Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa
File:                     74F91AE464DA11ED8D290065C4F9AE02.roa (raw, json)
Hash identifier:          m4YaRohdU3Hy3+MKLXrPyLl6p6u+gkku5hLp621EJqY=
Subject key identifier:   E4:00:D5:E2:1C:86:73:AD:0D:B1:C2:AD:3D:2A:7C:44:40:B6:3F:67
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D255
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:19:22 +0000
ROA not before:           Thu 08 May 2025 16:00:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134251
IP address blocks:        103.194.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53845 (0xd255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:00:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bb6a-dabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:3d:13:52:59:ea:ae:07:3a:3a:c5:97:bf:
                    e8:49:2c:2f:70:be:c9:07:57:9e:f0:91:2f:39:73:
                    ca:cf:9d:48:db:32:2c:25:8c:6b:9d:86:c4:01:31:
                    c0:60:57:a3:d6:5d:9d:9e:b5:99:3a:a1:55:24:2b:
                    8c:71:d3:33:60:5f:18:db:73:3f:eb:c3:71:c7:ec:
                    fc:fb:52:af:25:83:ab:9e:c7:2f:41:91:26:82:f6:
                    82:94:de:83:25:41:fe:f8:cc:a2:b7:c7:11:ca:d5:
                    cd:fc:fb:ae:3e:31:fc:86:27:a4:fb:50:92:fa:c8:
                    b8:10:3a:64:86:5b:af:b0:63:7a:f2:77:e4:12:a9:
                    44:14:84:6c:a1:71:7b:18:c6:76:1c:01:82:2b:6c:
                    03:ed:54:43:ac:a0:0e:36:39:fb:9b:d4:05:61:a7:
                    e8:45:46:7b:4d:12:9a:5a:f5:79:3b:7d:55:4b:04:
                    98:0e:e4:d7:63:f7:5f:64:be:8c:29:85:aa:cc:40:
                    f5:9f:ee:12:a5:42:65:f7:a8:74:46:b3:b0:10:0e:
                    6b:11:da:bc:1b:47:c7:af:61:ff:77:69:6d:b7:02:
                    ef:96:bd:b7:55:c0:61:6d:24:ee:a7:05:45:90:a4:
                    51:a5:2e:a8:07:4d:73:67:39:97:b9:39:8b:ef:73:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:D5:E2:1C:86:73:AD:0D:B1:C2:AD:3D:2A:7C:44:40:B6:3F:67
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:db:65:bd:d0:5c:60:4e:41:4a:8d:9f:1c:9f:68:fd:9d:36:
         3c:7d:11:b9:46:99:34:93:fe:16:a1:0b:1a:30:70:46:4c:8d:
         4b:f6:31:e6:99:95:b5:71:16:5c:ed:ef:30:16:98:59:82:89:
         0b:9e:8d:b3:6c:5f:74:8a:0e:aa:87:4c:23:f2:b2:ff:d1:a9:
         f6:6e:24:a0:9a:b3:8a:5e:2c:d0:44:62:a5:05:20:11:12:5a:
         ef:f3:58:4b:66:51:4c:90:4d:b3:d2:75:19:19:51:66:05:04:
         37:a0:5e:68:91:26:37:33:e3:fc:8c:9a:b6:f4:95:04:9a:cb:
         70:16:48:73:09:63:7d:a5:33:93:c2:e1:b5:93:2e:2b:c2:94:
         ef:03:3a:fd:39:b6:78:20:76:5d:ec:bd:1b:99:ce:1e:22:7a:
         35:74:63:79:75:e2:1e:04:44:b5:78:9e:3d:44:4f:62:08:f3:
         bd:6e:41:cb:8e:a9:cc:a2:42:15:b0:c3:bb:bb:a3:cd:92:09:
         82:56:a2:97:e6:96:53:4c:5e:fb:b1:9c:53:aa:77:9e:94:73:
         d5:00:9f:3c:21:34:4c:03:91:0d:74:4c:a6:87:91:34:e9:1e:
         b7:3d:fd:7a:6e:63:f6:d9:15:4f:5a:28:e7:f1:d6:95:99:71:
         ba:fc:c1:d6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANJVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDA0NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJiNmEtZGFiYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM4SPRNSWequBzo6xZe/6EksL3C+yQdXnvCRLzlzys+dSNsyLCWMa52GxAEx
wGBXo9ZdnZ61mTqhVSQrjHHTM2BfGNtzP+vDccfs/PtSryWDq57HL0GRJoL2gpTe
gyVB/vjMorfHEcrVzfz7rj4x/IYnpPtQkvrIuBA6ZIZbr7BjevJ35BKpRBSEbKFx
exjGdhwBgitsA+1UQ6ygDjY5+5vUBWGn6EVGe00Smlr1eTt9VUsEmA7k12P3X2S+
jCmFqsxA9Z/uEqVCZfeodEazsBAOaxHavBtHx69h/3dpbbcC75a9t1XAYW0k7qcF
RZCkUaUuqAdNc2c5l7k5i+9ztZkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTkANXi
HIZzrQ2xwq09KnxEQLY/ZzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc0RjkxQUU0
NjREQTExRUQ4RDI5MDA2NUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfCLTANBgkqhkiG9w0BAQsFAAOCAQEAYttlvdBcYE5BSo2fHJ9o
/Z02PH0RuUaZNJP+FqELGjBwRkyNS/Yx5pmVtXEWXO3vMBaYWYKJC56Ns2xfdIoO
qodMI/Ky/9Gp9m4koJqzil4s0ERipQUgERJa7/NYS2ZRTJBNs9J1GRlRZgUEN6Be
aJEmNzPj/IyatvSVBJrLcBZIcwljfaUzk8LhtZMuK8KU7wM6/Tm2eCB2Xey9G5nO
HiJ6NXRjeXXiHgREtXiePURPYgjzvW5By46pzKJCFbDDu7ujzZIJglail+aWU0xe
+7GcU6p3npRz1QCfPCE0TAORDXRMpoeRNOketz39em5j9tkVT1oo5/HWlZlxuvzB
1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:44 2026 by rpki-client