Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/143C7F5051C311ECB8AB7F27C4F9AE02.roa
File:                     143C7F5051C311ECB8AB7F27C4F9AE02.roa (raw, json)
Hash identifier:          vC34+NcJ72heHbkjKPN7KDd3sKrh6MW8vxoiymfWCIA=
Subject key identifier:   F8:7E:9C:A5:98:C6:21:D2:CC:49:DC:CA:32:85:81:F2:70:C0:38:73
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D4AE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/143C7F5051C311ECB8AB7F27C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:33:28 +0000
ROA not before:           Thu 08 May 2025 16:12:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138755
IP address blocks:        103.140.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54446 (0xd4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:12:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4beb8-e42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:70:59:8b:d4:af:8e:27:a6:c3:10:f3:1a:
                    ca:94:6a:52:37:29:15:16:bc:0b:bf:d5:92:8d:e3:
                    78:1d:b7:2e:65:50:b4:b8:73:bb:60:fb:e8:c8:5e:
                    d8:17:14:16:ec:7d:1f:bd:4b:ca:b6:d9:08:cb:b9:
                    4a:74:52:83:4a:d9:63:bc:af:18:d2:49:92:5c:0c:
                    12:47:d7:f8:fd:8b:d7:a1:0e:3f:1c:d9:7f:43:2b:
                    db:35:51:c2:52:4d:14:f3:30:6d:56:e9:8a:7c:2f:
                    56:02:e3:71:e3:3c:a8:b1:43:a8:02:6d:9f:ff:51:
                    61:73:98:74:ae:9a:1a:f1:b9:1c:d8:e2:56:9d:0d:
                    00:cf:3b:35:ad:bf:ef:1c:2d:f9:81:25:21:81:e5:
                    f1:c5:60:64:c7:06:36:fd:72:16:11:3e:23:92:86:
                    e7:da:98:5a:09:ba:f4:9e:a8:3d:b0:95:20:69:86:
                    09:46:07:49:89:9a:cc:ed:94:3e:ff:08:d5:2c:75:
                    6f:b6:c6:09:f5:15:26:69:54:57:fd:3e:db:17:08:
                    de:5a:10:52:d9:af:98:e7:1b:59:fb:96:c1:14:87:
                    f4:9e:3c:78:f6:73:80:2a:8b:5d:7e:97:45:46:3b:
                    99:20:82:ce:a4:f4:03:f7:b0:c9:b1:84:f7:6d:de:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7E:9C:A5:98:C6:21:D2:CC:49:DC:CA:32:85:81:F2:70:C0:38:73
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/143C7F5051C311ECB8AB7F27C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:e0:e3:14:5f:d4:bf:36:ce:0a:c8:df:9e:84:f6:38:8a:6e:
         bb:f6:31:aa:68:bb:16:31:87:7b:b9:98:0c:43:1c:e7:e3:3f:
         66:06:0f:63:4f:3a:88:89:de:47:6d:6e:75:69:99:7d:8a:e3:
         cb:2a:4a:ed:8e:48:87:c2:11:58:99:c2:1f:0b:f9:5f:69:81:
         a3:5d:0a:38:18:80:91:70:5c:32:35:d2:6f:2c:27:01:97:ea:
         1d:c8:ca:60:96:75:92:a2:69:be:5d:c5:38:f1:3d:e9:b8:5d:
         40:97:a5:2e:01:0e:e1:92:70:4f:4b:d6:bb:75:8e:72:b6:c9:
         4d:bf:36:bd:44:ef:b5:bc:c0:6c:44:fa:48:ce:88:8f:fe:7e:
         78:b5:8d:cb:06:23:26:ad:a4:ec:b5:86:73:04:57:d5:c0:a7:
         93:20:b5:8c:03:49:52:f8:5f:ec:ed:99:5e:86:30:25:3a:10:
         40:3a:30:66:99:97:8f:fb:0a:d4:4d:cb:0b:08:76:62:35:4b:
         db:e7:f0:10:61:b8:28:fd:95:f4:5c:d8:b2:3a:5b:59:20:c6:
         d8:f1:15:70:d2:43:85:c4:36:16:97:3f:64:a8:49:b5:20:57:
         a7:31:c6:eb:1c:07:25:a9:85:f5:4b:65:48:a8:12:db:70:fa:
         55:d6:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:19 2026 by rpki-client