Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7764291AEDA211EAA22D521FC4F9AE02.roa
File:                     7764291AEDA211EAA22D521FC4F9AE02.roa (raw, json)
Hash identifier:          csqLwRQJJj1GYVxAg3JgL9up6JnrLwLdFdu833Jvlsk=
Subject key identifier:   E0:3E:9C:6A:96:0E:66:A9:B3:9C:F1:5D:E0:DD:E1:34:F0:C9:09:8B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D186
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7764291AEDA211EAA22D521FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:15:45 +0000
ROA not before:           Thu 08 May 2025 15:56:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132515
IP address blocks:        103.120.234.0/23 maxlen: 24
                          2001:df4:6180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53638 (0xd186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:56:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4ba90-6845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:0d:6e:0f:c5:12:bd:62:c9:9d:cd:58:ff:
                    1d:3c:6a:ab:0f:74:b1:24:94:49:68:e4:fc:0b:7b:
                    4a:4e:74:0a:6b:85:17:73:83:7f:4d:28:55:1f:88:
                    72:f3:b4:56:a8:21:40:72:2b:ef:34:d0:3b:49:69:
                    44:76:ef:a5:8b:e0:25:c7:6b:2b:b6:9d:b1:bc:a7:
                    96:0f:16:c6:38:0e:46:a2:9e:a7:ce:24:0e:37:62:
                    70:1b:ee:60:c0:d3:15:f1:ad:b6:82:d3:f8:8c:54:
                    60:ef:96:37:27:b1:9e:e3:fb:10:65:ef:4b:2b:e9:
                    03:80:45:3f:1e:57:b2:e6:4d:7a:ba:9d:c6:eb:74:
                    54:d2:66:a9:a3:d0:f7:59:1f:c2:26:51:86:bc:27:
                    e0:72:bb:73:80:2b:24:95:6e:f4:fa:f6:7d:58:70:
                    6e:95:5c:4e:29:54:e3:f8:da:66:3f:be:ef:a3:c6:
                    2f:90:50:0f:ec:4d:23:3e:e3:67:12:de:44:9b:fd:
                    90:ae:fe:25:c0:01:e8:64:e0:f8:36:ed:9b:9a:26:
                    d2:2d:b5:f3:ba:89:b8:02:f5:b8:e8:3c:12:d1:22:
                    20:08:c5:7f:21:95:1d:51:ea:71:86:e4:08:18:69:
                    a1:44:1c:0c:9c:33:1d:ee:25:9f:34:7d:56:82:db:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3E:9C:6A:96:0E:66:A9:B3:9C:F1:5D:E0:DD:E1:34:F0:C9:09:8B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7764291AEDA211EAA22D521FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.234.0/23
                IPv6:
                  2001:df4:6180::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:5e:32:83:20:e9:0c:de:22:50:34:80:6b:68:af:16:75:34:
         f2:ec:48:07:d7:ea:04:f6:33:c4:23:70:a9:e9:f4:dd:1c:83:
         c2:c3:64:86:71:ea:33:2f:fa:66:6f:99:3a:21:ef:ec:27:7e:
         59:7c:8b:1e:d4:19:17:db:50:f8:ee:ac:21:43:08:2d:89:00:
         21:5b:7b:d2:eb:3c:9b:50:ab:b4:94:c9:fa:f5:0d:f7:39:14:
         c6:7c:15:f7:4f:5d:e5:9a:55:2a:19:dc:78:89:3a:46:df:1a:
         76:2f:3c:4d:f4:50:44:9b:a5:a4:98:a5:2f:bf:bb:d1:de:03:
         bf:34:4c:09:c1:52:3f:0e:49:6d:12:66:99:8b:1a:3b:ee:94:
         e4:ff:ff:08:98:ef:be:51:21:fd:25:2e:d7:b4:d7:e0:73:11:
         8d:36:a7:f9:d6:12:23:ea:cd:3e:ac:fd:bb:3e:0d:22:e5:c9:
         92:a5:04:95:0d:8e:46:cc:49:eb:84:5c:e6:da:a9:c0:ea:ca:
         f2:6a:0c:8e:4e:c3:39:62:cb:07:b3:10:eb:9e:0c:af:3e:14:
         c0:58:2d:4a:e7:4a:e5:72:df:85:15:46:66:59:2e:0d:5a:b2:
         e2:9d:0b:a1:c1:cc:bf:e0:db:05:1e:cf:b2:0e:80:91:7e:3a:
         ed:c4:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:21 2026 by rpki-client