Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DBA12AAA10411F08A17F05BC4F9AE02.roa
File:                     7DBA12AAA10411F08A17F05BC4F9AE02.roa (raw, json)
Hash identifier:          O09d5M/TzDqYui2xROurfwx912c5dOdP/6i+wBIyGsM=
Subject key identifier:   F5:8C:59:55:1E:C5:B8:CB:16:F3:4B:D8:B7:3B:56:F0:15:C8:82:58
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DA36
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DBA12AAA10411F08A17F05BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 23:03:01 +0000
ROA not before:           Sat 04 Oct 2025 09:28:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135248
IP address blocks:        103.183.80.0/23 maxlen: 24
                          2400:7fe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55862 (0xda36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct  4 09:28:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c5a4-11c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:26:a6:ab:96:08:03:f6:af:85:5a:c6:0f:
                    46:c9:41:7d:12:e1:e6:82:a3:65:58:0f:d7:0c:7a:
                    d3:7f:02:5d:fb:fb:c6:6c:d2:0a:c5:b7:99:77:57:
                    3d:9b:e8:17:1b:ef:57:bc:78:b8:ab:32:8f:b6:ad:
                    02:2e:00:fd:28:84:e0:bc:33:19:5c:a7:6e:b0:c5:
                    57:fc:4f:da:67:53:77:d2:60:11:f5:fc:2c:a5:b6:
                    dd:cf:61:7d:c4:b5:1c:74:fd:f9:bb:ec:e0:d7:a7:
                    8a:71:a6:a3:ac:0e:3a:ef:5b:4a:57:ff:71:25:db:
                    2f:12:bb:7c:82:43:1c:dd:0e:d9:43:dd:fd:45:43:
                    6b:8d:ea:a2:b4:76:8f:7f:c7:dc:c8:76:e0:e4:e5:
                    0c:c7:16:73:56:aa:31:e4:58:58:67:64:07:b9:10:
                    5d:52:18:2b:ef:b1:24:03:9d:bb:a8:a0:75:7d:5b:
                    a1:06:d5:d9:7a:b7:d7:eb:81:df:88:a9:07:78:25:
                    73:31:d8:df:12:ca:25:de:1a:25:de:26:2c:82:15:
                    f0:fc:e6:08:34:b9:52:ba:2b:1f:f1:27:06:59:f9:
                    7c:25:a3:fe:d1:72:cd:61:04:6b:5c:0d:3a:a9:eb:
                    31:ad:d6:39:3d:14:cd:0b:62:b4:30:c0:1c:86:ee:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8C:59:55:1E:C5:B8:CB:16:F3:4B:D8:B7:3B:56:F0:15:C8:82:58
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DBA12AAA10411F08A17F05BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.80.0/23
                IPv6:
                  2400:7fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:93:fa:e5:50:01:dc:c9:bf:85:50:40:d6:08:66:3a:c6:
         db:cd:99:43:32:f9:65:23:81:93:aa:a0:12:46:d6:4a:aa:f0:
         68:90:73:9e:6b:42:4c:12:92:3b:da:c6:49:69:f9:22:64:37:
         4f:4e:aa:1f:85:63:62:e7:d8:98:4f:3c:95:44:8b:61:b4:88:
         47:6f:a9:36:d8:33:5d:e0:29:3f:cf:0e:b1:ba:3e:8f:38:d3:
         68:fb:1e:a4:43:44:27:bb:17:65:c2:ac:15:ba:a2:02:81:e5:
         9c:3b:7b:43:61:0d:cd:e2:a7:b1:d3:5c:ef:98:0b:bc:96:f9:
         34:68:0d:66:8d:8f:39:7f:2c:48:2c:80:48:5e:6d:d2:26:29:
         5c:da:62:0e:84:63:5a:b1:71:6a:c3:46:e5:cd:3d:00:a3:d8:
         c9:ed:5a:d8:09:16:61:7e:e1:34:60:6f:e8:7a:a9:81:c3:f8:
         e6:85:ac:f0:be:5f:4c:ec:df:b3:e6:77:ce:1d:a3:5b:c4:84:
         fe:8d:a7:34:23:1f:32:70:86:d1:a0:e7:9f:66:eb:38:80:93:
         6d:0a:34:27:a2:0b:85:e5:b5:ff:3a:af:28:e7:65:dc:15:78:
         14:d3:01:96:11:eb:a2:ca:6e:ad:13:a9:cc:08:5e:52:77:08:
         6c:e5:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:07 2026 by rpki-client