Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa
File:                     4807C25C4DA311EFA08DD544C4F9AE02.roa (raw, json)
Hash identifier:          auAh92egZr3TfBgb4hcGgMVpNk//sfT7rArQNjvBweg=
Subject key identifier:   41:D3:D0:5D:DD:68:88:84:6A:C4:66:C5:9D:86:FD:99:56:DC:5C:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D4B5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:33:38 +0000
ROA not before:           Thu 08 May 2025 16:12:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138766
IP address blocks:        103.129.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54453 (0xd4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:12:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bec2-b92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:f1:cd:dd:0f:5d:27:51:d2:55:36:e1:0e:
                    7d:66:0e:14:8c:58:32:4c:b9:08:32:f3:d6:4d:0e:
                    0d:e5:cd:40:d0:c1:d4:b4:00:e4:01:e8:22:3b:d6:
                    08:4a:e9:ef:4e:b5:87:e7:2c:8a:db:a7:27:06:27:
                    b7:5e:e1:95:9d:36:25:40:9c:d5:61:b7:7d:8e:42:
                    eb:80:39:5e:b5:5c:0d:79:fa:43:46:a6:ea:30:91:
                    97:bf:d9:cb:cc:e5:b9:03:96:5f:30:ec:c5:4e:be:
                    44:10:e0:59:fa:03:d3:2c:4b:ff:9e:ea:c8:ae:00:
                    8d:bc:28:fa:04:b6:0b:e7:24:1c:cc:05:6d:89:c5:
                    2d:81:ed:68:b2:fe:9d:d9:d2:9c:b2:06:43:ba:3f:
                    80:db:01:1f:a0:66:08:6e:2c:59:fa:33:6c:be:47:
                    ad:82:bc:78:77:5e:86:01:5e:07:20:7e:ac:80:c1:
                    a1:26:ce:e4:33:6b:ec:f6:04:32:56:87:0a:ff:eb:
                    62:9b:d7:ce:0d:a7:1c:9e:12:76:69:cc:42:69:32:
                    6c:f5:68:5d:da:27:6d:b2:b7:69:a3:dd:68:af:b0:
                    c3:af:82:c6:d8:17:a1:f5:66:7a:66:12:ac:40:0b:
                    9d:85:e1:d5:09:51:2b:ff:d9:33:76:60:36:9d:7a:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D3:D0:5D:DD:68:88:84:6A:C4:66:C5:9D:86:FD:99:56:DC:5C:6C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:0d:cb:27:c5:ea:3f:0a:57:3a:09:0c:3b:e4:7b:51:18:
         05:f5:33:75:52:2a:06:5f:f2:b0:0e:fe:7b:eb:63:db:43:30:
         80:d5:e0:fc:d1:ad:03:3b:c3:54:8f:7f:83:34:ad:5e:e5:64:
         7e:f9:d6:d4:a1:43:00:d3:91:c2:e8:a0:00:eb:6e:3d:c3:b0:
         6c:fd:cf:a2:18:a8:77:44:93:31:0a:87:00:e7:9e:ba:2f:62:
         01:49:4f:ba:5f:a2:4e:f6:e8:ca:91:5d:d0:7f:4a:e2:68:f4:
         10:5f:c7:4f:e2:e6:e1:9f:be:03:d3:2c:6b:2a:ab:09:c6:d3:
         46:a3:03:ef:8b:c8:96:c6:64:53:de:4c:17:c6:c8:a3:7e:0d:
         e6:5f:9a:7e:5e:5c:fb:08:2d:61:ea:6d:ec:a1:dd:ef:9b:7f:
         e6:91:b6:37:c9:22:94:f0:e0:42:1a:a2:8a:3b:c1:0a:76:52:
         5e:54:4e:5f:8c:6f:e1:54:0d:a6:c9:10:6e:c6:84:4d:7c:72:
         20:6d:73:a6:46:43:13:83:c7:99:e7:ac:f7:23:c4:6e:4b:75:
         4c:70:79:fa:6d:e3:f5:d4:02:d6:4a:38:56:0b:1a:11:c1:24:
         ca:3f:ca:a9:55:48:3e:08:c2:74:13:71:44:eb:98:b7:a3:75:
         0e:56:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:44 2026 by rpki-client