Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A3BF114F41811EA9846203CC4F9AE02.roa
File:                     7A3BF114F41811EA9846203CC4F9AE02.roa (raw, json)
Hash identifier:          X/bij8lJ4buDBi5YsX8YElROFBY2pOZmR1DfRjUiQVg=
Subject key identifier:   4C:EE:D8:F6:A1:EF:B3:92:FB:38:3A:24:8E:54:12:B6:CE:21:42:26
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D2D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A3BF114F41811EA9846203CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:22:19 +0000
ROA not before:           Thu 08 May 2025 16:03:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135190
IP address blocks:        103.113.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53969 (0xd2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:03:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bc1a-8152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:06:00:d2:96:db:f4:c8:23:1f:a5:db:b3:
                    17:76:ed:09:ee:a6:4d:98:91:ac:38:fc:17:ed:87:
                    c0:15:df:ab:ff:94:b2:1d:67:d1:24:f4:ec:33:fa:
                    7c:b3:d8:cc:6e:b8:04:be:35:74:42:39:d3:77:6d:
                    f9:78:d2:53:15:0c:25:33:19:74:bd:fd:60:1d:49:
                    33:6a:80:f9:bd:c5:a3:1e:cf:bc:b9:20:56:d7:55:
                    86:3c:5e:36:44:10:8c:f6:5a:7f:d0:97:43:2d:e5:
                    d9:1c:68:f4:41:3a:9b:cf:70:51:c7:ab:26:30:8f:
                    d6:bc:e3:06:f3:3c:5f:f1:41:df:cf:4e:51:e2:e3:
                    69:6f:b5:0e:56:5e:63:79:d3:76:e1:a8:e1:43:37:
                    4d:93:25:c0:7f:62:73:f7:ab:98:79:0b:11:0d:39:
                    a5:e7:35:7c:26:92:06:ed:9b:6d:47:de:8c:73:f0:
                    1c:6d:d9:f4:f7:aa:8d:61:54:6d:be:47:fe:a8:3a:
                    e7:84:51:5e:d2:6b:6c:b9:6a:38:75:fd:42:b8:de:
                    4d:4c:34:8a:30:98:11:07:bd:94:4e:3c:7e:76:c1:
                    1a:72:9f:a5:c3:81:79:16:ff:a1:04:8d:23:c8:21:
                    60:ea:fb:90:fe:ee:e2:3c:23:ae:bd:0e:7e:25:93:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EE:D8:F6:A1:EF:B3:92:FB:38:3A:24:8E:54:12:B6:CE:21:42:26
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A3BF114F41811EA9846203CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:56:4b:8f:5f:ec:81:ce:5c:49:d2:7f:97:e8:07:f3:8d:23:
         f7:e8:24:d6:c8:f8:6b:2b:d2:12:08:1d:cd:a4:54:62:ca:04:
         f6:83:d7:87:c8:b5:cf:41:24:9e:50:b6:87:c5:9b:b3:c7:b2:
         cc:ad:89:a0:7e:d9:ed:d8:b1:3c:9c:7b:23:fc:87:39:8b:7a:
         29:9d:d7:25:15:ed:6f:9b:9d:4e:e7:1e:17:e3:28:2e:d7:d3:
         96:25:68:d0:17:aa:eb:1d:83:ad:cb:de:cb:1f:ae:27:78:af:
         bb:b5:30:54:f2:ea:67:64:b8:f7:1b:82:8c:8f:21:8a:57:a6:
         1a:b5:9e:e0:10:fd:dd:97:be:bf:a3:a1:2d:f8:a6:66:df:87:
         d5:91:c3:5b:b2:69:c8:43:2b:0e:d5:aa:d1:8c:31:10:38:93:
         93:f6:7e:e0:69:ca:1a:cf:c7:7f:8f:89:e1:3f:89:60:e4:32:
         f5:91:b0:ff:2d:cc:55:fd:c8:6a:e1:f9:76:a0:90:e0:59:90:
         4e:70:93:35:95:93:95:35:29:d1:97:61:fd:f9:b8:bf:21:7a:
         bd:58:d8:ed:26:6f:7d:50:84:c4:e5:6b:51:e1:5d:a0:3d:92:
         9e:e0:50:53:d8:c7:20:c6:fd:d4:69:ae:b0:7e:78:54:89:e8:
         1a:0d:37:82
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANLRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDMwOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJjMWEtODE1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALEdBgDSltv0yCMfpduzF3btCe6mTZiRrDj8F+2HwBXfq/+Ush1n0ST07DP6
fLPYzG64BL41dEI503dt+XjSUxUMJTMZdL39YB1JM2qA+b3Fox7PvLkgVtdVhjxe
NkQQjPZaf9CXQy3l2Rxo9EE6m89wUcerJjCP1rzjBvM8X/FB389OUeLjaW+1DlZe
Y3nTduGo4UM3TZMlwH9ic/ermHkLEQ05pec1fCaSBu2bbUfejHPwHG3Z9PeqjWFU
bb5H/qg654RRXtJrbLlqOHX9QrjeTUw0ijCYEQe9lE48fnbBGnKfpcOBeRb/oQSN
I8ghYOr7kP7u4jwjrr0OfiWTy4cCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRM7tj2
oe+zkvs4OiSOVBK2ziFCJjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdBM0JGMTE0
RjQxODExRUE5ODQ2MjAzQ0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdxbDANBgkqhkiG9w0BAQsFAAOCAQEAJlZLj1/sgc5cSdJ/l+gH
840j9+gk1sj4ayvSEggdzaRUYsoE9oPXh8i1z0EknlC2h8Wbs8eyzK2JoH7Z7dix
PJx7I/yHOYt6KZ3XJRXtb5udTuceF+MoLtfTliVo0Beq6x2Drcveyx+uJ3ivu7Uw
VPLqZ2S49xuCjI8hilemGrWe4BD93Ze+v6OhLfimZt+H1ZHDW7JpyEMrDtWq0Ywx
EDiTk/Z+4GnKGs/Hf4+J4T+JYOQy9ZGw/y3MVf3IauH5dqCQ4FmQTnCTNZWTlTUp
0Zdh/fm4vyF6vVjY7SZvfVCExOVrUeFdoD2SnuBQU9jHIMb91GmusH54VInoGg03
gg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:25 2026 by rpki-client