Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F36D8B4F82A11F0AAC5B8EB376F56BC.roa
File:                     4F36D8B4F82A11F0AAC5B8EB376F56BC.roa (raw, json)
Hash identifier:          E4eFTQaqTsrOK5UVSYJtmdtfprd0v0LGOlCRm32mWWE=
Subject key identifier:   C2:7E:07:04:7D:5E:D9:EB:C8:AC:5E:4E:D9:9B:34:31:95:E3:90:F8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DAEE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F36D8B4F82A11F0AAC5B8EB376F56BC.roa
Signing time:             Sun 01 Mar 2026 23:06:07 +0000
ROA not before:           Fri 23 Jan 2026 07:08:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136719
IP address blocks:        103.102.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56046 (0xdaee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan 23 07:08:25 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c65f-216f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9c:b9:c4:70:5d:cf:81:55:ce:20:35:d1:9a:
                    0d:f2:7a:84:f8:45:ee:fe:0d:6c:98:24:14:34:67:
                    ac:4a:10:e7:e2:4c:95:13:64:79:6c:bf:7f:66:75:
                    f0:45:29:64:38:bf:81:3a:0d:af:46:18:f7:8e:bb:
                    3b:9a:bf:c1:42:93:05:26:05:96:25:38:42:4e:eb:
                    89:22:37:4b:64:c9:7a:03:7b:d9:03:3a:81:0f:77:
                    50:4a:3a:5a:39:37:c5:38:c6:fd:63:da:6e:d7:eb:
                    4d:17:81:14:fe:ef:34:ad:9d:b0:ca:5d:49:b8:00:
                    c1:7b:12:d8:6f:53:dc:2d:eb:3c:43:a5:92:1f:4a:
                    25:c1:84:a4:3c:d4:60:19:b8:00:c1:39:0a:08:7d:
                    bd:e3:18:bd:87:12:26:16:2f:13:1c:39:24:ab:9a:
                    85:1a:ac:37:c7:d6:27:16:1d:bd:40:69:1b:ff:8e:
                    0d:f3:4e:60:f0:40:e6:c0:fd:75:f5:01:56:ce:e6:
                    b2:c3:62:69:3b:53:8e:fa:a3:2f:76:6c:ca:de:2f:
                    0f:cc:80:0a:87:b8:68:3e:87:4e:4a:34:89:f4:89:
                    77:43:fe:d1:39:f5:f1:92:b2:65:92:b9:6c:0c:f8:
                    a8:5d:fa:d0:ed:c1:a0:b2:8c:32:5f:08:71:ef:bf:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:07:04:7D:5E:D9:EB:C8:AC:5E:4E:D9:9B:34:31:95:E3:90:F8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F36D8B4F82A11F0AAC5B8EB376F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:42:ed:0b:38:67:44:55:f2:09:2e:c3:27:87:e2:b1:92:
         a6:50:0f:2a:fd:d5:97:e3:a8:04:bb:41:dd:e9:7f:36:dd:c9:
         dc:2b:a3:76:94:32:d0:7e:f8:39:87:f5:f9:be:6c:14:56:e5:
         40:2e:24:b0:2d:d0:00:27:5e:35:ed:30:53:c6:c1:77:17:e3:
         f2:d3:bd:f3:92:2d:cf:75:ec:e4:45:f0:a4:5d:e1:17:db:8d:
         84:a9:bc:bc:18:67:3a:cb:60:50:aa:d3:a8:3f:d5:18:d2:42:
         6b:c7:a9:8b:1f:04:99:7c:5d:e2:f9:6d:ee:61:62:c4:a4:b7:
         d9:f4:a8:29:b0:c3:7c:fc:a0:8d:9e:2c:a7:cd:95:85:4b:64:
         00:91:16:cd:84:c0:2c:e6:f0:0d:df:01:65:8e:f1:a1:e1:ea:
         92:bd:88:96:a7:7b:14:e2:7c:4f:ed:09:5f:b9:6d:75:74:db:
         80:56:fa:cf:fc:85:7c:7c:01:5d:ea:b0:83:a5:56:a9:e8:56:
         0f:02:47:ce:ae:26:b4:4f:ff:6c:b5:b2:44:b9:b3:91:d2:90:
         47:3b:70:bf:31:71:0a:21:8d:0f:a0:d3:4e:7a:a8:ae:e2:eb:
         dd:ff:9e:29:ad:89:3f:bd:7b:37:ee:79:96:99:ee:27:29:fa:
         5c:56:38:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:54 2026 by rpki-client