Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/425D8074997311EEBEE9587DC4F9AE02.roa
File:                     425D8074997311EEBEE9587DC4F9AE02.roa (raw, json)
Hash identifier:          hBSNs35ZTGdRkQTu9wl9EjUWkT2Jt2+KBDUZhd6LN2U=
Subject key identifier:   B0:00:BE:39:F7:77:FA:EE:AA:19:97:A4:A9:F7:12:71:2A:C5:68:80
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D7E9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/425D8074997311EEBEE9587DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:52:42 +0000
ROA not before:           Thu 08 May 2025 16:27:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151716
IP address blocks:        103.250.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55273 (0xd7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:27:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c33a-9834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:c6:14:bb:37:c0:de:7c:41:38:bf:06:cd:
                    b5:33:dc:cd:06:d3:2c:18:43:08:3b:36:4f:7c:64:
                    55:3d:55:50:68:1a:67:26:7f:35:c6:9a:a7:33:ed:
                    aa:dc:2b:8f:a0:af:3e:9c:2e:15:79:d0:63:4d:9f:
                    32:0b:8a:14:e9:ec:b1:c6:7b:cb:db:f4:17:39:e2:
                    13:cc:64:23:47:4c:3e:45:0e:57:eb:32:85:d7:9b:
                    54:85:9f:b4:9d:29:2d:70:3c:70:3d:df:d5:77:ce:
                    b2:9e:c1:b8:3f:a9:17:5b:8d:69:6a:74:a0:7d:5d:
                    d1:bd:f1:4b:da:db:b7:3a:b6:1e:01:da:97:e0:b9:
                    24:cf:f8:4c:69:e6:a5:9d:63:e7:15:b5:98:5a:21:
                    a0:85:48:8a:fc:ff:4a:db:34:78:57:d4:69:bc:15:
                    9e:4b:ed:89:2c:de:dd:dc:1f:df:20:e8:e8:0e:84:
                    a7:e7:4d:13:6a:ba:da:48:91:5b:bf:01:dc:d9:a2:
                    f4:02:8a:1e:a2:7b:7e:22:c9:b9:61:2c:ed:03:cd:
                    8e:06:e5:1c:cf:76:1f:3b:dd:66:25:f6:53:13:a3:
                    39:35:5f:27:97:62:8c:f6:e2:5c:91:4b:58:67:49:
                    dc:83:5c:42:1e:04:f7:09:57:e4:48:cc:a3:30:b5:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:00:BE:39:F7:77:FA:EE:AA:19:97:A4:A9:F7:12:71:2A:C5:68:80
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/425D8074997311EEBEE9587DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c0:71:bf:f3:30:6b:6d:ee:8b:8e:78:6f:19:6d:5a:c3:53:
         37:a4:d4:b1:c9:46:94:ee:dc:8a:6d:bd:67:33:5a:cc:e5:14:
         b0:8f:2a:e8:12:6e:33:37:3b:11:a5:83:31:56:b5:05:69:af:
         b1:9d:95:95:85:f5:1d:d2:7f:e1:50:f0:22:3a:a6:ee:8f:58:
         97:74:63:1d:81:6d:07:45:73:37:f0:11:70:db:50:96:6f:73:
         33:ec:68:85:42:ce:a9:76:09:42:65:a0:87:5d:75:b6:4c:80:
         b3:ad:f3:f9:39:19:cd:47:ad:20:ad:77:2b:27:c3:50:b3:37:
         1d:c2:1f:3b:c4:df:d8:8f:5c:cd:c5:03:43:88:9a:01:1f:76:
         0d:83:52:7e:48:72:bd:9c:03:7a:16:f2:26:8c:86:b8:8b:82:
         93:6b:b4:a3:af:22:3c:48:30:e6:e1:00:27:b7:c3:2a:97:ff:
         0a:86:01:20:3b:f7:08:08:1f:1f:ec:42:54:b7:0e:80:0c:d5:
         1c:78:a0:be:9e:3c:7e:89:77:6a:05:16:76:15:80:33:fe:72:
         bb:30:12:44:69:b1:0b:49:a0:f0:64:e9:36:79:09:f5:ae:e9:
         0b:65:31:3a:72:10:40:dc:8d:b9:01:e1:64:87:29:de:ef:b6:
         78:61:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:26 2026 by rpki-client