Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A8378E2D3011EE97067062C4F9AE02.roa
File:                     26A8378E2D3011EE97067062C4F9AE02.roa (raw, json)
Hash identifier:          CoGJVEyWMQYqMOAdZSRynEAjYpwtaZIElsatW8+44JA=
Subject key identifier:   72:32:70:3B:83:E5:AA:49:5E:40:00:54:A4:9A:56:CF:B6:36:F9:36
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D7AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A8378E2D3011EE97067062C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:51:32 +0000
ROA not before:           Thu 08 May 2025 16:26:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151107
IP address blocks:        103.244.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55211 (0xd7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:26:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c2f4-80f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:0f:3e:4b:7a:76:9e:a5:b5:f1:ba:5d:7d:
                    5f:5a:7e:02:42:1e:e7:35:1e:24:0d:37:b1:bc:0e:
                    20:74:f0:34:13:c6:2c:44:45:33:8c:3e:4e:0a:cd:
                    05:74:97:b8:96:ec:bc:d6:a3:fd:4e:7d:12:2f:9f:
                    22:fd:57:24:a3:8d:aa:6c:08:a2:8b:67:08:fe:31:
                    95:fe:5e:16:6e:fb:ae:3a:c3:0e:92:ba:a6:f3:78:
                    61:61:3e:08:19:0e:5a:8d:65:3b:22:5b:80:9c:02:
                    ae:e2:f6:7f:97:fe:86:de:ac:6b:f8:d2:13:84:35:
                    9e:a3:78:b9:63:2b:ac:33:d2:e8:36:24:4d:99:ce:
                    69:4e:0a:47:5d:5f:ac:b7:e2:91:4d:65:5d:b5:c0:
                    d7:97:4b:dd:9d:82:68:6d:17:4a:48:ae:3e:9d:6d:
                    0c:89:5c:64:b7:b2:47:74:cb:b5:31:57:7a:6b:43:
                    f5:a0:02:2e:b9:54:be:11:15:a3:17:4a:65:3a:79:
                    9e:5f:fb:0a:a7:95:45:ee:5d:ef:78:23:1f:b6:5f:
                    d2:ef:a9:ed:bb:3a:cf:53:22:ae:4b:11:90:a7:82:
                    f6:0c:88:ad:9e:b6:5e:ec:84:46:0a:a4:58:f1:b4:
                    22:d3:38:36:54:08:af:18:15:6f:00:a1:3a:1e:be:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:32:70:3B:83:E5:AA:49:5E:40:00:54:A4:9A:56:CF:B6:36:F9:36
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A8378E2D3011EE97067062C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:6a:de:dc:06:6a:04:26:99:17:21:95:be:23:4d:49:f0:
         13:2a:71:39:13:78:7b:7c:05:45:a3:bb:f4:c0:34:ce:08:8d:
         39:2b:e3:41:eb:cb:74:21:ea:a3:85:01:25:c1:e8:8a:68:26:
         d5:ba:f7:c0:9b:e8:09:04:8a:f1:a0:00:c2:fe:d6:28:d9:3a:
         08:99:59:d7:76:92:39:7c:9e:5f:e4:64:a4:25:d5:86:9d:10:
         5e:bd:15:2b:75:c9:2b:d3:37:e5:01:dc:42:2c:2f:b7:9f:75:
         d1:4c:e4:dc:02:15:3d:54:b1:88:4c:51:c1:99:2d:b9:8e:5a:
         d2:2e:ce:28:9d:1d:83:7c:1d:32:c4:f8:14:75:de:f7:fd:d6:
         38:88:72:0f:46:38:b2:eb:c0:d1:b7:e2:9e:32:72:38:1d:f7:
         13:43:33:93:a9:3e:ae:8b:43:e7:d5:fe:aa:4e:b8:0a:55:94:
         e4:ff:81:34:b8:8e:f0:b6:62:8d:b9:8e:b7:b8:0f:6b:8c:e2:
         6d:d4:29:f6:e2:66:45:ce:7f:ea:fe:e9:e0:4e:0d:6e:12:0e:
         86:37:9a:ca:2d:c2:57:07:a8:41:d1:4e:f5:7b:6a:15:70:b3:
         ad:8a:ca:58:2a:f3:d0:0d:e1:05:5c:92:e2:db:99:d3:62:07:
         e0:f5:86:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:08 2026 by rpki-client