Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/672576CEBDCF11EA8755D90DC4F9AE02.roa
File:                     672576CEBDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          6fSEtD0cBvlIws3zSypyTijUtXwASqYqWglTESJFs5U=
Subject key identifier:   80:B4:1F:C6:CD:73:F5:54:30:EE:C0:B8:9C:35:51:5A:A5:4C:AD:B4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D4CE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/672576CEBDCF11EA8755D90DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:34:13 +0000
ROA not before:           Thu 08 May 2025 16:12:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139486
IP address blocks:        103.143.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54478 (0xd4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:12:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bee4-8734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:dd:70:8f:7b:18:e9:05:96:b8:64:d6:20:
                    09:c9:b9:3b:19:0b:df:9e:e9:12:e2:b0:f7:e7:8e:
                    7a:29:7d:83:dc:0f:dc:ae:fc:cb:bb:f0:89:58:82:
                    6b:cd:e5:4a:02:cc:df:1d:37:da:eb:59:85:c1:93:
                    f9:60:b9:5d:31:85:2c:5f:82:8c:0f:5b:0c:48:c0:
                    e5:ac:6f:a0:99:bf:c7:99:49:0a:67:91:f2:20:9a:
                    c4:0a:de:42:b6:96:6e:a2:44:47:45:26:9e:9d:f7:
                    b3:22:3c:b1:7a:5a:0d:98:00:da:8d:31:f5:22:ee:
                    b0:11:9c:6f:a1:44:64:e0:84:74:23:00:43:8c:60:
                    81:1f:16:43:94:37:a7:c9:69:bb:d7:f1:86:f9:6b:
                    ce:f5:0e:3c:68:38:2a:d4:71:2a:70:e1:ed:0f:e2:
                    23:0d:3f:20:8b:9b:65:29:b6:29:fa:a1:c0:d0:19:
                    4f:bb:c3:ac:ac:15:62:10:9e:1b:3f:e3:ec:52:f8:
                    0f:7b:77:30:aa:ff:fb:db:41:43:36:6a:73:19:d4:
                    17:47:ea:4d:dc:86:a1:4b:39:3d:e3:8a:91:33:5a:
                    89:35:0f:d8:d0:1e:f3:4d:84:57:86:02:2b:57:60:
                    44:8c:b8:c5:dd:a3:fc:cb:2b:d0:fb:ad:35:f3:2f:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B4:1F:C6:CD:73:F5:54:30:EE:C0:B8:9C:35:51:5A:A5:4C:AD:B4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/672576CEBDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:e1:53:a3:3c:ab:09:72:df:d6:07:c8:3d:11:84:8e:41:d0:
         f9:31:d1:e4:9b:23:df:10:be:37:42:32:70:b0:f4:e8:6b:5c:
         cb:98:3e:15:b2:32:08:5e:a4:e5:87:ef:39:f0:f6:78:70:2b:
         ca:3a:cc:9b:ff:b8:9c:eb:e4:2c:4d:69:84:ab:89:45:ca:4b:
         6e:6e:3f:00:65:e3:cd:ec:c0:6c:ab:42:13:36:12:01:3c:5f:
         c2:bd:42:c7:a9:ba:1a:d4:6b:60:bc:81:6d:ff:78:9f:e6:2d:
         a2:fc:a4:f0:a1:b0:aa:83:1d:96:61:0a:bb:39:5d:5d:1b:f0:
         45:a2:0e:e1:3b:0a:a7:0f:d0:f1:4f:15:6a:fa:02:82:d6:0f:
         b0:44:d9:e3:d5:b6:3d:fd:42:1c:d3:e0:d6:6e:51:80:83:61:
         5e:10:e1:11:a2:69:d5:f2:f9:25:31:81:63:29:c8:0c:8a:e2:
         40:43:6a:b2:0f:54:36:e7:07:a4:27:d4:bb:9a:23:97:71:6d:
         b2:7d:da:ac:38:9f:88:1c:cf:85:22:e6:cf:44:87:c4:04:b1:
         80:27:b3:0c:c3:33:58:08:d2:5e:56:e2:0e:40:50:1a:22:16:
         5b:53:9b:38:6f:e4:14:a8:2f:7d:b0:58:6f:56:0c:f1:41:d3:
         ec:ef:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:22 2026 by rpki-client