Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BD4F36AE52B11EF83275B4AC4F9AE02.roa
File:                     6BD4F36AE52B11EF83275B4AC4F9AE02.roa (raw, json)
Hash identifier:          jbOZFq6dBXL9CkJlMBVLEQghLZq7DVQcYdm2C9BVBJU=
Subject key identifier:   5A:E3:82:73:82:89:6B:B2:2A:01:BA:8E:3F:54:14:F4:C7:CB:BF:7A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6F6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BD4F36AE52B11EF83275B4AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:17 +0000
ROA not before:           Thu 08 May 2025 16:23:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149575
IP address blocks:        103.187.78.0/24 maxlen: 24
                          103.187.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55030 (0xd6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:23:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1f5-8892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:ab:c4:a5:5e:0a:88:f8:08:33:1b:df:37:
                    19:f6:cf:dc:b3:2b:47:0d:f9:40:0c:86:84:2c:5a:
                    23:fb:97:c7:8f:13:43:af:1f:f7:a9:0e:d5:ba:94:
                    6c:73:a0:b6:a2:53:b4:97:32:b5:a1:12:c4:55:72:
                    31:2d:36:70:16:fe:05:7f:e0:91:06:97:4d:8d:f1:
                    98:0a:2b:52:ba:8c:14:84:5d:1b:99:e2:d2:b0:48:
                    93:02:31:85:10:f0:03:10:f5:8e:7b:d2:d9:7f:d3:
                    6d:b1:85:6e:8c:b9:bf:36:f1:d2:6b:e4:d0:5e:96:
                    bd:93:8a:41:b7:37:6b:11:e8:52:a7:12:69:3a:a0:
                    14:29:44:49:1c:73:e2:01:86:2f:e4:ad:a6:db:df:
                    71:45:13:ae:9f:7e:8f:30:49:be:e0:49:f1:06:dc:
                    74:f4:01:b5:22:ca:f8:f2:4f:e1:a3:f2:22:f9:02:
                    43:d7:cc:a8:46:c3:d9:5d:84:24:0b:87:5a:2a:ff:
                    ba:86:06:20:fb:96:20:63:da:f0:cc:31:43:42:d7:
                    47:de:ed:3b:01:ae:ac:ef:15:a7:f6:84:f9:fa:1d:
                    8b:89:36:f1:a9:7e:d5:44:89:c6:91:7b:a1:f5:bc:
                    37:83:0f:a2:a4:3a:cf:02:5f:7c:f1:65:66:c0:51:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:82:73:82:89:6B:B2:2A:01:BA:8E:3F:54:14:F4:C7:CB:BF:7A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BD4F36AE52B11EF83275B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:da:8e:49:aa:71:4a:f5:d5:95:f1:89:66:00:b5:71:d2:16:
         44:25:ae:23:88:2b:e5:a7:e0:7b:32:aa:53:62:07:bc:26:6b:
         c7:a8:ac:6b:0e:69:46:69:eb:8c:7b:e1:a4:ae:a7:7f:ae:99:
         5d:d1:c8:67:21:90:d2:8f:bb:2b:a2:e9:11:22:be:10:c0:18:
         79:bb:c3:de:a9:1f:34:55:24:4c:22:28:f5:69:a8:75:1a:9e:
         d2:bb:ed:0a:4a:a7:bf:51:a6:0d:d7:6a:bc:3d:cb:d4:fb:ec:
         b9:2a:ad:ee:ac:91:2f:a1:4d:65:fa:e2:dd:c6:86:1d:f1:a6:
         ee:79:93:e2:ae:96:d2:1a:d4:51:f5:13:bb:4a:a4:3a:cc:38:
         f4:33:15:da:e0:c6:6a:37:67:69:d0:20:47:c2:b8:b8:a0:1a:
         f8:96:59:55:87:f8:d3:4c:59:1c:4d:a4:ac:ac:43:b2:28:47:
         d4:d7:ec:71:66:d7:38:ba:47:9d:49:3f:76:73:4e:02:57:66:
         75:fb:60:f6:de:a8:91:59:a8:fe:96:ba:af:dc:7e:f8:e3:28:
         a0:75:53:6b:0d:35:90:13:da:8c:ac:09:45:4d:7b:b6:e8:d5:
         29:95:78:83:2e:be:e8:09:8f:f3:73:e6:c1:4e:8d:0b:ab:c3:
         f8:03:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:35 2026 by rpki-client