Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa
File:                     15FCF28CF64A11EAAB86A34EC4F9AE02.roa (raw, json)
Hash identifier:          rySoSobbTmX+U/NPaDF6wcA2jHnMi5ho6NEGlFZmFss=
Subject key identifier:   0C:7C:F6:AE:B0:89:13:89:91:11:61:24:54:C3:F9:AA:F4:92:7A:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D8BF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:56:12 +0000
ROA not before:           Thu 08 May 2025 16:31:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58909
IP address blocks:        103.149.10.0/24 maxlen: 24
                          103.174.226.0/24 maxlen: 24
                          103.180.51.0/24 maxlen: 24
                          2001:df7:d880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55487 (0xd8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:31:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c40b-81ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:f1:92:7a:23:9d:57:ee:4e:2a:a4:0f:ad:
                    88:88:14:99:74:3f:4c:70:57:a7:2f:a2:02:70:f7:
                    7b:10:1d:c4:e3:c9:d9:14:dc:01:07:d8:b6:82:3a:
                    15:2d:9c:4f:75:49:3b:cc:99:7f:32:3b:73:5c:ae:
                    01:20:50:57:8e:4d:b8:c8:fe:be:62:c8:89:7a:a7:
                    90:4a:a9:d2:0f:c3:c4:ad:2d:8e:28:52:36:9a:6e:
                    e3:ca:62:f0:11:10:77:d9:42:b0:c4:66:30:b2:65:
                    fb:9f:a1:36:90:25:5d:41:41:72:8f:b3:15:7a:3f:
                    b4:28:9b:e5:07:85:26:7f:10:eb:d8:66:2e:1d:1b:
                    57:c0:93:ef:fd:b0:fb:9f:6f:c7:5c:82:3c:b2:5f:
                    66:bb:0b:37:bf:f0:05:af:e9:41:f9:8b:77:0d:fd:
                    ab:ef:d7:80:e9:75:ea:53:21:21:fe:95:2c:44:10:
                    6b:7d:96:5e:57:3c:21:ec:f1:df:1e:83:8e:d0:46:
                    54:af:f8:57:d4:d7:68:91:09:ec:74:7c:53:fb:b1:
                    28:bc:7d:ee:a4:61:fd:ac:2a:6e:50:77:11:3f:7d:
                    fb:7f:4d:f2:ad:9b:f6:5d:3c:de:32:31:eb:4c:8e:
                    14:92:b6:cd:dc:72:5c:c2:6b:b9:70:ef:9d:d0:df:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7C:F6:AE:B0:89:13:89:91:11:61:24:54:C3:F9:AA:F4:92:7A:CE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.10.0/24
                  103.174.226.0/24
                  103.180.51.0/24
                IPv6:
                  2001:df7:d880::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:45:c7:7b:5f:e3:57:e5:1d:eb:03:83:ee:2c:8b:a3:38:
         40:32:74:9a:b8:53:14:83:c0:55:dd:dd:64:a1:10:f2:8b:92:
         e4:9d:ab:2f:07:cd:d1:4c:15:1f:c5:97:b7:7a:e9:39:e3:56:
         bb:5c:33:29:c7:be:4e:f0:c0:d7:e9:bf:f6:90:68:04:2b:24:
         23:75:a9:29:bb:98:aa:11:e9:06:ba:c8:fa:c2:0d:68:e4:30:
         b8:fe:ec:b0:14:0a:ff:cf:bb:ec:ef:52:a3:31:16:3f:2f:46:
         9e:3c:73:2f:6c:26:8e:f3:cd:57:4f:64:b0:55:1a:50:46:1c:
         6c:c4:7f:a8:90:91:ba:eb:51:e1:19:ab:c8:a2:b6:44:82:0e:
         c2:be:fa:29:1b:63:52:01:10:a4:d9:4f:af:e7:46:3a:1b:64:
         e7:7e:ab:5c:9b:3f:90:9b:9a:c9:d4:0b:12:81:34:70:a9:3f:
         9c:db:ce:ac:89:09:58:d4:23:1f:ae:9b:a0:49:c2:33:34:cf:
         fb:c4:54:11:2e:0e:64:da:b6:10:0d:53:f7:ed:c8:41:7f:8c:
         b9:d8:4d:0d:0c:09:a0:f3:23:76:b8:bd:59:b6:a4:b8:bc:af:
         0a:92:42:1b:b5:cf:04:c3:fa:b0:9f:de:67:04:e0:8c:2a:d5:
         d3:c2:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:56 2026 by rpki-client