Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09012B281D1111EB94731745C4F9AE02.roa
File:                     09012B281D1111EB94731745C4F9AE02.roa (raw, json)
Hash identifier:          /IlG3Ip8zGMR+VTQmrCdXTk6NXfjVtRr7Qh6SCuQCIA=
Subject key identifier:   51:BF:C8:AE:96:2D:BB:89:EB:B4:5E:6D:58:56:B6:F2:A0:B0:0B:C8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D484
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09012B281D1111EB94731745C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:32:29 +0000
ROA not before:           Thu 08 May 2025 16:11:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138286
IP address blocks:        103.157.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54404 (0xd484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:11:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4be7d-26e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:28:6b:e6:8b:72:48:cc:f0:29:30:81:a5:
                    98:ca:b8:a4:c6:54:c4:3e:f1:a1:a0:95:2e:0c:eb:
                    f7:5e:f3:97:e6:af:b5:a5:23:03:1a:3e:75:c4:70:
                    a0:11:c6:c5:77:2f:f2:ac:bc:43:76:6f:df:b0:6d:
                    a3:ae:d4:3a:80:fd:1a:19:ec:2b:b3:09:fb:8b:8e:
                    e4:eb:c2:72:cd:37:ba:a7:7a:f7:cc:71:3d:03:74:
                    9b:31:6e:0d:e0:a9:55:90:15:41:78:e6:5e:00:77:
                    6d:80:df:03:2c:b0:dc:40:e3:5d:32:4e:2f:a0:fd:
                    85:3c:a8:de:a9:e1:cd:62:ac:5b:e3:e6:29:29:86:
                    94:44:b2:75:66:4d:26:32:bc:34:1e:eb:bc:08:2c:
                    fa:27:c6:83:ab:9e:37:dd:e5:87:90:33:96:4e:4c:
                    bc:79:a3:13:e9:5f:17:01:b7:51:30:41:42:ad:5c:
                    2c:1d:dd:ab:14:27:42:82:d1:4d:d8:fb:50:d4:77:
                    56:9a:44:c4:b2:36:5a:05:22:30:39:f8:d0:37:e9:
                    10:a5:50:e1:01:ea:cb:a4:06:23:06:b0:97:31:50:
                    f7:c2:08:59:74:6f:e5:01:5a:26:5d:c5:20:75:a3:
                    e9:81:5f:5b:9a:1c:f1:a2:9f:ca:2b:38:8d:74:5c:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BF:C8:AE:96:2D:BB:89:EB:B4:5E:6D:58:56:B6:F2:A0:B0:0B:C8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09012B281D1111EB94731745C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:cf:21:c4:1e:10:7a:0a:d7:08:0f:b6:a4:44:fc:9a:a9:
         a4:f8:50:a5:b6:b2:8a:bf:d1:9e:2a:54:86:56:57:b7:95:7f:
         cc:a6:b9:6a:21:c4:4f:10:a1:d0:09:6b:ce:d8:c9:b8:2b:d6:
         5d:f4:a6:08:45:c4:ed:57:b7:c3:73:1b:29:6e:02:33:48:9c:
         00:1f:e3:a3:75:fd:68:71:98:9e:cd:fc:c5:e2:d5:5a:4d:0a:
         17:0f:e4:2f:9c:f7:b1:16:4a:be:7b:ce:56:9e:f7:97:df:9d:
         63:88:7c:75:e8:81:89:e7:89:f6:1a:60:4a:8c:b5:7c:1a:8f:
         36:48:da:18:37:e2:6f:cc:c9:69:5d:79:b4:19:0c:f2:53:6e:
         cb:ba:ea:5e:c0:e6:33:0c:76:63:92:5c:b8:11:b8:56:3e:27:
         68:d6:cf:d6:53:95:df:22:73:0e:c1:f4:82:a3:5a:cd:b3:12:
         e6:e1:cb:0d:bb:cc:7f:0a:29:97:f1:09:78:dc:20:15:b0:66:
         6d:74:bf:88:69:80:09:2b:63:f3:db:14:23:99:2c:b4:49:e2:
         fa:f2:4e:f7:59:33:ad:43:41:d4:c0:c9:c1:36:27:e8:b3:6f:
         55:6f:f0:6f:c5:a5:c9:d7:d2:14:f9:24:ab:6b:3c:78:d8:03:
         1a:a9:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:45 2026 by rpki-client