Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45274ECE8B0D11EB944D2D33C4F9AE02.roa
File:                     45274ECE8B0D11EB944D2D33C4F9AE02.roa (raw, json)
Hash identifier:          4n8v22nNR3EFeAHnjQ69CrjH5nuL05/br/IGoIB/T1s=
Subject key identifier:   C9:79:00:3B:35:AD:9F:91:4E:46:7F:4B:6C:9D:78:3C:61:18:BA:47
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D5AF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45274ECE8B0D11EB944D2D33C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:39:26 +0000
ROA not before:           Thu 08 May 2025 16:17:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141788
IP address blocks:        103.163.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54703 (0xd5af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c01e-68d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:29:69:0c:ba:82:33:74:d5:c9:c5:75:3c:
                    d1:c4:28:13:f3:2c:b7:a7:35:38:4b:90:71:7b:34:
                    1b:b1:f5:0a:11:04:4a:45:fe:64:cc:ec:4a:c4:ed:
                    fd:8b:06:db:66:f6:c3:4c:02:96:19:db:a0:3c:07:
                    34:16:09:a1:84:6d:fa:77:d7:2c:f3:f2:41:bc:38:
                    08:5a:29:93:9d:29:5d:8c:25:5d:6d:1f:1c:53:72:
                    4d:06:cd:77:2d:40:0b:ef:6a:d7:64:56:a1:af:12:
                    6d:a6:37:ac:40:d8:30:96:bc:73:a3:68:57:0a:30:
                    07:4b:62:bb:c8:88:ca:13:f0:7e:62:0f:56:db:4f:
                    e3:d2:de:3c:98:28:0f:d3:a1:12:42:53:e6:62:32:
                    42:3b:40:3a:d1:56:1e:77:f8:07:68:70:bb:ff:ce:
                    ef:c7:4d:8a:01:b1:88:a8:1f:f9:36:69:f6:fc:be:
                    2c:9b:dc:89:46:5b:43:87:dd:14:3d:5c:34:3b:67:
                    33:07:ff:89:4a:29:86:a7:ce:8b:ac:1f:25:47:d1:
                    8c:76:8e:54:6d:6a:c0:1d:d9:27:4d:e9:d1:5f:23:
                    65:76:6a:a2:cd:58:c5:7c:8b:7f:d8:13:70:cb:ec:
                    19:12:06:d7:33:d8:9b:87:da:6d:93:c3:48:f4:77:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:79:00:3B:35:AD:9F:91:4E:46:7F:4B:6C:9D:78:3C:61:18:BA:47
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45274ECE8B0D11EB944D2D33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:ab:60:ae:2b:b6:51:31:86:1f:af:72:12:29:b8:f3:ae:
         58:bc:2a:8b:ce:2e:ba:61:93:4b:65:80:09:b2:00:f9:69:1f:
         a7:e3:b1:dd:56:56:ac:d6:f1:68:52:36:6e:8b:67:bd:a7:0d:
         be:89:c3:35:f6:4b:15:57:d7:0d:08:70:2f:d2:3f:9c:f0:7b:
         a8:26:9f:08:89:f6:a1:47:8b:8c:79:05:36:0b:a6:44:96:73:
         77:ea:58:db:ce:fe:0b:e0:39:98:5a:af:da:3f:30:44:e3:c8:
         5e:bf:9f:47:51:b7:52:50:1f:a9:4d:db:09:6c:a1:52:11:59:
         ab:84:47:44:4d:4d:a3:91:0a:11:4b:d0:50:c5:5e:10:34:4f:
         11:46:44:f8:5b:69:bd:e6:ca:68:89:af:0a:46:89:0a:34:eb:
         46:1c:c9:2b:2b:59:96:c2:65:69:7e:7f:ef:54:1d:44:e8:50:
         63:da:3c:8c:56:5a:f4:f0:d4:e6:42:dc:0c:a4:4d:20:1e:0b:
         51:cc:24:d8:48:8f:8b:e8:10:7d:07:6a:d2:86:5f:b8:b3:91:
         38:5e:2e:41:05:a4:a7:9a:4f:6f:46:8f:94:04:f0:a9:11:e0:
         e4:26:3e:9e:32:db:8b:da:a3:ff:ed:b8:23:0d:48:35:c6:3b:
         5f:51:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:13 2026 by rpki-client