Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
File:                     1E026214BCB311EDB63ABA82C4F9AE02.roa (raw, json)
Hash identifier:          qrVsQhdWTqUDjL/ZTLjISP7SSd2O5r+Xp2A6ofXEa6U=
Subject key identifier:   03:F2:BB:82:BE:C9:07:41:43:6F:57:A9:39:F9:75:D9:FA:3A:58:1B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6EF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:07 +0000
ROA not before:           Thu 08 May 2025 16:23:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149561
IP address blocks:        103.189.182.0/23 maxlen: 24
                          2001:df2:28c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55023 (0xd6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:23:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1eb-c076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d0:2b:1d:53:45:3c:fc:04:a7:12:43:d1:3d:
                    d9:d1:1d:8c:1b:e3:0e:bd:bb:02:a7:35:32:19:2e:
                    99:8d:90:19:26:dc:60:4d:9c:3b:e2:53:1c:8a:45:
                    e5:9d:07:dd:c1:7a:e2:c8:58:b9:7c:c4:5f:b6:bc:
                    ac:9c:79:48:20:c9:b9:00:3e:6a:40:e2:e8:65:32:
                    98:b8:b4:04:94:28:5e:43:60:0a:c2:d8:47:92:fe:
                    d7:be:90:1b:c0:6e:6c:69:95:98:3a:9c:a3:6c:6e:
                    25:30:2c:16:27:04:1a:5f:51:02:6e:94:ea:1e:ef:
                    e6:03:5c:11:64:3c:e0:19:a4:a9:3b:48:f1:ab:8c:
                    f7:02:11:78:03:9f:f0:01:e4:b2:76:6f:98:9c:a9:
                    17:e8:b0:51:a4:d8:e5:db:40:4c:9a:7e:78:6e:fe:
                    0c:5e:c5:fd:3d:a1:3b:0c:8e:50:5f:38:65:db:c0:
                    26:fe:00:31:85:72:80:c3:3c:ed:57:27:80:b7:2a:
                    fb:27:15:7d:21:7f:c1:64:cf:3c:d5:8c:ce:2c:fd:
                    ab:50:b6:b7:e9:e4:ec:57:4a:9d:15:57:44:f6:a3:
                    af:79:26:59:63:d1:af:4b:ab:f9:4f:bc:c5:80:21:
                    79:9d:62:d8:b1:a7:5c:23:40:6f:5c:01:9b:6f:71:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:BB:82:BE:C9:07:41:43:6F:57:A9:39:F9:75:D9:FA:3A:58:1B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.182.0/23
                IPv6:
                  2001:df2:28c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:6c:ef:46:39:ed:42:26:61:55:4c:f3:2c:46:2b:b3:54:
         99:b6:6e:5a:a5:82:2f:c8:6c:c1:7a:de:e9:5d:ca:a1:bc:01:
         e1:08:e4:14:fd:fb:1c:3a:97:2f:0c:e6:16:85:22:a8:7c:4f:
         16:d9:fb:82:31:db:88:01:b7:2c:cb:d3:e8:35:4b:87:09:95:
         8d:62:8f:1a:ef:e8:43:db:68:35:06:59:b9:f1:5f:0b:c4:c0:
         32:03:f8:f2:6e:a6:7e:00:51:0c:62:21:75:f3:47:fe:fd:d4:
         9d:e3:5c:a3:86:66:fa:60:97:7a:fd:3d:df:07:cf:7f:f7:e9:
         a0:d1:b9:9e:93:03:57:3f:32:75:00:5e:b2:00:11:15:72:d0:
         6d:3e:0a:f0:e5:b2:69:c3:42:6c:74:fa:3e:6c:c8:70:11:65:
         1b:f5:14:96:ca:ec:1c:d9:5d:86:e5:5c:70:10:e5:c6:3e:06:
         a5:be:ae:9e:0a:98:31:ba:bc:97:ef:98:75:cf:3b:70:20:35:
         30:65:7f:08:ee:2f:00:88:35:68:f5:39:f0:97:d9:c1:60:90:
         de:c3:f2:61:3b:09:03:f5:69:20:51:27:28:37:de:90:10:ed:
         6b:96:5b:b2:53:35:41:72:4c:f1:7b:7b:f9:1d:5e:fd:14:ea:
         3b:10:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:13 2026 by rpki-client