Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa
File:                     89ACB13E759511EB8124E879C4F9AE02.roa (raw, json)
Hash identifier:          3+RrzMbs+g0Uvi1Hz6e6KeZGKm0L5Fccm5dmmWYqoB0=
Subject key identifier:   EC:89:E3:CB:18:F4:52:BB:81:7E:86:3B:BD:90:CC:D7:8E:9C:75:18
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D55A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:37:30 +0000
ROA not before:           Thu 08 May 2025 16:15:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141302
IP address blocks:        103.160.170.0/24 maxlen: 24
                          103.163.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54618 (0xd55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:15:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bfaa-449d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:94:37:ba:54:91:d7:9d:54:c4:d8:f0:f8:
                    67:f6:c7:83:dc:27:e3:6d:6a:d9:03:9e:2a:58:bf:
                    98:86:67:c0:2a:cd:2e:57:aa:af:c8:49:28:8e:c4:
                    99:84:2c:97:d5:ba:ad:6a:63:00:28:f9:c1:ed:ab:
                    2f:8b:f2:14:0e:7a:7d:4f:32:96:ce:e7:87:25:79:
                    ce:18:b4:6b:55:ca:98:47:e5:c3:8e:7a:7f:8a:c0:
                    93:a0:4d:c9:e4:af:d0:78:5c:50:a8:3d:2e:dd:c6:
                    6d:4a:f3:72:82:e9:78:64:57:99:ce:96:ba:d2:e1:
                    31:a5:47:d5:86:9a:a5:c9:f2:01:2b:dd:02:4e:bc:
                    c8:c3:82:8a:09:03:58:92:6b:c8:81:10:fd:c8:38:
                    f0:3e:a6:d4:2d:df:a7:d4:c6:39:de:04:9d:f2:7a:
                    6e:1a:2d:83:81:bc:c9:6d:cd:ab:5f:66:27:68:7c:
                    bb:3a:cb:b3:89:08:2a:3f:63:a6:17:ae:6d:8c:55:
                    24:75:af:37:e0:ea:65:b7:75:eb:71:92:32:fd:d9:
                    17:db:98:ae:cc:83:65:6a:98:67:ef:0a:98:5e:77:
                    c9:f5:d9:4c:c7:a8:c1:32:51:a4:d4:fc:da:fa:74:
                    21:cb:19:97:38:2a:6a:6f:62:88:a7:bd:70:75:92:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:89:E3:CB:18:F4:52:BB:81:7E:86:3B:BD:90:CC:D7:8E:9C:75:18
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.170.0/24
                  103.163.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:72:aa:a3:ad:52:82:2f:d8:f5:16:3b:41:ea:2b:fc:f0:68:
         29:e6:1a:1f:43:cc:3d:1f:dd:0f:ba:b7:b3:75:46:56:bf:38:
         d5:41:1f:0f:60:a0:b3:03:04:d8:58:2a:82:44:f0:ba:14:20:
         de:2f:39:62:57:ff:36:03:2f:63:55:15:05:08:2b:0f:14:66:
         1c:15:0f:01:b1:22:1a:1d:4a:3f:20:7d:06:81:2b:32:58:be:
         bf:b7:c7:59:13:93:6e:a3:86:1d:04:76:26:a6:44:fe:65:3e:
         13:53:1b:34:90:fe:e0:6e:f7:fa:93:1c:99:c0:f1:70:ad:51:
         c1:c1:64:e0:d7:af:17:0c:d5:3e:c4:3a:a7:53:95:ba:00:92:
         10:50:af:d1:ec:c4:90:a8:95:9e:01:3f:3e:e5:c0:99:e1:23:
         58:09:0d:f6:ab:07:2e:1c:40:36:81:f3:17:83:94:2d:05:fd:
         39:0b:76:c5:ff:85:65:6c:93:f0:e6:97:82:6e:72:59:ca:9c:
         c9:52:92:22:09:71:bd:cc:d8:22:cb:53:47:d8:a6:e8:fb:83:
         81:16:31:87:6d:3d:25:14:45:88:c0:b1:6e:2e:73:7c:8c:e1:
         ff:00:5e:9f:79:93:10:0b:1f:da:7c:ce:a8:e7:09:55:f3:dc:
         fa:63:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:22 2026 by rpki-client