Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/050A1748590311ED962E1636C4F9AE02.roa
File:                     050A1748590311ED962E1636C4F9AE02.roa (raw, json)
Hash identifier:          VIx8XVvm4p59fEFatDXJzG0TLClf0c1f/Rf1GcyzPCU=
Subject key identifier:   44:3F:1D:62:44:2E:85:46:FB:0D:5B:D9:26:C5:0A:96:BA:7E:B4:12
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D35E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/050A1748590311ED962E1636C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:25:37 +0000
ROA not before:           Thu 08 May 2025 16:06:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135875
IP address blocks:        103.79.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54110 (0xd35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:06:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bce1-4976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:05:1b:fd:38:d2:df:be:4f:03:08:6e:8c:43:
                    b8:dd:60:b0:74:dc:a3:5a:f0:5c:0a:6b:d1:f7:77:
                    36:54:35:92:12:05:c1:d8:cb:4a:40:c8:12:eb:78:
                    67:62:53:3d:59:22:22:0f:25:ca:da:f1:0f:8c:93:
                    fd:4f:3c:7e:07:f0:21:e5:b6:95:7f:e2:ec:3d:68:
                    b4:6c:62:ce:f8:fd:82:ae:ed:c1:30:0a:78:cc:2b:
                    b0:34:ae:1e:b2:a6:d1:f0:bc:5b:20:31:f4:27:54:
                    a3:27:74:49:86:e2:b5:9a:19:7f:c9:75:3a:8f:7b:
                    c7:db:38:d3:80:b6:e2:ef:97:57:7b:5b:45:f2:b9:
                    a4:be:76:9f:ae:b5:98:b5:8a:94:65:22:f9:c8:13:
                    f9:c4:19:ce:97:09:36:ff:e4:88:78:ed:4b:a2:fd:
                    60:c3:6f:55:a2:ac:9f:8a:e6:af:ff:6b:e8:40:32:
                    ec:fd:2f:b2:7a:b9:27:2b:ae:fd:6a:c8:ff:c5:f7:
                    a1:b9:2a:74:7f:b3:42:a6:14:02:81:3e:e0:d3:65:
                    b3:bc:f0:a5:76:8e:b0:e0:ee:78:90:42:46:34:89:
                    dc:90:1e:de:a9:be:0b:a3:d9:6d:71:8b:e2:dd:ac:
                    7d:40:84:61:40:a6:51:9b:d5:11:8c:86:ea:25:38:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:1D:62:44:2E:85:46:FB:0D:5B:D9:26:C5:0A:96:BA:7E:B4:12
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/050A1748590311ED962E1636C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:67:a1:ba:a8:c0:c9:04:a6:4c:7c:f6:1a:7b:67:24:c6:1c:
         14:02:da:85:a5:49:4d:b5:e8:5e:69:35:72:c0:96:2c:a8:4b:
         e3:53:85:88:07:0b:a9:37:ca:bc:58:c6:40:1b:f5:38:f8:e2:
         01:0c:a2:45:29:d8:b7:99:04:88:aa:8b:1c:65:56:59:b5:a0:
         9e:cf:f4:45:6c:6e:0e:2c:86:f4:82:8a:e2:45:d5:0c:c7:54:
         d7:eb:46:5e:9d:09:3b:79:77:80:92:71:da:f9:0a:0a:7e:c5:
         00:5f:46:4d:5f:49:6a:6c:bb:33:bd:f6:47:d9:74:e8:2d:f3:
         67:85:59:cd:2c:2c:82:cf:aa:28:2b:54:56:09:f8:ac:3d:8c:
         45:ee:23:c8:54:30:9c:b3:6e:5b:e0:0b:1c:58:73:e1:8f:3d:
         6c:53:5e:52:58:e5:11:e0:64:00:d0:2e:c3:57:3d:6c:84:12:
         57:92:b1:19:85:c4:dc:b9:a7:75:28:ba:2c:f6:2a:b6:ae:d8:
         90:6c:5f:6c:f1:4a:9c:da:10:d7:f7:f5:d6:d1:18:ff:d8:25:
         72:45:33:cb:68:af:21:5b:7f:67:ab:ff:11:98:1d:5b:70:a8:
         cf:a8:cb:9c:89:6b:dd:25:b3:2f:13:ac:24:85:93:cf:0d:e3:
         e5:01:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:04 2026 by rpki-client