Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa
File:                     85521A14F2B911ECB45D2B31C4F9AE02.roa (raw, json)
Hash identifier:          0XzV3YxpevpkAbrm2thArWiU/3me0U85ULLJun5S+0s=
Subject key identifier:   52:92:82:C5:40:4C:B5:E2:28:E0:59:2E:FD:61:93:3E:95:54:25:F1
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0D2E
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:28:23 +0000
ROA not before:           Sat 28 Jun 2025 18:31:50 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137422
IP address blocks:        103.233.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3374 (0xd2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Jun 28 18:31:50 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46927-febc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:78:5e:a2:be:ef:85:20:39:ea:ac:b5:ca:
                    d1:0a:e3:24:2f:a9:bb:30:f8:82:67:19:c8:ec:b0:
                    30:10:88:87:ee:03:67:ff:74:cc:10:25:a8:20:08:
                    94:15:64:40:05:b1:03:21:31:1d:79:d6:29:72:5f:
                    70:58:69:be:01:b2:b4:84:2c:23:b1:67:10:b6:ad:
                    f4:ae:35:c2:93:cf:e0:30:a0:7b:2e:11:6d:b5:c4:
                    dd:71:de:a1:38:10:b4:28:0a:3a:cc:01:00:a3:0b:
                    37:4c:d4:14:9d:98:e9:8a:86:cf:c1:42:54:52:46:
                    9b:f0:e7:29:51:46:a7:76:8b:5e:99:9f:d7:46:73:
                    45:5f:bf:da:9f:ee:14:a4:80:a2:3f:f9:59:13:95:
                    08:2b:e1:ad:0a:16:b7:e3:5e:c5:8b:17:d3:58:07:
                    5b:f8:1d:8b:91:69:15:72:c4:96:dd:2d:32:b2:19:
                    28:ae:d7:b4:16:c1:52:96:9e:0e:db:1e:05:fb:5a:
                    22:15:63:80:48:42:a3:fe:16:4d:7d:9e:7f:b8:b5:
                    77:37:f1:fc:13:13:e0:88:04:71:11:6e:19:dc:54:
                    29:32:41:9e:56:8e:bb:d0:3c:43:db:05:02:9e:0f:
                    d0:77:de:cf:0e:61:7b:44:c9:76:9a:41:cc:81:69:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:92:82:C5:40:4C:B5:E2:28:E0:59:2E:FD:61:93:3E:95:54:25:F1
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:74:1e:2a:67:b0:41:27:35:0e:fa:a3:22:66:de:85:3b:ab:
         29:e8:b3:30:d0:50:59:82:95:4b:be:83:d9:15:67:c5:f3:fd:
         2e:9a:9a:dc:07:ec:b7:a1:31:4e:2f:80:f2:2f:13:7e:cf:05:
         5d:5d:93:53:c0:c4:e5:39:9e:c2:37:aa:ee:e2:b5:51:7b:43:
         a4:29:19:55:75:8e:f7:56:84:e5:70:82:32:f8:1d:25:64:13:
         97:94:7a:7f:c5:1b:9f:ff:b5:17:b8:b6:91:99:34:6c:8f:fb:
         36:59:d8:81:e0:03:9d:02:6e:83:c7:c1:a6:32:15:df:be:f2:
         f9:24:b3:3c:fc:1b:4f:0f:86:99:0c:52:3e:e6:58:b9:2e:6f:
         58:8c:4c:4d:37:e7:19:17:98:be:b5:48:e4:10:32:1a:e4:29:
         b0:6c:35:c1:2d:85:44:ab:9a:74:4a:b9:f2:0d:c2:e6:4c:61:
         7e:13:12:d1:92:7c:a6:ee:77:09:84:23:e1:e3:66:8c:3a:15:
         56:e0:8f:3d:51:64:46:52:4e:e8:e8:4a:b0:8f:45:b9:44:5b:
         5c:94:4d:11:f7:ba:18:da:5d:08:66:f8:02:66:fe:ee:05:d6:
         06:38:cb:05:2d:fe:c8:0f:fd:16:d5:cd:b6:6f:cb:61:ad:e3:
         4a:be:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:55 2026 by rpki-client