Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37FB40B604A211ECBB369A6EC4F9AE02.roa
File:                     37FB40B604A211ECBB369A6EC4F9AE02.roa (raw, json)
Hash identifier:          VUSi4VNvAS/htCpBosG+FW3YmJAuwVBG2vD9jBQWlpg=
Subject key identifier:   B1:CF:06:86:95:41:D6:5D:ED:4B:D6:98:82:C7:A3:4D:98:E3:72:95
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D2F6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37FB40B604A211ECBB369A6EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:23:11 +0000
ROA not before:           Thu 08 May 2025 16:03:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135255
IP address blocks:        103.211.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54006 (0xd2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:03:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bc4e-253c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:f0:a3:e3:95:d7:7e:90:47:70:bf:c2:42:
                    11:4b:dd:3d:6c:e4:7d:f8:a7:f9:43:0c:0d:c6:94:
                    f8:7c:89:df:74:43:51:74:d3:55:7d:e8:23:35:e4:
                    63:67:c7:7c:f1:86:56:57:dd:c4:4d:bd:32:c3:c2:
                    65:0c:e9:1c:7b:99:6b:1a:64:c0:d6:15:9e:b3:7a:
                    a0:17:58:d0:3c:57:14:b7:eb:be:47:98:29:e2:bd:
                    7c:07:fe:9d:34:49:7d:0a:4c:89:57:83:2b:5b:53:
                    2c:1a:bd:c5:a0:4d:23:f4:55:86:5f:23:62:83:9a:
                    cb:e4:dc:55:fd:31:63:c4:72:62:e7:20:ce:ed:72:
                    95:21:58:9b:e4:55:8a:77:58:18:ea:57:76:82:0e:
                    6b:5d:38:c6:b6:3c:e3:74:30:89:a3:e1:2c:4e:22:
                    17:ee:5f:35:2f:a7:54:3f:68:4d:06:a3:6b:a9:33:
                    ab:39:47:84:12:25:cc:bd:ab:62:a0:19:40:b7:7c:
                    e7:4a:19:58:b4:8b:1d:66:5f:f8:70:af:39:b8:7b:
                    24:44:dd:1d:31:b4:a4:7a:99:cc:5a:77:cb:03:76:
                    94:cc:55:10:9e:66:5b:8e:d7:e8:fa:d3:4e:52:86:
                    92:0c:53:f5:79:e0:eb:f3:32:4b:f4:cb:5f:6a:1e:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CF:06:86:95:41:D6:5D:ED:4B:D6:98:82:C7:A3:4D:98:E3:72:95
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37FB40B604A211ECBB369A6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:c6:7a:a1:88:4c:e9:98:cd:f1:2d:bc:a0:83:62:03:d0:
         5c:c3:33:18:eb:bc:c9:d2:00:86:fc:dd:03:38:87:2a:32:4f:
         75:08:2e:dc:d0:18:03:d2:e9:3c:04:37:e2:dc:6f:0e:b4:4e:
         32:0b:dc:67:b6:fe:4c:44:03:f9:41:9b:f8:bd:96:e0:00:17:
         45:fa:54:e6:60:38:dc:ae:05:ba:9b:80:6e:cf:d8:29:ca:d1:
         9a:08:1d:e3:98:40:68:42:ab:a1:9f:2c:90:50:3f:37:2b:14:
         16:8e:4b:55:f5:81:7d:09:76:e9:84:47:31:5e:dc:5d:b9:fa:
         12:e3:a5:87:c7:ea:67:e1:cd:3f:54:cc:d7:e8:6a:68:36:8d:
         b7:70:e4:5a:af:1f:45:38:1b:ab:18:9f:2c:46:22:82:32:4a:
         16:6c:39:0a:15:d8:7c:08:d3:40:9e:c6:2b:f3:28:61:d2:91:
         aa:b1:00:1e:1b:14:f7:2b:ad:ea:96:f5:ef:8a:8f:45:50:f1:
         7f:ba:1a:12:76:7d:14:1f:e1:7b:c6:b0:fc:25:21:89:50:1a:
         e1:ee:8d:49:ea:68:cc:c2:42:ce:2c:bb:3f:49:24:0d:0b:15:
         0f:a0:19:35:36:64:02:2f:cf:e6:bb:3a:5b:d2:5a:f2:6f:3e:
         83:1e:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:28 2026 by rpki-client