Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17D014984CD711F0B4B6B045C4F9AE02.roa
File:                     17D014984CD711F0B4B6B045C4F9AE02.roa (raw, json)
Hash identifier:          O0Qfw/kknQ7EkTfAbSnPEII8VndTqdqbWs6hla9hSAE=
Subject key identifier:   E8:FE:2B:FD:73:C9:8B:82:08:2E:47:5B:ED:D9:70:0E:73:93:29:C2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D93C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17D014984CD711F0B4B6B045C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:58:22 +0000
ROA not before:           Thu 19 Jun 2025 06:31:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134283
IP address blocks:        103.186.18.0/23 maxlen: 24
                          2400:6c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55612 (0xd93c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 19 06:31:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c48e-a975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:a8:b0:7b:30:8b:89:5f:87:fd:f1:ba:47:
                    38:51:a3:9c:56:53:0b:e1:07:41:73:00:86:1b:97:
                    44:46:b0:51:6d:48:60:05:df:0c:87:1e:99:64:78:
                    fd:3b:ea:bf:19:83:7e:2d:14:7f:00:68:e7:71:c6:
                    9d:18:d9:76:6b:dc:94:fb:59:11:69:ed:11:e0:e0:
                    ed:be:47:a0:62:21:d4:48:53:aa:46:cb:f1:f2:9f:
                    e7:bf:12:c1:f4:ff:1b:a4:d8:72:58:1a:47:dc:25:
                    cd:c2:98:c9:6e:37:85:76:16:c6:3f:30:8d:0a:d9:
                    90:2a:c9:ba:00:f2:ba:5d:97:47:c3:6e:68:17:c1:
                    07:9e:2c:1f:00:6e:92:6b:64:18:c3:39:70:14:7d:
                    b2:ec:56:de:f1:4e:b1:9e:56:d7:cc:69:4e:09:fc:
                    0e:7c:8a:23:70:a0:ac:a7:c2:3a:66:84:65:99:13:
                    56:f3:1b:65:41:ac:c9:90:4c:a5:a3:ae:b1:d9:56:
                    b6:41:e0:f8:21:30:68:a3:fc:4d:e4:e9:87:92:43:
                    88:3a:98:5b:06:1e:0e:5d:3e:30:a6:d8:b9:24:c1:
                    b9:d7:da:ab:9e:1a:8c:10:67:74:39:9d:7f:53:0a:
                    fb:7e:a5:09:6e:6e:69:4d:2e:da:0b:97:d7:1d:57:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FE:2B:FD:73:C9:8B:82:08:2E:47:5B:ED:D9:70:0E:73:93:29:C2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17D014984CD711F0B4B6B045C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.18.0/23
                IPv6:
                  2400:6c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:6d:91:aa:08:91:ce:44:0f:dc:35:d7:b2:88:85:71:7c:30:
         f1:61:5f:7a:5a:e4:83:1d:ca:7a:e9:b6:bf:e0:95:db:42:1e:
         33:00:ba:a6:70:b4:c3:eb:36:16:f9:79:87:32:28:7d:9e:81:
         41:f9:07:0a:a6:00:b6:8d:64:f6:bf:7b:1f:2f:d6:6d:f1:95:
         5f:cc:87:7c:14:1d:d6:bf:a5:61:2b:e6:1e:b8:59:ac:99:b1:
         bf:82:a2:04:2b:84:96:33:11:24:73:7c:75:95:64:9a:e2:5a:
         b2:c6:22:94:5a:19:b4:56:9c:5c:2f:5a:50:85:f1:bd:5c:be:
         2a:e0:b2:e4:75:48:3c:66:84:bc:5a:cf:1e:fe:e1:b9:d3:a2:
         98:2e:86:3e:89:02:81:ba:eb:e6:e8:ca:86:af:d5:bc:bd:a8:
         15:a5:43:52:e9:1a:a2:34:e3:91:7b:82:99:f6:c5:c1:52:81:
         a6:e5:38:92:4a:d4:15:fd:44:60:0a:96:c6:91:cf:20:9a:41:
         b1:cd:98:9a:73:cd:5c:5a:25:43:b8:7d:8a:3b:88:f9:b2:3b:
         e8:9f:f9:a9:07:fc:64:52:15:2f:e0:d7:cf:41:18:2e:7b:dd:
         6d:ec:9b:a1:11:67:1d:0c:80:f7:ca:49:88:da:59:45:94:6e:
         41:93:3a:81
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDANk8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDYxOTA2MzE1NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM0OGUtYTk3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIncqLB7MIuJX4f98bpHOFGjnFZTC+EHQXMAhhuXREawUW1IYAXfDIcemWR4
/TvqvxmDfi0UfwBo53HGnRjZdmvclPtZEWntEeDg7b5HoGIh1EhTqkbL8fKf578S
wfT/G6TYclgaR9wlzcKYyW43hXYWxj8wjQrZkCrJugDyul2XR8NuaBfBB54sHwBu
kmtkGMM5cBR9suxW3vFOsZ5W18xpTgn8DnyKI3CgrKfCOmaEZZkTVvMbZUGsyZBM
paOusdlWtkHg+CEwaKP8TeTph5JDiDqYWwYeDl0+MKbYuSTBudfaq54ajBBndDmd
f1MK+36lCW5uaU0u2guX1x1X1I8CAwEAAaOCAm8wggJrMB0GA1UdDgQWBBTo/iv9
c8mLggguR1vt2XAOc5MpwjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE3RDAxNDk4
NENENzExRjBCNEI2QjA0NUM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWe6EjANBAIAAjAHAwUAJABsIDANBgkqhkiG9w0BAQsFAAOCAQEA
u22RqgiRzkQP3DXXsoiFcXww8WFfelrkgx3Keum2v+CV20IeMwC6pnC0w+s2Fvl5
hzIofZ6BQfkHCqYAto1k9r97Hy/WbfGVX8yHfBQd1r+lYSvmHrhZrJmxv4KiBCuE
ljMRJHN8dZVkmuJassYilFoZtFacXC9aUIXxvVy+KuCy5HVIPGaEvFrPHv7hudOi
mC6GPokCgbrr5ujKhq/VvL2oFaVDUukaojTjkXuCmfbFwVKBpuU4kkrUFf1EYAqW
xpHPIJpBsc2YmnPNXFolQ7h9ijuI+bI76J/5qQf8ZFIVL+DXz0EYLnvdbeyboRFn
HQyA98pJiNpZRZRuQZM6gQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:13 2026 by rpki-client