Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F909F1A240B11F0B5394082C4F9AE02.roa
File:                     8F909F1A240B11F0B5394082C4F9AE02.roa (raw, json)
Hash identifier:          5TZnK8vSe58kH87ogxO/INgPyXPdHpVi1D7sUETzD2U=
Subject key identifier:   2F:EA:1C:3C:72:4E:2B:86:15:9D:0C:22:8D:19:0C:90:DA:94:82:44
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6F1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F909F1A240B11F0B5394082C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:10 +0000
ROA not before:           Thu 08 May 2025 16:23:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149566
IP address blocks:        103.187.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55025 (0xd6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:23:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1ee-56b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:9f:45:bd:97:c3:eb:fc:23:75:80:6f:30:
                    ff:f7:f3:3b:11:63:e0:e5:1c:80:13:cd:79:f6:30:
                    6a:9f:ad:00:17:72:4d:ca:62:60:41:48:55:1e:75:
                    1e:69:9f:08:40:ff:fc:68:4c:d6:12:70:25:22:9e:
                    15:c9:28:1c:56:56:c5:9e:86:f4:d1:62:33:c5:b0:
                    0d:1e:be:0a:26:f1:27:44:de:60:23:94:c0:83:b1:
                    e9:1c:d6:19:95:e3:3b:a3:d4:8d:b9:7a:cb:73:1c:
                    74:e5:b5:27:3a:92:80:f8:a5:e4:2a:aa:2e:7f:dc:
                    58:7e:92:31:17:ee:f9:f7:36:98:70:f1:bb:49:87:
                    ee:2b:bd:2b:eb:57:74:56:b9:ae:46:ce:3a:f3:8b:
                    36:b7:c1:38:29:44:a0:78:8b:ef:03:9e:87:34:2d:
                    2b:17:df:0c:fc:e2:0e:15:95:a0:78:a6:5e:49:5b:
                    86:c4:80:96:c7:79:26:7c:90:5b:52:8d:2f:95:c0:
                    93:b8:f9:fa:e9:8d:cf:17:3d:8d:e5:33:f5:f9:76:
                    46:53:f5:bd:a0:0e:08:5e:ec:52:86:de:7e:7e:e6:
                    98:6e:71:c6:8d:2a:79:99:e4:0f:0d:46:c8:29:6c:
                    9a:df:f7:07:95:5f:f7:35:48:6d:f5:cd:11:37:93:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:1C:3C:72:4E:2B:86:15:9D:0C:22:8D:19:0C:90:DA:94:82:44
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F909F1A240B11F0B5394082C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:02:45:fa:e9:98:9a:eb:35:36:ae:af:c2:b4:c5:3b:ea:
         2f:d5:27:dc:89:bc:8e:0c:89:64:84:73:63:d6:08:a3:90:40:
         18:9d:10:0f:b4:7a:f2:da:c3:2a:b6:72:80:63:2f:9c:f7:9d:
         70:66:f7:69:a6:c9:86:1b:fe:66:f2:ce:3f:a4:27:af:b3:9c:
         c9:43:10:a1:e7:af:ff:47:67:b3:db:bb:09:3e:6e:dc:e8:58:
         6e:fd:36:c4:a5:06:e3:a7:db:a7:e9:cd:9a:7e:27:f5:41:b5:
         9b:8c:4f:cd:d7:9a:6a:fe:1c:bc:9c:cc:9d:85:85:f8:79:ad:
         17:0f:9a:94:fc:1e:7c:bd:91:16:5a:84:56:1d:71:fa:fc:c9:
         46:98:0d:e4:b7:c6:39:42:35:fe:f4:87:a9:4c:ed:20:84:ee:
         eb:24:98:1c:0b:d2:cf:44:8a:44:02:dd:34:fe:7f:b4:18:d4:
         72:94:41:ee:60:39:92:a8:05:74:c7:62:5c:c0:aa:77:79:cb:
         09:7a:77:9f:5a:16:7a:45:86:43:4a:85:f5:a8:14:df:3d:45:
         e9:94:e8:61:73:d0:2e:12:6a:35:dc:b2:b6:e4:f8:49:99:8c:
         53:2c:6c:81:7a:c1:17:65:80:da:ec:c6:24:6d:36:1e:64:3d:
         86:09:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:42 2026 by rpki-client