Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2175F4B4C81511EFAC69C117C4F9AE02.roa
File:                     2175F4B4C81511EFAC69C117C4F9AE02.roa (raw, json)
Hash identifier:          x8CjI5C6nYs/1FOvz/CgHMCryRNMOvrz0WZqtqu7hMA=
Subject key identifier:   AD:07:0A:E6:64:F8:31:E0:01:5D:34:FB:77:96:2E:0F:1F:DF:7B:36
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D384
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2175F4B4C81511EFAC69C117C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:26:31 +0000
ROA not before:           Thu 08 May 2025 16:06:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136332
IP address blocks:        103.89.56.0/22 maxlen: 24
                          103.190.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54148 (0xd384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:06:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bd16-a6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:70:75:43:47:77:32:96:cf:06:2f:a5:91:
                    2e:a7:1e:90:99:00:41:f0:fd:25:d6:54:41:05:77:
                    66:8b:36:87:5e:ed:a6:54:32:96:41:b1:19:41:18:
                    b6:7a:ae:42:f4:af:f1:9b:60:f8:a0:77:db:1b:97:
                    ba:fa:db:11:5c:d7:cc:ea:af:05:7d:87:d7:03:eb:
                    ed:ef:1f:4c:b0:10:94:4a:bf:8f:c7:b8:14:ec:5c:
                    c4:34:69:fa:34:c3:d5:dd:f0:0d:ab:0f:6c:3e:4b:
                    f8:46:5b:95:72:ee:a7:b1:a6:af:9b:e3:21:5f:06:
                    64:3b:71:87:85:99:e8:38:e3:ad:45:7e:fa:c2:c7:
                    b3:d0:6b:d1:13:36:b4:71:08:63:3e:f4:fc:23:65:
                    67:dc:3d:73:5d:a4:a0:62:68:12:a7:57:93:49:b6:
                    6d:6b:36:76:61:36:f2:d6:fb:58:77:73:ff:2e:4e:
                    ff:3e:42:11:cb:21:fd:58:c9:bf:e7:05:58:fb:cd:
                    53:22:1a:8a:93:79:46:91:80:ac:ed:9a:2c:c9:36:
                    13:b1:54:57:7a:cb:f0:95:7f:74:68:b5:f5:8c:39:
                    cb:fb:0e:f2:ff:8f:45:10:6b:f1:73:04:60:78:1f:
                    0e:89:07:c1:8e:bd:7e:06:55:78:aa:1f:3b:48:bb:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:07:0A:E6:64:F8:31:E0:01:5D:34:FB:77:96:2E:0F:1F:DF:7B:36
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2175F4B4C81511EFAC69C117C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.56.0/22
                  103.190.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:79:a1:03:ce:9d:7a:7f:a7:06:c2:ee:a2:8d:5f:34:ad:1c:
         c9:e7:5c:8a:78:1c:27:65:f8:55:6b:19:be:11:89:a0:36:5b:
         2d:1b:a1:a1:dc:1d:21:9a:90:d3:15:61:2d:11:e6:b8:96:36:
         09:7a:5f:d9:8f:0d:ff:54:9e:c3:1a:61:84:71:ae:8a:5d:4a:
         58:60:96:f5:20:18:52:70:a6:94:2f:91:a5:ea:c1:8e:b4:21:
         d2:57:b4:e7:1e:36:7d:b7:be:e8:06:84:2d:38:ea:ff:97:28:
         37:f4:23:3e:38:6c:67:b1:3f:8c:12:ee:10:5e:da:f3:20:5f:
         89:49:09:30:29:47:40:32:6b:48:99:92:5f:c5:95:33:44:3f:
         84:0c:e0:e2:60:0b:c2:bb:0d:1c:b8:66:d2:85:50:33:f0:9b:
         78:91:b8:fc:5d:93:1a:72:d1:42:82:cc:81:de:8a:e5:17:be:
         e2:91:ec:4f:64:0b:db:20:0d:2a:08:c0:6d:8f:74:c5:f9:3e:
         a8:41:b7:4a:4d:5a:79:c3:ec:44:2f:cd:7f:cd:64:58:68:6b:
         bb:f5:75:ef:5f:aa:60:57:36:87:bf:f1:ba:bf:d7:7f:d9:b3:
         46:eb:93:a5:74:0b:89:ba:d6:3e:51:c3:09:8b:2b:9b:88:cc:
         8a:0f:74:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:33 2026 by rpki-client