Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82C0EEA08DAA11EE8586B04FC4F9AE02.roa
File:                     82C0EEA08DAA11EE8586B04FC4F9AE02.roa (raw, json)
Hash identifier:          eysiQFC7oSU5DrtAmhNbHHNGDDZ0KYEDM8Gp0uwNA3k=
Subject key identifier:   51:9C:0F:00:E8:5F:D6:86:47:0C:1B:DC:6B:45:E1:D3:F8:3B:D2:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D548
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82C0EEA08DAA11EE8586B04FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:37:05 +0000
ROA not before:           Thu 08 May 2025 16:15:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141269
IP address blocks:        103.159.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54600 (0xd548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:15:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bf91-acee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:be:67:3d:e2:48:23:fd:9f:88:2b:02:30:
                    ed:68:d6:49:b0:af:a4:d8:c5:7c:32:e1:8b:36:0d:
                    51:f4:9a:9b:55:64:b8:8c:f1:81:be:95:66:f7:94:
                    76:a8:2e:6a:f7:39:d6:17:3c:c5:4d:50:e6:71:05:
                    7a:e9:44:08:81:18:3d:a9:72:f3:48:7e:1f:d4:6e:
                    de:e4:5c:3a:0b:7f:e5:0d:31:3c:9d:ff:08:b7:16:
                    93:ff:7f:62:df:29:35:6e:cc:6a:f0:f4:5c:bc:5e:
                    c4:3b:90:7f:bb:af:db:22:53:af:7f:ec:70:c2:17:
                    30:5e:64:34:da:e3:51:76:69:52:4c:fe:54:0b:e0:
                    01:ba:00:a1:a5:8b:d7:59:da:81:a9:16:92:49:66:
                    be:dd:dc:73:e3:f3:d5:99:11:67:95:fb:da:71:fe:
                    8a:c9:a1:89:71:92:52:2e:9e:57:fd:70:95:5c:ad:
                    28:4e:4a:a2:81:c8:e2:4f:e8:dd:4f:66:80:b7:2b:
                    6f:bd:54:23:43:0a:df:c9:c6:fe:a6:03:f8:47:ad:
                    18:6b:65:47:c7:5a:f5:49:45:09:2b:d2:9a:29:82:
                    76:77:40:e3:24:3c:86:2a:68:87:6a:2d:29:b5:76:
                    29:c5:d9:82:68:2c:10:e5:6a:d5:e2:89:43:35:00:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:0F:00:E8:5F:D6:86:47:0C:1B:DC:6B:45:E1:D3:F8:3B:D2:CE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82C0EEA08DAA11EE8586B04FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:57:37:59:08:4a:c2:34:55:a1:95:ca:56:84:53:a5:7a:
         ad:34:27:7e:29:ba:05:2a:16:6b:a0:61:49:bd:f0:f9:e2:2f:
         3f:0c:ed:3e:1c:49:8f:f4:a7:36:13:0e:99:d2:44:db:4a:bf:
         9f:42:e5:12:01:88:66:52:d3:52:8c:c4:35:fa:a7:30:46:7c:
         ce:d9:30:ba:01:3a:99:c2:50:49:33:2d:f6:5f:c4:ec:f7:2d:
         7c:71:e6:43:c5:b5:f0:63:19:99:de:ec:a9:db:d3:f8:cc:d0:
         74:74:82:32:cb:c7:86:32:26:fa:57:aa:9b:b2:1e:e6:56:58:
         d2:ec:03:7c:20:1d:2e:a7:ca:71:f0:a8:2c:54:9b:00:05:9f:
         55:26:f0:fd:b8:da:c7:9a:d2:92:67:87:31:f9:43:f4:44:f3:
         70:a0:ee:01:f9:53:40:3c:0b:04:99:27:c1:f4:83:a6:53:9c:
         02:c3:b1:09:df:04:a2:33:10:27:5d:3c:b8:37:18:de:82:c0:
         eb:b6:90:ed:bd:c5:75:0f:f4:77:46:b1:fe:91:c2:61:f9:5f:
         5a:3a:27:62:02:32:0c:f0:b9:74:f1:f1:5d:e2:5b:cf:d6:f0:
         a0:2d:87:f2:81:14:c3:a9:a1:1b:b0:df:25:d1:3b:08:4a:00:
         f1:b4:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:47 2026 by rpki-client