Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C850F3BA89A511EEB6692E43C4F9AE02.roa
File:                     C850F3BA89A511EEB6692E43C4F9AE02.roa (raw, json)
Hash identifier:          5be7I0/+cwjNbyTqFfbMRK0sXrbNJNl+sPoUACjviPI=
Subject key identifier:   2F:C7:41:3E:77:0A:80:D4:3E:3D:1C:8C:21:CB:14:1C:F5:DE:FA:20
Certificate issuer:       /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial:       066C
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C850F3BA89A511EEB6692E43C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:36:51 +0000
ROA not before:           Wed 02 Jul 2025 23:35:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151822
IP address blocks:        103.203.245.0/24 maxlen: 24
                          203.19.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
                          rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644 (0x66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
        Validity
            Not Before: Jul  2 23:35:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a432e3-ea6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:df:7a:85:62:f2:35:b6:81:c9:f0:64:5b:ec:
                    c7:ce:a5:65:e3:92:42:49:06:ba:20:da:45:1c:57:
                    ed:3e:f1:12:c9:cd:f6:78:33:b4:25:85:cc:95:25:
                    0f:6d:e0:5e:0f:ce:03:1b:8a:6f:85:79:5c:e0:9a:
                    df:ae:25:25:ee:9e:e6:0b:d5:e1:5c:4d:f9:48:89:
                    ea:88:f9:27:a1:b8:56:50:04:ff:7a:9d:29:87:7c:
                    35:9b:04:17:72:7b:28:f5:91:a8:07:0e:ef:72:5d:
                    a7:fe:38:fc:d0:59:4c:d2:4f:ab:96:9f:ad:40:53:
                    d0:9a:88:23:40:73:f8:3c:8e:06:b3:87:a3:c0:07:
                    f4:e2:63:b6:b4:cc:20:c9:63:59:66:c8:0f:9b:42:
                    8d:c7:4f:0e:35:56:40:9d:60:31:7a:91:02:1b:a3:
                    00:e5:01:7f:70:09:57:07:42:28:80:0e:a1:ea:c8:
                    60:eb:d4:e1:ad:e5:0a:b7:75:3d:65:d8:a2:97:f7:
                    18:c3:7f:b2:6a:e0:dc:7e:d6:0e:e9:5d:32:e7:18:
                    8f:e0:69:20:a7:c0:41:ae:b8:d7:83:cb:94:8f:04:
                    51:05:ce:89:c7:03:70:04:29:47:e4:64:61:5f:d3:
                    48:76:17:83:3b:9c:9a:f2:e8:c3:66:31:46:71:d8:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C7:41:3E:77:0A:80:D4:3E:3D:1C:8C:21:CB:14:1C:F5:DE:FA:20
            X509v3 Authority Key Identifier:
                keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C850F3BA89A511EEB6692E43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.245.0/24
                  203.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:60:58:ba:8a:7a:3e:bf:ac:e9:2a:3b:05:33:0c:27:f5:
         03:62:05:9c:1b:0a:60:de:b4:9c:cf:97:07:64:53:18:42:70:
         8a:49:4b:cb:ee:5c:40:5a:39:7e:5a:80:12:da:ea:56:7c:01:
         ca:5d:e1:6c:20:11:04:f9:26:78:43:78:85:89:9c:3d:b8:9e:
         87:db:f6:dd:57:2f:40:8e:c2:01:a5:aa:23:3e:b5:aa:82:b6:
         dc:d2:8b:39:f2:32:72:5b:ae:e4:09:91:d4:5d:90:af:ff:65:
         fd:3d:9f:cf:b9:da:d8:ec:89:9e:05:79:d1:8e:dc:46:c3:42:
         20:f8:9e:66:b4:b1:6a:94:36:a7:a5:83:82:0c:87:ec:92:f7:
         d1:5d:03:25:bf:b2:92:ff:bb:a0:96:e1:e9:57:0f:64:8b:89:
         e4:cf:a6:2d:37:72:67:d3:44:39:07:69:e1:50:bc:fa:3c:7a:
         75:96:58:65:88:17:f7:57:f6:0c:c1:ca:6f:7b:af:55:ec:d2:
         87:fd:0b:d2:74:7e:ea:8e:47:62:19:84:86:cb:f8:64:49:ae:
         ab:ba:f8:14:95:ac:98:d2:1a:c6:ce:30:4d:02:14:9b:c9:9c:
         28:ab:e8:bb:38:63:c7:90:2b:78:de:d6:37:1a:db:d5:fe:56:
         0a:ce:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:54 2026 by rpki-client