Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F8385E766711EB96740950C4F9AE02.roa
File:                     19F8385E766711EB96740950C4F9AE02.roa (raw, json)
Hash identifier:          SPc8OTBqGayQQdhA4LnEtADNY508FdMx/zEK8x37PIQ=
Subject key identifier:   7B:85:28:38:D9:BB:E4:29:89:58:E9:A9:8A:2F:96:47:32:40:F0:59
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D57F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F8385E766711EB96740950C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:38:20 +0000
ROA not before:           Thu 08 May 2025 16:16:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141507
IP address blocks:        103.162.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54655 (0xd57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:16:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bfdc-1c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:74:ff:a8:71:3c:7b:fc:69:22:1c:0b:e0:
                    ec:d3:8f:91:a3:9d:39:17:20:7f:41:fa:6e:8b:f6:
                    bb:60:ca:e3:0d:2d:b8:83:3b:7d:04:f6:bd:f0:28:
                    6a:19:15:17:b6:17:47:87:0f:64:a7:a5:c1:29:05:
                    77:53:86:43:75:33:8a:75:a4:c0:33:a0:6b:b8:e1:
                    da:ad:df:83:a6:9c:4d:6a:d7:7c:cf:60:0a:23:57:
                    58:d4:46:ae:1e:c7:73:03:28:d1:1c:b2:06:d2:b8:
                    f7:ce:96:c8:e3:36:4e:b2:0c:1d:ef:60:d2:44:b3:
                    cb:5b:f1:4b:69:6d:7f:95:82:40:86:9c:a8:df:5e:
                    1e:c8:43:0b:19:ab:8e:91:e9:d4:a6:cc:c3:9b:35:
                    75:8d:24:84:1b:bd:c3:de:e4:ab:7f:cb:97:08:41:
                    e6:9b:57:98:5e:0b:4a:30:79:d4:dc:6e:fa:ba:8f:
                    ef:78:60:f3:ad:79:53:d7:50:15:e1:11:49:82:a2:
                    8b:2a:6b:dc:9c:6c:5f:83:27:bb:40:f3:3f:26:01:
                    3d:2d:94:84:f2:2b:a4:87:f1:36:77:47:dc:80:c5:
                    df:ea:0f:3f:eb:27:e1:03:da:e8:ed:09:cf:fc:1d:
                    d0:8b:0d:18:ec:8e:7f:28:79:4a:0a:e8:db:4b:bb:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:85:28:38:D9:BB:E4:29:89:58:E9:A9:8A:2F:96:47:32:40:F0:59
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F8385E766711EB96740950C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:64:9d:41:e1:c2:d4:a4:2f:00:80:ba:ba:fd:ac:b8:fc:d1:
         cd:c9:a4:b0:1b:f2:3f:c9:e0:4a:67:6d:dc:ec:59:40:5c:ba:
         51:ec:5b:88:56:06:69:08:8e:93:c4:07:46:39:b9:ce:3c:23:
         20:ce:48:5b:27:de:eb:02:ed:c9:ba:a5:a5:23:21:27:44:33:
         d0:23:76:0b:dd:47:99:a5:7d:82:5c:b3:6a:6e:dc:31:35:1f:
         05:09:32:c5:19:99:87:ef:6d:49:fe:7a:af:5d:b0:6f:96:28:
         df:89:b1:97:d4:9a:e4:3b:d3:ac:eb:87:e5:70:f6:74:5a:87:
         54:3b:e1:95:14:bd:c2:f4:15:a6:96:93:f3:db:07:f4:0d:a5:
         70:a4:88:89:b8:c6:1f:61:8a:90:1e:88:ab:5b:f7:75:c9:bd:
         bb:69:06:64:a2:75:ab:57:b4:c2:5c:fe:5d:8d:39:22:df:66:
         b8:26:89:eb:24:28:0a:55:09:f7:71:44:0b:f9:9f:15:99:72:
         ec:d4:52:f7:16:84:79:1d:4a:a4:62:46:74:4a:09:30:4f:4d:
         58:20:00:62:20:a8:66:bf:8a:10:fb:08:24:ef:b7:e0:e3:dc:
         25:08:70:f8:42:5c:06:46:c8:99:25:16:43:33:68:6f:5f:54:
         5b:2f:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:55 2026 by rpki-client