Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56844100E2EC11EF8BD5A167C4F9AE02.roa
File:                     56844100E2EC11EF8BD5A167C4F9AE02.roa (raw, json)
Hash identifier:          V/3Bm0jB87DHGGXLiIHjP1wHXJuFpC9mPy+8x7gsCuY=
Subject key identifier:   38:26:5E:67:0E:8C:FD:87:58:91:B7:ED:5E:F8:5E:65:B6:A4:86:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D84A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56844100E2EC11EF8BD5A167C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:54:12 +0000
ROA not before:           Thu 08 May 2025 16:29:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153275
IP address blocks:        103.78.148.0/22 maxlen: 24
                          163.61.4.0/23 maxlen: 24
                          2401:eae0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55370 (0xd84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:29:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c394-6eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:80:03:4b:0c:8d:58:73:1d:31:e5:bc:33:
                    8b:a8:e7:7d:44:75:d0:b9:c7:ef:0d:c3:97:db:97:
                    4b:ab:ce:3b:2d:4f:45:7f:ba:14:e7:77:e8:53:4f:
                    c0:33:30:88:a7:fc:cc:13:04:3a:06:87:9d:38:e9:
                    71:af:93:7f:4a:b0:4b:98:c8:13:6b:8f:d0:79:b4:
                    cf:63:85:9a:90:ec:f0:78:2b:58:91:73:95:53:1b:
                    10:e4:bb:83:4d:74:87:cd:48:39:cb:09:6d:d7:ab:
                    dc:c8:14:e9:9f:88:ef:5f:e7:a6:4b:8b:87:e4:3e:
                    ec:5d:36:4f:ef:eb:00:49:c6:3b:a2:13:fd:74:f3:
                    5e:80:11:8f:a4:0c:a4:1a:70:12:b9:f4:10:d6:bf:
                    27:b2:9f:df:c4:ad:69:7d:51:6a:18:0a:4c:5e:02:
                    f2:78:c6:8a:59:15:40:da:d6:ca:0f:87:63:e7:8e:
                    56:19:5d:bf:f4:ab:1a:61:0c:23:2b:05:03:ef:14:
                    f4:ce:86:6c:d9:1d:75:6d:83:cb:b0:12:12:b3:04:
                    61:77:cb:41:bf:bd:03:85:72:ee:ed:dd:99:9e:dd:
                    f1:d0:bc:9a:47:7d:af:8a:f3:7c:1f:3c:b4:82:b7:
                    f6:5f:a5:aa:8a:a3:54:58:50:fd:43:77:d2:03:ea:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:5E:67:0E:8C:FD:87:58:91:B7:ED:5E:F8:5E:65:B6:A4:86:0C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56844100E2EC11EF8BD5A167C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.148.0/22
                  163.61.4.0/23
                IPv6:
                  2401:eae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:68:54:29:63:fa:a3:ab:b4:eb:4a:2c:45:c1:fd:06:19:2d:
         7d:33:9f:aa:0a:39:cb:07:2f:a3:de:4d:bd:79:a2:46:5b:2d:
         88:0b:68:54:1f:9a:4a:f1:17:1e:c6:81:e5:fb:d8:b4:88:a5:
         a6:ac:17:8e:0d:0f:70:ca:be:30:23:48:2e:09:91:49:6c:f1:
         e2:b3:8e:f3:56:75:bb:1f:dc:42:f0:23:40:68:11:f9:1f:64:
         27:1e:41:d7:4e:fd:93:f3:90:93:ee:a4:83:a2:62:ca:63:ab:
         ed:d5:00:85:c1:4d:2d:e4:2a:bd:c4:38:64:35:86:ef:0d:4b:
         1e:02:14:d9:73:74:70:c6:5f:bd:8d:0a:a7:93:84:11:40:d9:
         61:74:47:70:10:eb:2b:36:25:ec:c0:2a:52:0d:0f:67:31:c8:
         ba:ef:94:5b:1d:d9:3f:06:d2:1c:ee:7e:82:7f:2e:78:8e:2f:
         bb:39:95:f1:e6:8a:e8:ed:e4:1f:31:10:52:30:f1:39:16:c4:
         9a:a0:eb:f6:f9:c7:3b:6a:c8:e0:10:92:d7:9a:22:3a:e3:1d:
         cd:a5:60:ba:7e:f2:85:d8:80:74:3a:16:89:c0:76:1d:b0:ac:
         18:37:7c:c0:f4:57:6c:e1:e0:41:c0:25:1e:43:56:02:d1:88:
         cb:9f:9f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:07 2026 by rpki-client