Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83E51010BEE311F08BC7CB80C4F9AE02.roa
File:                     83E51010BEE311F08BC7CB80C4F9AE02.roa (raw, json)
Hash identifier:          ovPJWiGTVSNOVmTTYGd/SIwFFEZcl6xd9xnRaXfCPWY=
Subject key identifier:   92:9A:A1:06:D3:04:BD:DA:E1:54:DB:8A:D2:76:E6:91:8A:84:63:C7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DA62
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83E51010BEE311F08BC7CB80C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 23:03:47 +0000
ROA not before:           Tue 11 Nov 2025 09:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133656
IP address blocks:        103.191.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55906 (0xda62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov 11 09:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c5d3-0594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:64:73:00:db:cb:58:f6:b1:cd:1b:85:33:
                    2b:08:dd:1d:b3:f7:16:5c:19:fb:46:8f:de:bb:b3:
                    24:55:63:24:36:25:1e:7a:2a:d9:7f:4a:db:3c:62:
                    10:30:d7:44:71:25:3a:f0:66:92:9c:9c:39:2e:e0:
                    89:8e:92:db:18:b5:8f:8b:c3:36:c1:1e:4a:b2:81:
                    84:8f:fb:b8:fe:4a:85:b9:27:f6:27:2b:b5:4d:9b:
                    eb:dd:40:d8:32:ef:6d:5b:33:e4:71:ce:62:d6:24:
                    21:12:cb:c6:5f:c7:18:bf:81:24:62:09:db:24:55:
                    fa:4d:ac:91:e6:76:22:99:b0:ce:39:05:35:eb:e9:
                    66:40:2c:d5:27:e3:74:de:d5:fd:11:bc:ad:a1:f0:
                    ee:9e:99:2f:27:6f:5b:1c:22:ff:1b:b4:39:2a:35:
                    a8:6b:47:6a:da:e0:91:c0:a9:c0:a2:28:5d:d4:ae:
                    85:4f:ff:62:c6:72:68:3d:45:76:db:52:8b:b6:d4:
                    8e:ec:70:d9:be:a0:0f:ab:80:30:02:5f:cf:e0:5b:
                    7f:44:94:25:32:fe:ef:2b:6a:b0:6a:4c:fd:52:c9:
                    61:07:15:f0:30:fc:ad:b3:29:e1:d4:37:76:45:8b:
                    9a:19:ef:90:e2:f3:ed:e8:68:1f:eb:71:b0:3f:9b:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:A1:06:D3:04:BD:DA:E1:54:DB:8A:D2:76:E6:91:8A:84:63:C7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83E51010BEE311F08BC7CB80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:f6:d1:f4:f1:d9:cb:c9:18:6f:60:cf:62:09:66:48:41:
         7e:f2:ae:87:6b:ab:2b:29:dd:68:7a:f3:83:c0:16:16:c9:f8:
         e2:c7:6d:82:94:b1:ae:29:73:c8:7d:0b:6a:de:77:d9:f9:3d:
         a3:b0:85:f4:43:12:63:83:74:8d:d5:3b:a3:92:57:64:d4:eb:
         d3:28:7d:ee:87:ca:f7:d1:d5:1d:46:93:12:a7:c9:bf:51:2b:
         91:8e:66:7a:86:0f:a8:84:38:8e:00:fd:a0:6c:89:60:a7:8a:
         ad:d1:3e:6a:bc:f0:b3:be:cf:c4:8c:40:1d:43:b3:4d:ac:8d:
         75:0f:e5:3c:72:0e:5d:01:88:04:8a:d6:8c:84:b1:21:37:d2:
         f3:3d:c8:5b:ee:06:f3:f1:82:e0:0b:a9:e8:b9:94:35:c5:33:
         7a:e8:37:26:2d:8a:51:af:0f:1d:11:d2:64:7e:7c:1e:ba:89:
         ef:52:d4:4a:13:39:06:69:cc:48:a7:47:48:d3:14:84:8a:61:
         b1:f4:dd:87:5b:52:16:48:63:c5:18:55:f4:7e:cb:be:92:22:
         19:55:1d:2b:cf:f1:9e:87:9a:be:5a:6d:4b:a5:c6:5c:e5:fc:
         51:a9:14:d6:09:5f:b2:7c:8d:a9:83:7a:59:e3:9e:70:2f:c3:
         6f:c7:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:26 2026 by rpki-client