:D7:CA:96:1E:34:A7:2A:F7:BC:F3:07:07:0C:96:E4:D1:48:72
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       081A
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:03:52 +0000
ROA not before:           Fri 12 Sep 2025 21:32:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.155.132.0/23 maxlen: 23
                          103.155.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 20:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Sep 12 21:32:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46367-19f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:7c:8e:55:12:f3:4f:4c:59:d9:69:74:13:
                    a8:36:5c:9e:ec:63:dd:a4:ef:5f:57:33:1f:26:c1:
                    41:a7:62:52:6e:a3:3c:cd:f5:2a:cb:56:d6:85:f2:
                    d6:5d:80:52:79:78:79:2b:71:bf:a4:d1:16:3d:6b:
                    7a:73:0f:b2:23:3d:3a:7e:00:96:f7:d1:07:77:1c:
                    54:e1:89:0d:9b:ad:15:57:52:ea:02:f1:e3:0b:45:
                    da:96:42:af:0d:66:af:92:10:8e:95:4f:76:7a:06:
                    94:11:8a:72:26:ce:1f:60:f2:80:d1:06:4e:a4:e0:
                    e5:6e:6d:6e:1d:4e:eb:f9:28:42:72:51:11:a2:70:
                    97:1e:b8:81:c7:bc:d3:5f:a0:cd:2d:d5:d5:f1:19:
                    b2:7a:62:08:96:5e:76:80:81:a8:2f:c1:98:b1:f4:
                    11:59:cb:b0:97:92:3b:ad:e6:84:ec:5d:e0:76:89:
                    44:7a:08:da:29:78:1a:64:56:55:cf:5f:12:2f:d1:
                    dd:5f:ba:a4:0c:df:de:8a:23:ff:10:c5:3e:e7:4d:
                    ce:ad:7e:e7:39:3a:5e:ec:58:c4:07:87:e2:76:38:
                    9b:18:13:b3:b1:3c:d1:d2:76:fc:c2:4d:ea:52:50:
                    16:86:fe:50:f0:34:c3:5e:3d:cb:ca:1f:c9:31:cf:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:D7:CA:96:1E:34:A7:2A:F7:BC:F3:07:07:0C:96:E4:D1:48:72
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:85:37:08:e4:81:3b:da:af:23:8d:0c:00:a6:c6:80:0d:ad:
         c7:7a:d7:dd:74:ed:3e:6d:49:bf:73:42:68:fe:04:1f:44:fc:
         a9:bf:ae:2c:d1:8f:56:87:a2:c3:b6:22:66:15:d9:28:d6:20:
         81:0c:21:47:7a:a9:11:4a:4c:0e:30:61:b6:10:fa:90:37:b6:
         ba:4f:19:59:51:5b:2f:0e:48:38:93:32:46:bf:1f:c0:fb:59:
         ac:fa:87:e2:d6:d4:1f:be:bf:30:aa:de:9d:d7:90:45:0b:46:
         6c:68:05:91:05:26:e5:e7:ab:36:53:3f:7c:80:e4:82:8c:c8:
         79:e8:c2:5f:ef:0a:db:63:24:b3:2b:54:04:1b:77:6c:28:07:
         6f:87:43:ad:13:ec:64:06:16:6c:f0:f5:95:e7:f5:c1:a6:7e:
         e7:a6:1e:5b:e6:27:9f:ea:91:b1:08:42:2d:f7:49:ad:40:d3:
         81:4c:55:17:d8:71:c4:29:aa:67:84:aa:72:f9:1d:dd:9f:64:
         4a:ce:ab:18:9d:3d:d5:a6:6b:96:b8:6f:de:60:85:ae:0c:2f:
         85:1e:e6:d5:c9:9d:b6:8e:5c:3d:96:33:84:f8:4f:af:02:79:
         7e:32:c3:b4:48:c6:df:d7:1c:96:eb:e3:6e:5b:c1:97:e1:a0:
         c3:e7:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:34:58 2026 by rpki-client