Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/FF037E8C242A11ED9547B486C4F9AE02.roa
File:                     FF037E8C242A11ED9547B486C4F9AE02.roa (raw, json)
Hash identifier:          1F4/dES4B8G+6y0a23fN5dj1uPv0aDvCIXtab2gQl5o=
Subject key identifier:   47:29:A8:F4:47:99:B0:90:BE:D6:0E:5E:F6:A9:BE:F8:BD:2D:36:D0
Certificate issuer:       /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial:       02D1
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/FF037E8C242A11ED9547B486C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:24:06 +0000
ROA not before:           Wed 11 Jun 2025 02:18:17 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136789
IP address blocks:        103.186.104.0/23 maxlen: 24
                          2400:6fa0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
                          rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
        Validity
            Not Before: Jun 11 02:18:17 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e996-cbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:75:22:e9:08:ae:10:d1:d7:09:8d:9a:fa:
                    0d:1a:d5:aa:f4:b1:48:72:25:a2:81:f6:47:6a:6f:
                    fb:5c:6f:88:f2:51:c7:dd:96:16:c1:bf:b7:7a:24:
                    64:95:3e:f6:9f:14:e2:b6:ff:b8:38:40:f7:9d:f9:
                    dc:31:a5:98:71:73:b3:1b:3d:17:4f:54:21:42:e3:
                    4b:c1:a5:61:ef:09:87:80:ff:87:fb:cd:94:04:8a:
                    b5:94:3b:c1:ba:ca:8b:ff:c2:01:a2:49:40:97:64:
                    94:c7:92:0f:fb:5b:f5:77:f1:c8:9c:39:25:0e:0b:
                    e6:fc:37:84:38:ee:f3:88:6e:1b:57:a9:70:7f:21:
                    f2:0d:f0:ec:b0:39:74:a5:57:a1:9b:12:bc:e7:0e:
                    d4:59:57:d1:57:11:7f:03:ab:3e:2f:a0:d6:47:77:
                    fe:db:b5:93:66:b9:75:19:84:14:11:73:98:bf:ca:
                    a3:5a:ae:1b:c9:ba:09:68:3a:3e:71:26:81:04:8c:
                    f9:1c:b6:d0:dd:12:09:b8:27:e3:1a:1b:9f:2f:a5:
                    ea:a8:16:a2:44:69:8c:44:7a:76:65:67:52:67:e6:
                    32:70:3f:d8:2f:92:62:32:8c:48:b2:b2:9c:a2:ce:
                    1b:6f:d9:b5:e6:39:76:0a:64:c4:ba:b6:d1:4a:f8:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:A8:F4:47:99:B0:90:BE:D6:0E:5E:F6:A9:BE:F8:BD:2D:36:D0
            X509v3 Authority Key Identifier:
                keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/FF037E8C242A11ED9547B486C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.104.0/23
                IPv6:
                  2400:6fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:4c:76:28:f1:b6:e1:bc:ff:f7:31:bd:69:8d:de:9d:1d:11:
         cc:85:fa:9a:7c:09:51:eb:a7:2b:13:8f:e1:1b:de:49:ee:30:
         d5:1d:f8:c2:de:d6:d5:bf:21:ff:22:7c:29:e7:04:56:76:bd:
         bd:89:34:7d:98:37:d8:59:ad:ba:a4:90:21:cb:44:56:78:32:
         28:66:06:b8:a4:86:34:ec:24:28:7f:c1:67:95:c9:86:c0:ed:
         bf:c5:27:1b:a5:fe:a9:cc:06:fb:36:2e:6b:31:6e:af:75:a8:
         6f:51:20:8f:d7:de:3f:cf:99:7e:83:6b:e9:93:37:be:70:65:
         ff:f2:50:a0:30:08:71:3a:1e:74:7b:5d:fe:dd:44:88:ae:80:
         eb:b5:4f:de:fd:cc:b9:f1:1d:3d:6f:b1:61:c1:30:73:20:02:
         ba:5c:d7:53:95:43:df:d8:ad:50:0c:36:5e:14:49:6b:50:56:
         3b:94:6f:b7:2a:63:60:82:7c:85:44:23:f6:61:ec:7c:ae:55:
         57:9a:c4:58:da:59:9d:ba:ed:b1:cb:2a:4f:1f:28:05:67:c4:
         66:99:de:30:9d:62:c2:4e:0d:bd:36:80:a7:f8:a9:43:84:f6:
         81:93:86:3a:4f:92:9d:cb:5f:08:16:ce:f0:de:72:8d:74:7f:
         96:87:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:32 2026 by rpki-client