Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/747C5AF86B9A11EBA6B7E387C4F9AE02.roa
File:                     747C5AF86B9A11EBA6B7E387C4F9AE02.roa (raw, json)
Hash identifier:          R6jImRCHpxRzGAuLog7gBNXPUdYIt3UblggIiXfDA44=
Subject key identifier:   A0:A3:3A:A1:AD:88:5C:4F:14:EF:C8:F6:25:69:6E:8F:16:E0:C1:61
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D594
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/747C5AF86B9A11EBA6B7E387C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:38:49 +0000
ROA not before:           Thu 08 May 2025 16:16:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141540
IP address blocks:        103.162.46.0/24 maxlen: 24
                          103.162.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54676 (0xd594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:16:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bff9-0997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:54:d0:02:d2:2a:df:42:78:87:a8:8a:90:
                    88:84:f1:86:37:e8:d7:a8:21:02:b7:57:48:80:64:
                    b7:f0:3f:d6:35:91:2a:99:ee:45:53:44:97:25:85:
                    85:41:48:f1:70:7f:f7:c9:23:0a:52:ed:29:47:00:
                    f3:34:8f:9d:54:d8:1a:29:6b:9e:ef:fc:33:0f:d9:
                    bf:c9:bd:a5:eb:fb:1c:18:25:c3:ad:c7:7c:eb:9b:
                    0c:5c:c0:e5:29:47:58:88:67:fc:c5:21:c7:7f:75:
                    40:5d:3a:f0:3a:b8:8e:78:23:73:44:fc:71:cb:dd:
                    b4:97:90:b8:f2:60:6b:40:95:c6:19:7f:69:77:67:
                    03:41:00:47:71:f8:1b:46:d2:6d:d1:59:6d:d5:c9:
                    eb:ac:0a:8f:bb:be:33:09:1a:4e:30:e9:1a:f9:16:
                    18:cc:85:97:fa:18:20:8c:64:5e:9c:82:05:bd:55:
                    4d:87:3e:41:ef:0a:67:cd:4a:90:66:22:33:06:af:
                    b5:cc:60:b9:8a:4c:e0:4e:10:ad:af:45:07:5d:39:
                    99:87:f9:96:ed:c2:fe:8c:13:48:19:91:e1:c1:c4:
                    f1:e9:16:7d:d7:60:13:43:81:7d:4f:17:53:59:27:
                    fa:45:ac:39:fb:b7:a7:dd:79:39:c0:db:ea:3c:ed:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A3:3A:A1:AD:88:5C:4F:14:EF:C8:F6:25:69:6E:8F:16:E0:C1:61
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/747C5AF86B9A11EBA6B7E387C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:fc:76:a8:51:48:97:1d:c6:25:47:b4:76:0b:9d:e7:19:27:
         3b:45:b3:3c:cc:78:a9:6b:8c:d0:42:4e:e3:7c:0c:b7:27:cd:
         02:80:e5:9b:a1:27:d9:1e:ab:bb:02:52:84:d4:96:a1:54:50:
         3e:43:25:26:e9:00:51:54:e4:ab:37:45:09:aa:ef:cd:67:08:
         86:c7:9b:b2:7e:a4:7a:06:3e:c0:e0:11:b1:65:d4:f3:9a:cd:
         b8:05:c2:8e:b7:7d:87:83:29:e2:e1:c8:2f:f5:17:9a:0a:f9:
         87:a8:18:a6:8c:36:69:fa:00:bc:a3:c9:03:5c:1d:9e:0a:30:
         dc:1c:db:72:d2:79:7c:f1:00:f7:b7:04:57:ca:a8:12:7d:28:
         9b:ee:56:6f:f0:fd:de:3f:b7:d8:b7:33:6b:55:6f:be:58:78:
         b3:a4:6b:28:79:84:ab:19:01:e0:34:79:4a:6e:1e:9b:77:33:
         a5:4a:b9:6a:cb:58:df:24:b1:6e:25:1b:b4:1b:31:f3:4f:cc:
         c0:d9:f8:c1:a5:7a:b7:7b:98:04:54:27:64:03:c4:ee:de:cf:
         35:26:b9:07:4d:5c:f1:a7:62:ec:f9:3a:4a:34:65:fb:ce:38:
         66:6e:08:48:f4:df:7d:9e:a2:d0:5c:6a:2f:7d:90:55:a4:2f:
         18:0f:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:40 2026 by rpki-client