Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa
File:                     5FD48BEE089311EB9277E86CC4F9AE02.roa (raw, json)
Hash identifier:          jpYDJJ1kEGUi/jf5wfMSmP4RlmCx1HyA5Rg9ERQk42c=
Subject key identifier:   24:87:47:AC:6B:2C:40:43:0C:31:17:DD:46:DB:F7:F4:7D:F1:23:70
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D37F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:26:24 +0000
ROA not before:           Thu 08 May 2025 16:06:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136325
IP address blocks:        103.93.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54143 (0xd37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:06:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bd10-3049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:5f:32:cd:25:2b:98:a3:86:71:22:55:16:
                    c2:f3:e2:f4:7f:0f:3a:f5:ae:c6:39:7d:38:e7:cd:
                    3d:68:d4:30:87:84:ec:d1:5a:db:30:5e:6c:9d:ae:
                    8b:c2:6b:4e:4b:c5:10:80:ec:43:4f:e7:12:9f:d0:
                    83:72:66:2e:76:ac:a9:d3:a9:b1:19:13:58:a7:3f:
                    e2:43:b9:ed:20:f6:0f:aa:a4:a8:fd:b2:ce:55:9c:
                    3e:d2:8c:71:f0:e8:61:a9:c6:c9:ca:76:e0:93:54:
                    a8:94:57:d5:b2:90:c8:9d:37:e4:ba:ab:55:df:d4:
                    22:d9:60:68:30:22:67:bd:cd:d1:6f:2b:a8:4c:d9:
                    df:fa:27:1c:1a:68:22:99:d6:45:7d:66:16:59:9d:
                    68:6b:40:27:1a:87:1a:36:9d:e7:ee:d4:8d:d6:92:
                    0b:04:97:ed:f2:15:d5:5d:3d:b6:fe:52:d3:78:27:
                    f7:4e:c1:c0:f2:5e:b6:73:09:08:10:b9:eb:34:f9:
                    73:95:da:16:05:b8:b0:6b:fb:d7:ef:d6:ed:63:04:
                    3a:73:a2:b6:4f:5f:12:37:88:64:ae:7e:02:91:ab:
                    f7:bf:72:b3:32:4b:48:d2:a9:44:9f:6f:9b:20:71:
                    4e:59:80:11:95:48:71:69:48:d6:4d:f5:44:79:26:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:87:47:AC:6B:2C:40:43:0C:31:17:DD:46:DB:F7:F4:7D:F1:23:70
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:65:64:cc:74:7d:0f:25:ef:f8:be:1d:dd:c8:7e:41:41:
         19:58:d7:44:92:28:68:32:04:b8:d8:31:5e:5f:3f:bf:a6:06:
         1b:7d:36:5a:22:1b:4b:7d:cb:54:0a:86:6a:96:49:b1:59:07:
         ca:e8:6c:a5:05:41:7d:57:60:c1:a6:b5:58:8e:5b:14:ba:ca:
         07:4b:19:be:7d:1f:9c:34:33:3a:d1:b3:96:dc:1b:99:b4:8f:
         9b:cb:1f:cf:43:c7:7a:73:b4:1e:6e:b1:69:1c:bf:8a:d3:6e:
         cf:e4:b3:ad:93:2f:05:5f:02:1c:e7:32:65:5b:ce:dd:44:3f:
         f1:14:cf:0a:95:4b:76:dd:b7:6f:03:31:ce:0f:d7:cf:c3:10:
         1b:ce:75:70:55:06:af:46:36:39:7a:a1:d7:c6:82:c2:2c:47:
         23:af:11:b3:e9:dc:6f:b3:29:52:b2:14:31:e6:cc:cc:fe:bd:
         ed:ce:f9:e3:ed:44:6f:3b:da:1a:3b:d7:2a:bf:26:5c:19:20:
         52:44:14:45:fe:04:cd:9b:54:17:5f:3c:2a:10:79:98:31:e1:
         c8:99:c9:f7:11:d0:a5:b9:c2:85:f3:09:01:51:03:22:7e:5a:
         6c:9c:52:06:47:3e:76:97:c0:15:7b:7b:a4:17:b5:e2:c0:52:
         6c:77:62:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:01 2026 by rpki-client