Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C1F768228D11EBA4371485C4F9AE02.roa
File:                     05C1F768228D11EBA4371485C4F9AE02.roa (raw, json)
Hash identifier:          /oe9hmHyrbgs8EFJTUWqY99SlqhbNa0+/TyQYmanLVE=
Subject key identifier:   7B:0E:87:63:20:C2:B8:B5:B2:F8:5F:8B:1B:4C:48:9B:91:88:ED:CB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D457
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C1F768228D11EBA4371485C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:31:26 +0000
ROA not before:           Thu 08 May 2025 16:10:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137671
IP address blocks:        103.129.72.0/22 maxlen: 24
                          2001:df6:9500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54359 (0xd457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:10:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4be3e-48f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:b2:2b:ae:15:d0:26:ec:23:30:12:6e:f7:
                    06:c1:b8:cd:8e:5d:7e:d3:39:af:1e:6a:8d:8c:e8:
                    e6:a8:93:d7:53:22:32:c7:13:36:f0:3f:30:94:e3:
                    9d:42:88:73:a6:1f:91:dc:47:72:ab:f8:49:9f:89:
                    a8:1f:e8:18:a2:df:eb:ce:55:ca:4d:76:ed:8b:bd:
                    04:29:df:b2:67:f4:1d:35:3f:98:f8:94:f1:df:42:
                    ca:d7:8a:f9:13:f2:b0:c4:2c:20:06:74:43:93:e4:
                    85:74:03:71:6d:76:e1:67:fa:8b:fd:47:1e:cf:bf:
                    83:95:ac:9b:43:27:d0:41:bb:b3:81:90:35:e9:02:
                    93:3e:73:ac:71:a9:a4:80:78:fa:bb:42:b6:90:3a:
                    ee:b4:79:79:c0:7c:03:33:0f:68:0d:00:56:3f:af:
                    4b:c2:93:8f:99:43:15:27:02:79:0b:e3:11:ad:bf:
                    39:a0:58:6d:16:46:04:17:d8:f7:7d:75:31:d6:39:
                    2e:91:f5:45:f9:dd:c2:35:24:79:42:d3:9b:6b:69:
                    56:9c:64:74:e6:2c:25:ce:49:20:d4:82:75:df:11:
                    66:0f:fc:35:2f:76:df:57:0e:a3:79:27:5c:bf:53:
                    95:81:5c:24:15:1c:8d:63:2c:7e:b2:92:e8:87:2c:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0E:87:63:20:C2:B8:B5:B2:F8:5F:8B:1B:4C:48:9B:91:88:ED:CB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C1F768228D11EBA4371485C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.72.0/22
                IPv6:
                  2001:df6:9500::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:3d:17:77:bb:80:f2:d0:5a:16:00:d1:f3:af:34:5c:a5:b4:
         2c:7a:ac:0f:df:8f:8d:22:6f:8d:06:3f:64:04:4d:57:16:cc:
         83:e9:47:17:05:f2:49:d1:96:50:a3:6a:27:8a:c8:01:e9:f7:
         72:d1:25:a8:ef:16:e8:28:76:17:78:33:da:c4:a0:dc:c8:de:
         e7:60:fa:8d:21:02:da:9e:7f:fb:12:a8:38:dd:c0:91:3f:a1:
         8a:1a:c7:76:8e:7b:84:4d:25:77:c7:1d:70:81:40:6e:ea:15:
         56:37:61:52:6f:86:e6:e4:a6:3d:e8:33:e4:b1:20:9b:ef:66:
         4f:4a:95:d7:76:13:a4:5e:f3:40:4f:b8:ce:96:0f:74:00:76:
         14:b3:78:ad:84:e1:26:48:5e:1f:1d:8d:38:40:87:b7:35:78:
         05:45:13:df:03:32:d2:dd:d8:91:c6:95:ee:3e:b3:ed:a4:7a:
         33:3b:90:70:27:ee:42:79:ab:4e:13:0b:bb:ee:55:46:5e:8e:
         60:4f:45:ec:ee:49:6a:8c:23:ce:63:4e:40:dd:f1:c4:18:d8:
         ec:dd:ea:7e:e5:96:1c:b6:54:fd:23:57:d7:30:f9:fa:94:7b:
         4d:3d:4b:f1:6d:6a:d0:03:fd:23:62:62:38:80:fc:e9:6a:49:
         ad:81:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:27:48 2026 by rpki-client