Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01696736B64911EC804C2C4EC4F9AE02.roa
File:                     01696736B64911EC804C2C4EC4F9AE02.roa (raw, json)
Hash identifier:          ff+JXx/QYOOARGAq+zOew7JFuMc8xThupb0xizcrOSE=
Subject key identifier:   D5:13:CC:C7:05:33:8F:38:BA:AD:B3:B5:C8:DD:53:35:8E:BF:F0:04
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D235
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01696736B64911EC804C2C4EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:18:38 +0000
ROA not before:           Thu 08 May 2025 15:59:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133987
IP address blocks:        103.184.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53813 (0xd235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:59:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bb3d-2291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:8a:65:63:f8:13:69:a9:46:c8:cc:00:94:
                    01:e1:52:f1:a0:24:2b:4b:df:6d:25:d6:18:5d:4e:
                    2c:5c:61:16:33:38:77:44:74:72:a5:8f:da:b5:cd:
                    9a:e8:ad:47:48:f1:b6:75:46:99:4b:ae:2c:89:5f:
                    78:c6:9f:83:87:5f:14:ac:13:bd:62:8a:9e:a6:41:
                    9e:c9:48:89:a0:05:13:aa:88:82:56:21:71:34:3e:
                    aa:47:7f:de:ba:e4:4d:f6:51:a4:e1:c2:08:18:d0:
                    2a:7f:bc:8d:86:6c:7f:fa:b7:64:dc:73:dd:d1:f4:
                    7d:41:b4:c6:4f:7d:74:74:d7:62:06:a5:c5:fd:1d:
                    22:11:a1:35:45:bf:3d:11:0d:69:e0:b5:7b:cb:36:
                    2c:91:03:6f:66:60:98:ec:3b:d5:55:e6:4c:06:02:
                    e7:3c:6a:2e:65:cd:79:e5:d7:c0:c7:72:4f:ca:ee:
                    20:96:4c:ee:d2:d3:ca:47:5b:45:64:d8:36:19:cc:
                    a9:77:1c:ff:15:f9:dc:06:55:f5:f2:fa:6b:d1:03:
                    7f:e6:2f:ce:9f:1a:d1:34:44:a7:2b:b5:54:4a:67:
                    97:92:3e:9d:b8:62:39:4c:86:90:1d:1e:0f:41:e3:
                    bc:fe:da:9b:45:33:db:7f:be:bf:77:2b:2f:a4:0a:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:13:CC:C7:05:33:8F:38:BA:AD:B3:B5:C8:DD:53:35:8E:BF:F0:04
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01696736B64911EC804C2C4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:38:83:1a:1c:9f:72:07:f3:81:41:cf:66:da:2a:66:39:3b:
         f6:e3:d3:6e:55:4d:29:64:4f:39:a2:e4:49:1c:25:77:10:b0:
         2c:f3:ae:7b:89:41:be:44:41:55:ce:d5:f0:1f:4e:1c:a3:8e:
         3c:28:df:cd:00:f8:de:7f:00:6b:1b:85:3e:9f:f2:f2:2e:9b:
         e2:1f:79:d1:d6:ed:b4:87:28:40:3f:6c:b4:7f:b7:9b:83:98:
         c1:c3:24:14:48:60:f9:6c:66:24:73:47:f0:9f:a1:bb:05:8d:
         f4:57:9f:6d:b0:e1:8a:12:61:7b:3a:ef:c4:ca:8c:1e:10:c2:
         94:ef:9e:21:f7:bc:7e:06:e2:35:c3:e4:c6:28:18:85:1b:c2:
         73:23:8d:91:aa:f8:c4:5b:76:65:fe:dd:b5:f3:35:5d:91:58:
         e5:85:1f:45:cb:d2:db:f8:a9:b8:56:24:58:3d:2e:e2:a1:b2:
         98:17:65:fa:1a:38:1a:4c:c3:fd:53:7a:84:d3:07:6c:a7:c4:
         e8:95:0e:87:1b:15:98:6b:87:0c:28:e3:f4:83:c6:ec:35:5a:
         91:0c:d3:99:7c:3c:8b:b9:38:33:25:5b:11:6d:91:65:ab:f2:
         a3:03:d8:50:86:0a:b6:4d:cb:fe:ba:16:86:ea:62:1b:74:40:
         25:3b:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:43 2026 by rpki-client