Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E3F956A279611EE8053155CC4F9AE02.roa
File:                     0E3F956A279611EE8053155CC4F9AE02.roa (raw, json)
Hash identifier:          SniDS9SRI452ZwAwgsCuNA7uzxgO73Qf8ThZx2qIjj8=
Subject key identifier:   5D:60:9B:A0:FA:DE:A3:B7:1D:35:26:27:87:B8:DC:46:D2:C2:45:3A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D7AD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E3F956A279611EE8053155CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:51:35 +0000
ROA not before:           Thu 08 May 2025 16:26:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151109
IP address blocks:        103.197.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55213 (0xd7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:26:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c2f7-1216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:6a:45:2b:b3:10:9c:8b:5c:a2:6b:43:2d:
                    d4:23:5e:3c:c9:a5:9d:5c:2e:09:aa:a9:6f:35:2e:
                    74:69:ed:0a:23:27:0d:60:61:14:74:f2:4a:8c:47:
                    29:25:ab:c2:7f:a0:ef:39:2b:e8:c3:02:43:cb:d7:
                    f2:03:3c:28:c5:1d:2f:6d:31:71:77:e1:41:d4:29:
                    d9:da:43:04:d2:08:ad:cc:7f:8a:06:f3:69:9d:97:
                    2a:7b:3b:bd:d8:79:cd:7c:5b:1b:4e:a6:51:87:06:
                    2d:44:b6:32:4a:11:56:4e:b3:d6:ba:26:6c:df:9a:
                    10:ad:8e:64:1a:b3:f4:bf:c5:a9:6e:4c:b1:87:2c:
                    de:f8:ae:c3:02:3a:fb:e3:1d:69:fa:e5:5f:b3:2e:
                    31:f4:74:ad:d5:07:0d:5d:a1:71:71:6e:64:04:00:
                    80:e1:21:44:04:47:14:9f:4e:52:3b:8d:26:de:42:
                    b4:a0:ce:fe:f1:49:7d:13:40:2e:bc:a3:c3:ba:df:
                    e1:82:c7:94:1d:b7:6f:21:cb:9f:34:70:37:2e:a0:
                    3d:c9:56:e9:f8:2a:c0:fc:8c:48:0f:2c:7e:45:34:
                    9e:94:3e:dc:3e:e7:ed:66:e7:95:e1:10:f7:31:72:
                    85:f9:e6:44:cc:a0:e4:6c:0e:5e:cc:dc:9f:92:9a:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:60:9B:A0:FA:DE:A3:B7:1D:35:26:27:87:B8:DC:46:D2:C2:45:3A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E3F956A279611EE8053155CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:5d:73:4f:96:ea:24:fb:a8:cb:7b:6d:ef:22:b1:08:a7:bf:
         52:36:fe:cf:4a:43:73:e0:a3:66:4b:0d:76:b6:c1:05:f3:1b:
         c8:84:8b:c8:96:16:52:b7:e4:95:34:7c:fc:c3:20:51:ff:3a:
         0c:49:10:23:e9:6f:7e:05:5c:29:ad:cc:8c:ed:7e:3d:14:f0:
         d8:b1:34:f5:ff:de:96:0e:47:8a:e9:9a:b4:66:d2:24:d1:3f:
         fe:41:b7:64:66:e5:ab:7b:82:5e:d1:43:d5:73:d1:dd:c1:c0:
         85:5e:98:eb:92:88:88:1f:cf:a5:01:08:b3:fb:5b:f4:9f:51:
         7f:36:a4:dd:25:69:c1:0e:38:0e:77:6d:b2:a1:74:c6:88:8b:
         4a:a6:f8:ed:96:8f:5e:9e:76:04:9a:e5:b1:f3:8c:e4:72:72:
         02:68:8f:11:40:43:40:82:db:5c:b6:a6:be:35:22:de:47:59:
         e2:ed:b7:fb:23:ea:6a:e3:56:5c:56:54:a9:43:eb:81:cf:9d:
         58:37:34:d9:84:b8:da:29:7f:41:08:78:80:75:75:58:8d:a3:
         4d:d1:79:d6:72:bd:9c:03:22:79:51:03:68:25:96:5b:3e:3a:
         fd:1d:6a:60:e7:4e:5e:23:a2:a4:f3:8f:e9:48:0d:2c:cf:8e:
         a6:e2:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:42 2026 by rpki-client