Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C5FD3C8E3C811EBB0DCE370C4F9AE02.roa
File:                     4C5FD3C8E3C811EBB0DCE370C4F9AE02.roa (raw, json)
Hash identifier:          SwVTHuK1KZRbDdESI3kq+HpMy/7e6djSyMIB25aWTek=
Subject key identifier:   16:7B:59:39:EE:9B:D3:29:F7:B1:0C:F6:96:1C:BF:B8:34:30:0A:E8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D5E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C5FD3C8E3C811EBB0DCE370C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:40:42 +0000
ROA not before:           Thu 08 May 2025 16:18:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141881
IP address blocks:        103.163.40.0/24 maxlen: 24
                          2001:df7:180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54758 (0xd5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:18:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c06a-7681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:3e:98:47:3c:dd:28:7b:63:a1:2f:6d:53:
                    04:2f:b5:27:29:fa:37:2d:3d:2b:a5:9b:44:f3:bf:
                    1b:81:8e:e7:32:7e:ac:4e:5d:7c:d5:c2:7d:97:81:
                    61:39:20:45:1b:32:76:c8:db:49:22:e9:78:3a:5c:
                    2b:38:d1:07:2a:a8:71:15:33:96:70:d3:11:8c:5a:
                    39:f5:bc:5c:c4:c3:84:9e:0d:94:c7:a8:0c:6d:f2:
                    bd:d0:73:c3:1c:a1:d4:dd:69:42:02:27:e0:05:d1:
                    7e:ce:5b:08:85:cf:a3:2b:b3:8a:aa:1a:4d:a3:72:
                    5b:4e:a2:31:8b:d0:4a:b1:05:0a:22:28:eb:be:89:
                    a8:95:7c:7c:21:b4:a4:67:71:c3:42:b3:1b:46:ec:
                    47:bc:d8:1f:3b:8f:23:98:a2:26:56:8a:bf:49:cf:
                    07:96:db:28:07:82:7c:4a:35:27:ca:1c:04:ae:6f:
                    a0:59:ab:a0:34:24:e8:bc:27:1f:e8:e7:aa:7c:c3:
                    fb:5a:24:52:3a:e0:03:78:af:87:6e:7c:ea:f5:6c:
                    ba:e6:31:7d:c4:8f:aa:1a:40:cf:ec:ad:bc:3c:6c:
                    51:43:e0:a0:e5:74:3d:99:4b:8b:ab:a8:35:30:7c:
                    8e:df:77:c6:0f:82:7a:bf:ff:43:1a:31:35:f1:8f:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7B:59:39:EE:9B:D3:29:F7:B1:0C:F6:96:1C:BF:B8:34:30:0A:E8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C5FD3C8E3C811EBB0DCE370C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.40.0/24
                IPv6:
                  2001:df7:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:38:99:d5:e9:22:df:fd:eb:d1:8a:ab:93:c1:b7:e5:e3:
         b7:44:0a:da:13:c4:6a:ff:f9:50:88:63:a9:f5:98:8d:aa:30:
         b9:66:ed:af:e0:6f:06:72:df:bb:33:35:a3:d3:3a:be:af:a9:
         1b:44:31:ed:10:fc:1e:4c:ed:0a:d7:cd:01:ca:b3:13:5c:d9:
         7d:cf:0f:4b:7f:89:8d:32:5e:48:80:61:38:ab:b2:c5:10:14:
         ad:c7:09:5d:a5:15:6c:d0:ac:f3:00:d6:7b:ae:df:f4:26:68:
         61:f3:fd:c9:6e:98:60:2d:c8:c6:37:dd:c7:24:df:8a:e7:e4:
         32:f2:42:6b:c8:e7:8a:9e:f1:ab:51:d8:25:68:66:bd:51:ff:
         df:31:03:ca:87:db:48:dd:13:12:21:5b:23:18:d6:0c:cb:99:
         7f:e6:ac:d3:3a:b5:ff:26:1d:02:09:17:a9:df:14:24:4e:91:
         16:0c:ef:7a:50:f2:58:b7:7f:79:26:89:23:dc:9a:6c:ef:cc:
         c4:b4:5c:c7:0e:a9:28:e6:59:bf:ba:09:f0:5c:e2:68:b6:fd:
         f8:4d:7e:98:1d:56:67:e1:62:8f:ac:cd:b2:ec:4e:a6:a9:39:
         28:f2:d8:86:0a:ff:cf:db:35:be:5c:b7:65:fc:31:d6:49:dd:
         5e:71:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:14 2026 by rpki-client