Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/B30F869670E511F08CE5B42CC4F9AE02.roa
File:                     B30F869670E511F08CE5B42CC4F9AE02.roa (raw, json)
Hash identifier:          6kIHGcuMJXy7cOPZ71v96alp4gU/F+rdvF2zfZD2ezA=
Subject key identifier:   F7:B6:1F:B3:5D:1E:A4:A8:17:56:BD:3F:C7:43:4C:24:2B:24:D2:54
Certificate issuer:       /CN=A912876D/serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA
Certificate serial:       74
Authority key identifier: 6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/B30F869670E511F08CE5B42CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:12:59 +0000
ROA not before:           Mon 04 Aug 2025 03:50:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154109
IP address blocks:        203.18.158.0/23 maxlen: 23
                          203.18.158.0/24 maxlen: 24
                          203.18.159.0/24 maxlen: 24
                          2402:1f60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl
                          rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912876D, serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA
        Validity
            Not Before: Aug  4 03:50:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e6fb-8403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:05:08:f6:cd:4b:e6:a7:c2:09:fd:dd:80:
                    93:48:67:69:c3:e4:93:8f:a4:fe:6c:6b:1b:3a:b2:
                    6f:f4:39:ec:95:f8:da:1f:be:35:5d:aa:99:0f:20:
                    f6:41:83:5b:66:24:e6:5c:d0:37:de:0f:dc:a0:0d:
                    d9:fa:e0:6a:4d:c2:8a:20:99:a3:8f:36:df:e1:ff:
                    75:55:c5:c4:ac:be:d1:5c:10:80:41:9d:99:f0:e3:
                    51:24:a4:b6:7d:6d:69:77:42:eb:98:7e:e3:b8:d2:
                    c5:ab:7f:cc:41:4a:da:92:ae:29:3b:f5:ce:74:dc:
                    c7:3d:17:4e:8e:d9:cc:31:1a:ad:83:ed:d5:f7:51:
                    8a:9b:28:aa:e2:0c:f0:27:01:0a:3d:e1:96:28:87:
                    fe:61:ee:d3:bd:31:bf:42:8b:94:2e:01:24:87:4f:
                    bb:29:6b:52:08:1e:3a:19:61:99:b3:73:19:d0:1f:
                    7b:a7:4a:ba:63:ad:c8:db:77:3c:ef:33:57:26:2b:
                    27:d9:14:74:da:e7:77:0a:86:7a:09:bc:7f:db:ca:
                    f3:81:7c:f3:7b:20:d0:d2:a5:83:ad:3e:60:0f:13:
                    f1:93:1b:64:55:2b:c7:17:a8:f2:d8:4a:35:d1:7b:
                    12:05:6b:2f:13:30:ca:07:aa:67:35:51:36:4e:83:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B6:1F:B3:5D:1E:A4:A8:17:56:BD:3F:C7:43:4C:24:2B:24:D2:54
            X509v3 Authority Key Identifier:
                keyid:6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/B30F869670E511F08CE5B42CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.18.158.0/23
                IPv6:
                  2402:1f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:83:59:f8:16:7c:b5:66:97:f9:c3:61:98:8e:51:7e:ee:
         b3:20:79:68:03:d6:2a:ac:3c:71:e0:eb:83:31:e7:64:7c:db:
         a4:d4:97:6a:65:90:0f:6c:fc:34:98:0b:c6:e0:bc:9b:f9:d6:
         3f:7a:89:d5:e9:b5:74:52:b6:ac:0b:9a:d0:7e:2b:4c:18:1d:
         17:be:1e:c7:ea:30:13:7e:9f:21:df:7b:0e:23:98:92:b9:bb:
         4d:c8:a0:53:a3:e9:8a:f2:0c:46:71:81:60:4b:c7:f2:c0:97:
         d4:e4:d7:ec:d4:c6:55:eb:c2:51:60:62:cf:c4:e9:97:2b:14:
         85:0e:66:8f:9c:8b:70:15:01:f3:2f:ed:83:f1:19:5f:0e:32:
         99:4a:1a:44:6a:ae:45:f7:95:47:24:37:25:ed:ea:d6:d4:6d:
         ad:bb:dc:99:34:73:82:a8:e1:d2:de:2c:c4:69:59:b4:b1:a3:
         62:b3:fb:eb:f0:e0:84:a6:b8:29:21:c1:46:ce:2b:3f:18:1d:
         3b:aa:aa:5c:15:00:67:cd:a3:8a:bb:c2:87:98:af:48:ac:cf:
         7f:d5:15:cb:58:1b:10:b3:f9:76:c5:77:ed:38:64:a8:52:d6:
         9b:ab:3a:01:4d:eb:8e:2a:d2:15:e7:08:0d:f3:e3:97:d6:85:
         fe:0c:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:47 2026 by rpki-client