Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AE60CC6B87111EB9F052D60C4F9AE02.roa
File:                     7AE60CC6B87111EB9F052D60C4F9AE02.roa (raw, json)
Hash identifier:          HGEux+3xfr88OC3y/Te7JULeurk7D7MaohtvGmKsk3w=
Subject key identifier:   4C:A7:3A:EB:7E:D8:3F:6E:85:04:2C:FA:3C:AC:1D:80:29:41:64:2A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D575
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AE60CC6B87111EB9F052D60C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:38:07 +0000
ROA not before:           Thu 08 May 2025 16:16:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141489
IP address blocks:        103.162.118.0/24 maxlen: 24
                          103.163.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54645 (0xd575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:16:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bfce-d23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:f6:6c:cd:1a:d2:52:9a:b6:b6:f8:ed:1a:
                    18:cf:de:19:ad:f3:86:0c:e7:4b:4c:be:d1:f9:8d:
                    bb:36:23:b4:07:fe:ff:e6:d2:0e:6a:65:9d:ca:da:
                    85:ab:b8:be:ba:b2:47:8b:e6:be:2e:51:37:9e:cd:
                    81:d2:51:b4:98:de:e8:9d:4f:60:ba:6e:3b:69:4f:
                    f4:52:20:8d:c2:b0:de:f5:a1:3a:44:34:0c:bc:d7:
                    cb:e8:9c:80:df:7e:9b:7b:5d:5c:53:96:c0:86:1e:
                    ad:01:43:48:1b:9f:be:48:06:1d:5e:ec:9d:a0:c0:
                    01:b7:68:6f:6f:6f:12:20:d1:7b:ba:6b:74:93:77:
                    6a:a6:4e:58:ed:65:f4:54:08:58:5e:83:3d:68:8a:
                    cc:73:6a:99:47:4d:9a:b9:d4:19:8e:e6:a0:49:5b:
                    94:9f:d2:a3:a1:4f:08:aa:41:3b:56:e0:3f:39:55:
                    01:f9:81:5a:9e:7c:44:ce:d7:08:90:7b:bb:5e:2d:
                    83:f1:eb:9f:c2:82:07:e6:1c:70:a3:41:0a:b2:98:
                    6b:d0:fe:04:ba:31:d1:cc:38:86:9e:30:19:c6:a8:
                    f9:6a:cb:e4:47:99:aa:72:2f:c5:56:e8:92:1b:09:
                    af:d7:02:0d:81:70:58:38:a0:6a:36:26:1f:8b:b2:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A7:3A:EB:7E:D8:3F:6E:85:04:2C:FA:3C:AC:1D:80:29:41:64:2A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AE60CC6B87111EB9F052D60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.118.0/24
                  103.163.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:3a:0e:27:79:db:a5:e6:a5:1c:cc:f0:02:51:b9:bb:db:
         8d:a9:d6:fb:45:c2:b8:f5:70:e4:93:e7:00:53:d9:1f:75:1b:
         5a:48:d3:2e:32:74:5f:8a:87:94:3e:28:4a:d6:a3:1f:31:89:
         5b:17:2c:61:8e:36:d6:e9:0a:d5:aa:5e:35:7f:cd:ef:55:9f:
         bb:b7:5c:9d:1c:54:ed:f8:1b:b2:ee:49:24:8a:83:d1:27:61:
         ee:ee:06:9b:a4:0d:61:5e:ef:66:ee:b2:2d:67:6d:6b:74:f9:
         fb:a6:8b:b8:ce:96:58:16:af:fc:3e:bb:73:27:4f:a4:53:31:
         5a:f5:9f:37:92:dd:a0:b6:14:1f:1e:c4:da:e8:d9:60:42:2c:
         ed:97:b4:df:22:06:3c:94:b2:ef:b2:b8:ca:94:e9:5e:f2:5f:
         1c:ec:cf:51:a5:bd:7e:f5:3c:9a:ea:bf:0f:37:33:98:27:cb:
         50:9d:da:53:5d:b1:b1:6f:40:40:97:bd:14:c9:f0:81:87:c5:
         be:df:0e:ae:dd:04:89:1f:80:6c:04:ee:b1:f3:7e:44:d0:a8:
         6f:b8:7c:41:e2:a1:e9:cd:7c:7d:99:ad:fb:f1:3d:5d:4b:d0:
         00:01:9c:0a:d7:46:b2:65:8f:de:f4:93:94:54:79:b7:5c:92:
         e4:52:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:56 2026 by rpki-client