Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa
File:                     5845933C7CD311EB98250761C4F9AE02.roa (raw, json)
Hash identifier:          w2ES/lCTFkMstbAr201/PckYxe/jVBPMVXi39vIl4aA=
Subject key identifier:   ED:54:17:93:F6:46:1E:0E:01:AC:20:6A:B7:3A:9E:40:3D:7F:A9:EF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D599
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:38:56 +0000
ROA not before:           Thu 08 May 2025 16:16:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141547
IP address blocks:        103.163.58.0/24 maxlen: 24
                          103.164.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54681 (0xd599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:16:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bfff-eef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:9b:94:98:ad:0c:47:b1:28:fe:31:f7:84:
                    32:0d:84:6a:8e:b9:cf:90:8e:c1:27:19:c4:68:c2:
                    21:b4:56:f2:47:04:fb:a1:9d:a0:c4:5c:ce:78:7c:
                    cc:cc:ee:26:f1:30:64:5d:40:6a:fb:17:cc:01:7b:
                    23:0f:84:4b:9d:fb:5d:a5:e9:54:d6:8e:9c:0d:3a:
                    81:7a:a3:28:4c:03:dc:0d:89:9c:00:2c:1f:e3:b9:
                    d8:5d:c5:d3:80:e0:74:e9:27:67:4c:f8:e0:a5:3a:
                    65:e7:cf:dd:71:df:be:02:ac:b9:b3:8e:aa:af:b7:
                    00:55:c1:6c:f8:e2:75:62:e2:f1:0c:01:6a:48:ae:
                    81:a0:a4:5c:99:28:d7:f5:3b:44:2b:29:9b:13:89:
                    56:78:92:58:8c:3e:68:dc:f9:4d:a0:10:98:71:00:
                    ca:fa:e0:db:c2:7a:19:e9:12:e7:45:88:f8:88:d9:
                    b0:7c:7c:01:a9:a8:22:12:7d:20:9d:f8:fd:94:29:
                    0f:ce:5c:07:e7:32:e1:eb:17:ba:a9:0e:a0:c7:d3:
                    ab:63:b0:16:48:92:11:b4:d7:12:da:6a:6d:00:ef:
                    91:8e:0a:61:89:9e:94:24:2f:22:8f:a5:d2:ba:94:
                    30:7e:b6:d6:d0:49:bd:57:a6:8c:ab:97:b4:c4:29:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:54:17:93:F6:46:1E:0E:01:AC:20:6A:B7:3A:9E:40:3D:7F:A9:EF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.58.0/24
                  103.164.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:f8:72:bd:af:09:c8:40:47:40:6f:aa:af:8a:f2:08:91:
         37:ed:11:63:8a:d2:9f:11:53:06:59:ca:67:26:2c:06:48:19:
         38:b2:f0:c8:d7:bc:25:d8:73:38:63:df:11:50:70:8e:9a:2d:
         e9:70:65:44:bd:cb:75:b8:02:84:21:af:79:2b:eb:20:10:25:
         40:3f:3b:cf:67:e5:e2:c5:09:17:72:3e:4c:e3:f5:b2:69:1f:
         a3:a1:d1:17:a8:86:b6:b4:f8:44:13:c0:eb:92:d7:46:57:a7:
         fc:b3:16:7c:b4:e9:bc:4e:3e:04:51:52:d7:ed:52:68:01:ea:
         08:de:5e:82:9f:8f:7f:a4:7e:08:d4:ae:81:76:14:d3:de:3d:
         9e:54:83:3e:6d:95:7b:e6:ae:c0:fe:01:33:06:e3:30:9f:74:
         0d:14:29:71:a6:a2:b8:ed:9d:67:7b:26:80:65:bf:c8:eb:6b:
         75:89:4e:58:3b:34:c5:d2:b2:5d:99:30:a1:e4:8c:3f:03:80:
         b2:3f:ad:12:68:e2:e4:5a:d1:9a:97:97:ce:0b:66:df:06:82:
         ac:f0:7d:8f:7b:bb:7c:e8:68:00:c5:85:e6:35:e8:25:5d:24:
         78:b7:3b:1a:9f:15:45:8b:41:f0:50:8f:69:39:90:27:69:24:
         39:41:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:31 2026 by rpki-client