Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa
File:                     30F88C40861011EFA93BE439C4F9AE02.roa (raw, json)
Hash identifier:          Nak1g5KKBuVB6GUjHVs0yn08vjj+5Q1TzLK0OpJVcBc=
Subject key identifier:   67:60:89:51:C9:79:7F:55:33:D4:6C:FA:1D:3A:46:59:F3:87:E8:A8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D59F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:39:04 +0000
ROA not before:           Thu 08 May 2025 16:17:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141559
IP address blocks:        103.163.196.0/23 maxlen: 24
                          2407:2cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54687 (0xd59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c008-a143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:8c:d6:ae:86:d1:da:c1:80:15:ad:d8:90:
                    9d:01:f9:f8:e8:a2:15:d1:45:d4:e0:25:5f:63:c5:
                    84:d0:87:12:93:90:44:d6:ae:21:3b:86:51:80:bf:
                    43:d8:55:38:1f:18:37:1a:7b:28:84:d9:2c:74:28:
                    b8:56:6c:df:20:03:b7:76:f4:38:90:14:47:2a:05:
                    8e:2b:9f:fb:73:fe:cb:0f:93:0c:d5:1c:80:6c:d4:
                    86:86:67:05:a1:d2:88:d8:88:f6:d6:c3:71:21:63:
                    1c:a0:98:16:5a:7d:5f:bd:b9:80:3c:02:9f:3b:74:
                    ed:b0:cd:b2:f1:5c:9d:bf:a1:d2:7d:5a:4c:25:ab:
                    d6:d3:df:00:66:e0:49:fc:65:c2:c1:07:e9:e4:17:
                    2a:65:30:bd:19:fa:58:f3:e5:39:03:a9:1d:85:87:
                    be:16:87:13:2e:42:ea:05:5d:2d:02:f6:f5:03:a5:
                    be:a2:13:ba:ae:da:de:b3:22:02:25:41:39:1d:ef:
                    24:88:c4:e1:bd:f2:a4:30:8d:8a:eb:cf:fb:da:0f:
                    0e:e0:2d:12:a0:6c:61:53:12:1c:72:cd:49:ac:62:
                    42:6b:2e:74:a9:66:ec:3a:c9:28:cf:a0:f8:55:b7:
                    46:ed:27:f0:74:89:fd:ac:e4:20:48:b5:2e:7d:b2:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:60:89:51:C9:79:7F:55:33:D4:6C:FA:1D:3A:46:59:F3:87:E8:A8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.196.0/23
                IPv6:
                  2407:2cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:85:5d:48:01:bc:d0:7c:59:01:72:37:26:11:ed:1f:23:6d:
         fb:db:7f:55:f6:ec:2c:34:39:b4:2f:35:5a:21:0a:64:e8:20:
         be:b7:a1:88:e5:42:5e:2c:97:4a:ef:7a:06:b4:a6:80:46:ce:
         29:6e:65:fe:dd:21:b0:c2:d9:31:c5:32:b3:d8:b4:02:64:cb:
         42:e4:e4:40:89:ef:8c:06:73:e4:7e:42:8b:b3:83:1c:88:71:
         35:c4:4a:5d:15:ef:90:03:5e:24:db:19:95:82:36:e0:9b:7e:
         d8:52:6b:b8:f2:fa:37:76:4a:24:c0:10:f8:1e:75:21:01:a4:
         7e:15:a2:88:a8:09:c6:98:ba:c7:e2:4f:b3:1b:e3:42:9f:cd:
         c1:ec:dc:6c:52:d5:58:3c:2c:26:f9:02:a1:4b:fc:b1:6a:af:
         01:d7:b1:12:b6:e6:d2:17:dd:e6:a7:ea:c7:26:d8:03:05:2e:
         56:0f:84:cd:63:55:ff:87:70:9b:e2:35:97:d5:6a:d2:69:81:
         cc:ab:6f:df:d0:00:9d:62:ee:a8:ef:7b:db:89:78:79:a9:3c:
         7c:bb:65:72:87:2c:25:d5:2e:3f:f6:a2:bc:d5:e2:1a:30:5b:
         12:2b:17:44:9e:b1:df:b7:0d:18:a8:0b:52:41:03:6f:ca:7e:
         8f:9a:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:24 2026 by rpki-client