Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/18DC0A381C0311EE9B0F2938C4F9AE02.roa
File:                     18DC0A381C0311EE9B0F2938C4F9AE02.roa (raw, json)
Hash identifier:          68scz8WaLeDgN6QMKP6YxSS8bPvMLdvzqUKIuG+ai78=
Subject key identifier:   4D:63:70:72:8A:81:62:D7:4D:FB:7F:65:2D:1D:FB:CE:AA:F5:2F:99
Certificate issuer:       /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94
Certificate serial:       0265
Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/18DC0A381C0311EE9B0F2938C4F9AE02.roa
Signing time:             Sat 15 Aug 2026 02:52:03 +0000
ROA not before:           Sat 15 Aug 2026 02:52:03 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     147308
IP address blocks:        103.225.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94
        Validity
            Not Before: Aug 15 02:52:03 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7fd453-d928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:4f:24:ec:ee:26:7a:28:30:e2:4a:a9:2f:
                    ca:48:fa:48:d8:a8:f7:a6:43:24:db:1d:25:cb:ff:
                    3b:3f:c3:cc:db:dd:bc:26:f6:7c:84:9d:db:9c:bc:
                    c8:75:dc:e6:38:48:a4:38:e0:dd:8f:98:f4:79:d9:
                    3b:54:76:2e:d6:21:da:ec:be:29:09:bd:ab:25:f4:
                    a6:8c:a5:d8:30:f2:8f:75:04:d8:6e:12:53:43:1d:
                    06:a3:27:75:38:9e:8c:8d:bd:ff:f5:93:98:84:af:
                    0d:40:e0:6f:f2:e0:6e:4d:25:b0:9a:b1:42:51:9a:
                    78:1f:39:92:7b:33:d6:44:94:d5:6d:27:69:4e:24:
                    c0:4b:f8:44:fc:c4:4f:fd:a1:13:26:a3:2b:70:80:
                    10:af:a0:dc:51:86:91:4a:97:94:fa:8e:54:4e:d0:
                    fe:75:ef:c9:2e:64:2d:a3:e6:78:e6:bc:ef:4f:71:
                    5b:33:63:5f:6f:f9:e9:40:66:0f:c6:c6:de:9b:03:
                    de:ed:b4:bf:47:72:7c:68:8f:3e:59:82:99:dc:fc:
                    50:b1:cf:3e:9d:63:7f:7e:e9:78:ec:64:86:61:b7:
                    28:29:c6:bb:1d:1d:28:5d:63:7d:b8:da:1c:88:51:
                    d2:0c:38:73:c4:0c:9f:e9:b1:60:86:f2:e8:4e:6d:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:70:72:8A:81:62:D7:4D:FB:7F:65:2D:1D:FB:CE:AA:F5:2F:99
            X509v3 Authority Key Identifier:
                keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/18DC0A381C0311EE9B0F2938C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:88:3a:05:41:47:56:a5:36:e2:8c:54:b3:f7:17:21:a9:
         d2:af:9d:41:10:80:0a:72:54:91:e2:e6:e7:b9:5d:39:cd:c0:
         98:5a:1c:64:09:8e:0b:4c:98:00:7b:89:37:17:9d:dd:55:e6:
         24:20:44:94:71:82:37:6c:1f:3e:fd:d3:0b:b2:83:cf:d5:2d:
         80:f8:19:a9:0a:4f:14:0a:ad:f7:19:b4:e1:ec:03:0c:1f:57:
         c8:26:f2:42:84:6a:1d:29:94:b1:0f:83:49:66:be:34:ce:e9:
         10:1a:ed:87:dd:0c:59:fe:c7:74:21:e9:1c:3b:ce:f2:f2:95:
         c5:26:ed:de:73:48:40:20:88:47:a9:53:e3:98:5e:29:e6:af:
         55:d8:f4:b8:b0:13:08:04:5c:3d:1a:76:d9:5d:0d:99:c5:81:
         2a:bb:91:01:75:fa:71:bb:3c:7e:5e:dc:a4:d8:88:d4:13:96:
         2e:df:c3:58:0d:66:30:4e:16:29:d2:4e:18:58:99:9b:f1:47:
         4f:5e:0e:fb:46:6a:67:90:b2:35:cb:9d:ff:d9:42:b3:75:89:
         86:f4:5b:25:63:08:96:df:e7:88:64:f6:27:34:c8:35:97:49:
         ff:50:b4:9c:22:01:df:d0:63:59:34:da:64:fc:6d:a4:fa:14:
         ae:b3:f7:d5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5
MDFENjZBOTQwHhcNMjYwODE1MDI1MjAzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdmZDQ1My1kOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmY5PJOzuJnooMOJKqS/KSPpI2Kj3pkMk2x0ly/87P8PM2928JvZ8hJ3bnLzI
ddzmOEikOODdj5j0edk7VHYu1iHa7L4pCb2rJfSmjKXYMPKPdQTYbhJTQx0Goyd1
OJ6Mjb3/9ZOYhK8NQOBv8uBuTSWwmrFCUZp4HzmSezPWRJTVbSdpTiTAS/hE/MRP
/aETJqMrcIAQr6DcUYaRSpeU+o5UTtD+de/JLmQto+Z45rzvT3FbM2Nfb/npQGYP
xsbemwPe7bS/R3J8aI8+WYKZ3PxQsc8+nWN/ful47GSGYbcoKca7HR0oXWN9uNoc
iFHSDDhzxAyf6bFghvLoTm3kxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE1jcHKK
gWLXTft/ZS0d+86q9S+ZMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF
OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzU3MkIvRjdFNUMxNjgwRTlBMTFFRUE2NDQ5RTcxQzRGOUFFMDIvMThEQzBBMzgx
QzAzMTFFRTlCMEYyOTM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+HaMA0GCSqGSIb3DQEBCwUAA4IBAQANHYg6BUFHVqU24oxUs/cX
IanSr51BEIAKclSR4ubnuV05zcCYWhxkCY4LTJgAe4k3F53dVeYkIESUcYI3bB8+
/dMLsoPP1S2A+BmpCk8UCq33GbTh7AMMH1fIJvJChGodKZSxD4NJZr40zukQGu2H
3QxZ/sd0IekcO87y8pXFJu3ec0hAIIhHqVPjmF4p5q9V2PS4sBMIBFw9GnbZXQ2Z
xYEqu5EBdfpxuzx+Xtyk2IjUE5Yu38NYDWYwThYp0k4YWJmb8UdPXg77RmpnkLI1
y53/2UKzdYmG9FslYwiW3+eIZPYnNMg1l0n/ULScIgHf0GNZNNpk/G2k+hSus/fV
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:21 2026 by rpki-client