Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92BE755697CF11ED8A72A71AC4F9AE02.roa
File:                     92BE755697CF11ED8A72A71AC4F9AE02.roa (raw, json)
Hash identifier:          nabaBilxiaNaZO4USJnn+DbEhEeIKGo0atT2yQwJkMI=
Subject key identifier:   C6:4A:39:8D:26:29:FE:0E:4A:62:CE:E6:E4:74:E8:8E:5C:E4:E0:5B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D788
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92BE755697CF11ED8A72A71AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:50:41 +0000
ROA not before:           Thu 08 May 2025 16:25:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150625
IP address blocks:        103.67.98.0/23 maxlen: 24
                          103.126.240.0/24 maxlen: 24
                          103.198.187.0/24 maxlen: 24
                          2001:df1:d140::/48 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55176 (0xd788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:25:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c2c1-65e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:29:32:92:51:04:c1:a6:0c:75:f5:8a:55:
                    fd:96:d8:d5:84:ca:9f:bd:db:64:10:84:6f:51:19:
                    a8:d6:a7:8e:d7:4d:d9:2e:39:1d:e6:66:42:5a:bb:
                    4e:d7:84:94:7f:8f:68:30:2c:97:eb:1b:54:51:60:
                    4b:24:38:20:ae:09:51:00:f1:fa:36:08:ad:1b:68:
                    96:47:a0:e3:e9:c4:09:9f:de:95:be:93:dd:16:fd:
                    f1:55:1f:7f:bc:0a:3f:4a:f9:42:d8:27:1b:cf:a7:
                    05:43:cc:fa:02:ba:f1:35:0d:5f:c4:39:f9:1e:35:
                    7f:55:f5:2e:4f:32:da:ca:85:44:78:76:94:18:53:
                    63:be:6b:b1:3f:59:bd:22:ae:60:e5:72:57:33:9f:
                    cd:a4:ca:57:be:1d:71:04:c2:70:f8:24:4e:1e:8a:
                    a2:3d:19:4a:93:24:a2:b8:8f:e7:66:6e:91:b4:c3:
                    54:7d:be:be:e8:fa:7b:39:c0:58:e7:2c:0a:90:72:
                    70:5a:fd:98:06:cc:0f:92:b5:7e:09:bb:8e:33:42:
                    a6:1e:d3:ef:31:4f:8a:ce:28:f3:09:b3:ce:72:6d:
                    08:dc:3a:2e:2d:e8:66:48:ad:ae:54:39:b6:16:1e:
                    d3:a3:ff:db:a6:d2:f2:db:76:a6:c8:db:3d:2f:77:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4A:39:8D:26:29:FE:0E:4A:62:CE:E6:E4:74:E8:8E:5C:E4:E0:5B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92BE755697CF11ED8A72A71AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.98.0/23
                  103.126.240.0/24
                  103.198.187.0/24
                IPv6:
                  2001:df1:d140::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:f6:3e:7f:64:d5:a7:b7:b9:65:2b:d3:98:6b:2e:40:5b:
         9b:f4:78:f6:e9:72:b2:5a:8e:40:27:71:5c:0a:e2:f4:64:f8:
         a8:8d:17:c4:bd:1e:cf:18:df:14:65:44:56:a7:30:b9:33:3c:
         95:7e:94:8c:d7:60:3b:a5:67:2c:a5:01:4c:7b:8d:4e:f7:b5:
         20:16:64:5a:de:84:6a:e0:a7:7f:7a:c2:f0:a5:b1:9b:bb:4c:
         74:32:a2:2e:5e:82:4e:fd:11:06:24:1c:00:ba:a5:4e:8a:33:
         00:21:ea:f1:15:8a:5d:c4:f5:e2:7a:53:57:1e:31:9f:d6:75:
         89:b9:26:cd:d8:ff:aa:ee:ed:07:1c:58:85:93:94:4f:54:16:
         83:f3:16:d9:80:1e:d8:8f:04:1f:0d:7a:7c:dc:ca:f7:dd:90:
         24:40:57:44:25:e5:ea:d6:b5:31:1e:83:69:8b:e5:cf:9b:10:
         00:5c:77:7e:4a:78:c9:3e:01:62:d0:e1:0e:88:51:fb:24:05:
         0b:63:43:2b:c3:91:2b:c6:20:cd:36:9f:d5:a7:ae:3a:68:a3:
         66:82:19:55:43:7b:fe:eb:4a:f3:20:e9:17:95:de:da:55:d1:
         67:03:0b:f1:dc:8b:f3:41:b8:b4:d1:1d:5f:49:76:a9:16:ba:
         6e:2c:79:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:26 2026 by rpki-client