Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/069EADD2A7DC11EBB880212EC4F9AE02.roa
File:                     069EADD2A7DC11EBB880212EC4F9AE02.roa (raw, json)
Hash identifier:          DW2FxA3yLhDe6gpfJjJ5xt1j14bsvr5d8grerClQAzo=
Subject key identifier:   47:A8:FC:4C:6D:2C:73:2B:61:EC:9D:11:25:6E:A7:9D:3B:82:49:D7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D36B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/069EADD2A7DC11EBB880212EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:25:56 +0000
ROA not before:           Thu 08 May 2025 16:06:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136291
IP address blocks:        103.86.26.0/24 maxlen: 24
                          103.94.204.0/23 maxlen: 24
                          103.94.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54123 (0xd36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:06:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bcf3-cbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:07:62:fe:91:c4:61:6d:c9:c4:7e:23:1f:
                    d1:b9:da:71:c3:20:32:04:09:34:da:0d:a6:f2:9b:
                    16:db:5d:d5:6e:d8:3e:47:c2:62:8b:bd:20:af:80:
                    e6:cd:3f:43:5f:7a:95:e2:ee:55:9e:dd:b1:55:01:
                    1d:a9:6f:87:56:54:13:25:97:06:83:b4:07:db:c3:
                    b9:15:21:44:dd:86:e7:61:79:d8:1b:f6:a5:e0:b2:
                    f7:66:79:02:3c:71:3e:55:de:b8:b9:e2:ee:9e:0c:
                    96:e4:f4:99:63:21:8d:bc:b6:7d:33:74:f8:18:3b:
                    b4:61:0d:06:29:06:77:c0:12:14:b1:75:6a:d2:2e:
                    db:1d:d6:4d:82:c1:fe:1b:73:c6:d2:50:4b:ac:0f:
                    79:e2:d4:2b:9b:7b:bc:9c:01:fd:f2:2a:6b:0b:16:
                    a8:6f:5e:82:ed:76:7e:f0:50:35:cd:68:80:7c:fa:
                    42:6e:f2:8c:9b:c6:93:11:eb:18:50:0b:28:2b:29:
                    3f:3f:3e:d8:38:1e:87:c2:e1:ab:0c:fd:47:4d:29:
                    a2:c1:43:03:06:2a:a4:1e:b9:35:c1:cf:e5:3c:2a:
                    ad:be:8d:61:92:70:b7:63:a0:51:f7:fa:d3:43:cd:
                    67:b6:a9:8a:02:80:9f:a4:fe:b1:1a:e8:bd:2a:3d:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A8:FC:4C:6D:2C:73:2B:61:EC:9D:11:25:6E:A7:9D:3B:82:49:D7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/069EADD2A7DC11EBB880212EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.26.0/24
                  103.94.204.0-103.94.206.255

    Signature Algorithm: sha256WithRSAEncryption
         7e:79:4d:3c:4d:41:7f:ec:c0:53:6e:73:3e:3c:3c:0b:53:ec:
         75:42:34:77:a8:4f:20:e3:68:1f:a0:8c:13:ca:a2:5e:e7:69:
         ec:1f:c6:97:83:3c:c9:f0:6d:b1:92:d6:8a:06:28:3f:a7:91:
         1f:0f:4d:0e:a4:ee:07:14:c1:09:34:e5:36:ca:02:2c:89:cf:
         cc:9d:bc:19:7f:a4:00:9c:45:43:a2:c2:20:24:8b:12:4d:df:
         b0:4a:e4:9f:83:e2:6a:e0:c8:9f:47:39:34:1d:a2:35:9b:6e:
         09:37:0b:3b:36:77:74:c4:51:97:b0:cd:66:d8:52:65:77:11:
         37:cf:20:fa:fe:29:07:30:56:b5:f0:40:28:8a:70:ba:0b:4f:
         e5:76:1d:11:35:39:19:28:56:ff:e2:de:d6:ed:10:25:17:33:
         33:84:b5:8f:7b:c5:07:01:6f:42:69:d1:06:e3:e6:c6:a6:19:
         e9:7c:3b:9e:4c:26:d7:a3:91:8c:ac:e9:76:73:7d:f1:3a:5e:
         99:ac:e0:b6:76:5e:4a:3a:72:95:17:9c:5a:f7:82:1d:f9:5a:
         e4:71:1b:c3:33:ae:62:79:b2:db:17:fb:04:1d:b1:83:04:46:
         a8:eb:54:6d:e1:4c:cc:16:51:2c:be:e8:6b:d4:42:e7:83:14:
         65:d6:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:26 2026 by rpki-client