Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa
File:                     5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa (raw, json)
Hash identifier:          dqEwXYGb5xkT8ssKwFHyUQpn4gFqXVDMo39V3bXmzco=
Subject key identifier:   67:62:38:DA:7B:6B:64:19:21:19:04:8D:B7:22:76:3D:82:D3:4F:A7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DB22
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 23:06:59 +0000
ROA not before:           Mon 16 Feb 2026 07:21:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136642
IP address blocks:        103.85.140.0/24 maxlen: 24
                          103.97.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56098 (0xdb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Feb 16 07:21:56 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c692-ba24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:ac:9d:3d:ac:10:1d:94:e8:b6:21:fb:0a:
                    b7:57:42:31:29:a2:90:17:c6:ee:c9:1d:09:b1:e5:
                    ff:fd:f3:6e:97:7b:2e:13:e5:e0:c1:de:77:6f:ce:
                    f5:4e:69:4d:d2:f8:a8:e9:7a:64:5d:c2:10:5b:b9:
                    ac:85:a3:13:56:17:4c:d3:bd:09:cc:bd:9f:a0:ed:
                    ee:42:7c:b5:3c:7a:1e:ba:65:bb:a9:31:2a:c2:27:
                    e6:c3:59:7f:96:f0:6f:d0:f4:00:24:87:10:46:93:
                    fd:49:6d:07:79:e7:fc:99:be:86:57:0b:2f:0d:41:
                    c1:bc:41:e2:ca:2a:82:9c:0a:97:f1:5a:2e:02:f8:
                    53:dd:13:3e:90:39:1d:82:87:8f:51:3c:12:42:1e:
                    82:31:df:9d:6e:b6:a3:5a:c5:3c:99:bd:0d:1e:48:
                    3f:17:25:e3:e6:2c:85:2c:bc:85:7a:17:de:19:18:
                    26:e5:3e:dd:0e:d2:e8:ee:bb:7b:3f:ec:c7:47:ae:
                    3c:13:3b:27:18:2a:0a:44:fb:d6:13:9d:39:bd:46:
                    e4:64:ca:c8:8f:94:e6:00:64:04:d1:04:2e:50:95:
                    de:06:67:a0:bc:5d:df:20:20:90:cb:24:80:c5:10:
                    2b:ed:b1:37:41:ec:cc:cf:4b:3d:8a:02:b7:26:2f:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:62:38:DA:7B:6B:64:19:21:19:04:8D:B7:22:76:3D:82:D3:4F:A7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.140.0/24
                  103.97.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:97:51:a0:20:ec:c0:ab:4e:ed:c2:40:4f:04:d8:0e:0e:34:
         22:ad:7b:fd:3e:0f:f8:e7:f2:c3:d9:0c:99:b4:d1:62:fb:d4:
         61:38:e4:19:de:06:50:68:ef:58:ba:6e:04:c4:60:c8:f1:b3:
         d8:41:6d:0f:87:5a:4e:ac:fe:89:fc:04:69:05:e0:78:40:ff:
         df:03:c9:a0:e6:dc:b9:2d:e5:41:36:9c:bd:1a:d8:c3:d9:2b:
         e1:8b:8a:5a:ff:db:8f:eb:92:b0:c5:a4:a4:a9:4a:fb:1d:75:
         1d:41:49:d4:23:99:a8:fb:24:b7:ff:b6:d7:0b:ba:d7:8d:c9:
         9c:46:a3:e8:96:3b:80:7c:c6:b7:3b:06:fb:85:df:b5:be:7a:
         5a:11:c9:2d:aa:a3:c3:1f:33:6e:7b:68:16:71:72:22:77:0c:
         60:df:41:f2:fe:80:94:26:1d:86:7b:41:6d:a9:21:6c:16:c0:
         75:35:29:63:1d:4d:13:d5:4e:2b:29:8a:7d:0c:a0:33:d2:b4:
         ff:b6:7e:33:9e:4b:63:24:01:dc:ea:b0:7c:d5:8c:3c:6c:e6:
         be:97:b9:0e:d4:71:0b:96:fb:7b:b3:54:eb:b1:3c:37:a4:69:
         95:5d:de:b0:d1:30:0d:24:de:ff:db:37:fa:17:91:16:1a:77:
         1a:cd:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:07 2026 by rpki-client