Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E6E475CFD9411EABF7FBA51C4F9AE02.roa
File:                     7E6E475CFD9411EABF7FBA51C4F9AE02.roa (raw, json)
Hash identifier:          gMq+WwPOO8BTVtusKgef8Erpl1a8pDfIzTYEp1ZjcLk=
Subject key identifier:   B1:60:C1:91:0D:38:97:6D:FC:93:DF:26:2E:15:63:A2:1F:06:02:E0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D530
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E6E475CFD9411EABF7FBA51C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:36:32 +0000
ROA not before:           Thu 08 May 2025 16:14:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140196
IP address blocks:        103.155.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54576 (0xd530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:14:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bf70-e752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:c1:20:39:8c:92:4e:bd:2d:73:c7:f0:6d:
                    9c:76:25:e0:b4:c2:a4:cc:b8:0d:bb:d8:a9:4c:09:
                    f3:fc:e8:56:24:9b:c6:b5:6f:80:1c:d2:07:fe:c5:
                    01:51:0d:11:9b:bb:58:a7:a9:42:3c:59:5b:47:55:
                    91:11:78:86:c7:99:f0:d2:09:00:31:a4:89:11:e8:
                    7d:ca:7f:d5:23:5a:26:82:f6:f2:27:62:d0:05:e5:
                    26:a5:82:11:25:fd:9d:73:f4:80:9d:32:bd:47:4e:
                    5e:fd:6f:ba:a3:7f:73:ea:a1:14:71:23:7b:67:d6:
                    a6:1e:5a:72:d5:04:ca:da:fc:46:df:a2:be:a7:18:
                    93:0a:a3:6c:00:92:f4:10:e1:3b:e8:75:7c:96:8e:
                    c7:1f:bf:3c:e9:e3:ba:94:17:f1:a0:0f:49:6f:a4:
                    79:2f:d2:ba:97:78:0d:b1:6b:80:bf:12:9a:08:f4:
                    b2:0f:65:84:96:84:10:3f:56:0a:98:81:8c:c4:e7:
                    a0:bb:dd:ae:e5:9f:cc:41:2d:41:b1:52:fc:d7:10:
                    cf:0a:b1:c4:aa:7d:5e:89:9e:ac:f7:0d:c8:94:26:
                    c3:3c:f8:19:ad:50:2a:74:9c:da:96:af:8d:61:6f:
                    74:e0:09:f7:a4:d0:d7:c4:29:de:87:01:dd:67:9a:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:C1:91:0D:38:97:6D:FC:93:DF:26:2E:15:63:A2:1F:06:02:E0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E6E475CFD9411EABF7FBA51C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:c0:71:4c:88:bf:b5:7c:42:0a:d2:bd:ee:71:13:14:6d:34:
         3c:a4:d1:8b:dc:dc:54:48:52:7c:d5:80:fe:17:01:f3:dd:fb:
         64:31:2c:9c:33:c6:96:52:97:73:9e:35:7b:cb:9d:f0:3e:63:
         ae:b0:a2:98:0e:2c:2b:61:80:9b:86:a4:97:78:00:71:9e:06:
         0e:64:f9:06:e4:74:7d:f6:03:63:6e:7f:b5:d9:f0:3f:8a:af:
         8b:87:a3:25:b5:30:15:5b:b2:1f:af:46:35:9b:20:1b:24:5a:
         07:ef:9f:ac:87:a8:0c:cc:2e:82:3d:0c:91:89:fd:24:ff:e5:
         f5:15:9a:11:94:c2:4d:0b:df:3f:89:11:fb:9a:3f:19:c3:9d:
         69:90:86:c7:07:9e:c7:17:be:6f:45:df:c2:8c:96:da:15:9d:
         fc:c0:d3:61:7a:bd:dd:9f:dc:03:51:c4:d7:9e:80:24:71:14:
         dc:2b:c9:24:88:97:52:7e:b2:32:ea:04:2b:90:2b:19:6b:55:
         49:96:ce:eb:e9:fe:6b:af:dc:cd:8e:f0:44:cd:fd:6d:a1:cb:
         13:c4:12:9d:c1:b2:c7:06:ce:28:f9:4a:62:0e:50:51:77:06:
         bc:c8:7e:9e:27:63:97:97:0a:16:36:db:9a:0a:67:2c:35:1d:
         a3:b1:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:56 2026 by rpki-client