Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/18612BE6DB0711EF9B67D356C4F9AE02.roa
File:                     18612BE6DB0711EF9B67D356C4F9AE02.roa (raw, json)
Hash identifier:          KLueeKNEJKP9XAwGwM+IP59l8h3JJ1JmV9pMHXw8r4M=
Subject key identifier:   2F:4A:96:2C:D6:D4:4C:43:A2:74:3B:83:71:1A:57:33:7D:59:B4:48
Certificate issuer:       /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
Certificate serial:       0548
Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/18612BE6DB0711EF9B67D356C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:44:05 +0000
ROA not before:           Tue 15 Jul 2025 00:35:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134734
IP address blocks:        103.167.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl
                          rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC07, serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
        Validity
            Not Before: Jul 15 00:35:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a43495-1fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:a6:89:4a:56:ff:6b:de:aa:99:de:54:e7:
                    f3:70:26:d8:ca:e0:90:99:bb:de:0f:bd:a6:6b:17:
                    5d:05:e8:22:ef:93:d2:00:3f:4f:07:a4:42:de:08:
                    8a:d3:9a:16:f2:13:29:9c:fd:28:6b:68:8b:11:38:
                    3e:43:ca:30:bf:16:39:d4:4f:cc:65:bb:f2:22:af:
                    32:0f:8c:c3:47:12:1e:59:6d:07:63:e2:3f:6a:28:
                    bc:f8:e1:e2:02:b0:f7:64:80:dd:0d:2a:03:7e:e5:
                    dd:9a:b2:71:fc:b7:14:73:1b:d2:29:10:ee:f7:25:
                    3d:12:05:f2:da:73:dd:9f:c2:cf:a4:93:3b:de:1c:
                    3d:cc:90:1a:a5:fd:2a:80:0b:9d:a4:6e:13:72:08:
                    ac:a6:d9:8f:bc:ba:7a:04:31:59:47:6f:d8:7d:39:
                    f7:b1:b1:b3:46:af:09:18:97:a4:7d:63:0d:4c:b3:
                    8c:55:1a:b2:59:de:8d:ef:a2:8d:89:9f:75:2a:5f:
                    97:ef:b0:b3:be:c7:97:42:00:b7:cd:ee:2b:70:9b:
                    65:15:74:49:09:9e:39:ca:38:9b:78:cb:30:31:72:
                    57:2b:8f:c4:8d:8e:6d:1d:54:b2:e3:71:7a:af:0c:
                    67:ac:64:53:09:24:e6:db:5f:61:13:86:26:4a:e6:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4A:96:2C:D6:D4:4C:43:A2:74:3B:83:71:1A:57:33:7D:59:B4:48
            X509v3 Authority Key Identifier:
                keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/18612BE6DB0711EF9B67D356C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:76:a2:24:b7:80:6b:44:a4:7d:7a:cb:af:14:db:86:45:43:
         91:ab:97:d3:ec:3e:72:62:92:59:56:fc:2f:e8:54:e9:3d:b6:
         89:b0:60:51:1b:e7:8c:5f:b5:5c:9c:17:ae:8d:dd:89:f4:98:
         c0:ba:83:e3:93:65:d7:93:86:cb:a0:7d:db:54:c4:7a:d9:aa:
         1f:bb:28:2d:88:2b:4c:bd:56:9a:75:d2:7a:0c:c9:ca:8c:cf:
         e3:db:86:c9:e7:ac:1b:2e:df:6d:b9:c9:95:56:91:63:41:6c:
         84:58:db:f7:2f:46:90:b6:00:a3:47:d0:19:ef:72:ce:04:f6:
         d6:59:99:e9:81:a1:33:3d:69:7b:33:52:cc:69:a4:04:17:9a:
         8b:c2:d1:80:a6:b7:8e:bc:60:62:eb:15:1e:20:2b:be:44:13:
         75:cb:e9:d2:9e:f8:a6:c7:6d:71:df:1d:2b:aa:0f:69:ef:a8:
         41:78:8e:43:83:de:42:d8:09:dc:d9:d8:ec:b3:e6:50:b7:a8:
         d1:e1:af:9d:d0:b3:6b:96:22:1f:71:55:8d:11:3d:13:77:53:
         f1:ca:8a:5c:c6:f4:79:33:d8:3e:31:c5:26:df:14:56:98:c3:
         27:8c:5e:0c:0f:d9:37:62:97:77:03:44:6b:b5:d5:e2:b2:c2:
         b8:5c:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:32 2026 by rpki-client