Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa
File:                     939334320BC911EC97726684C4F9AE02.roa (raw, json)
Hash identifier:          gQvcuzLQEJm83LMAOZ1yEO31XZNjdNRch4diNxd2w/g=
Subject key identifier:   04:AD:F5:AF:74:99:25:F8:57:49:06:C9:C1:03:36:86:18:13:E3:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D5FF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:41:17 +0000
ROA not before:           Thu 08 May 2025 16:18:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142479
IP address blocks:        103.170.162.0/23 maxlen: 24
                          2407:b3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54783 (0xd5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:18:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c08d-f312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:d3:65:44:fb:e2:28:62:27:b3:28:a6:58:
                    d5:16:2f:84:ea:52:f9:95:43:f8:2e:f9:22:92:76:
                    10:6d:33:94:bf:85:22:12:75:d0:8b:29:74:80:5d:
                    4b:45:6a:1a:fe:5f:3c:8b:f0:39:12:0b:ee:e2:3b:
                    82:a3:0a:7b:8a:66:34:1f:18:52:b6:87:a6:a8:65:
                    3b:8b:72:a4:bd:69:61:e8:f7:9e:2d:ca:db:fd:38:
                    29:f4:45:74:af:b7:37:2f:92:c0:dd:f6:55:ad:25:
                    6c:c7:dc:6f:9e:ae:68:b0:9f:61:d6:81:ad:ce:0b:
                    81:e6:26:2d:a2:c4:83:5e:c6:ca:15:ed:61:ff:c2:
                    0a:ea:fb:cc:be:a5:48:ce:19:62:8b:c2:d4:85:bc:
                    90:83:8b:05:9e:25:9f:2b:39:ab:06:0a:e9:02:ae:
                    d9:c7:f6:6d:a7:e2:5c:3a:7c:65:5c:f5:ba:7d:75:
                    37:4e:ce:b8:a3:81:5a:be:e5:20:2b:d4:c6:14:de:
                    1b:68:84:7b:dd:cf:5d:9d:56:1b:92:f0:3f:a1:7b:
                    f2:68:2a:b8:e4:10:fe:39:ab:96:48:aa:c5:4d:c7:
                    9f:fe:32:83:b5:6f:09:29:7b:84:f7:0d:ab:31:f3:
                    b5:2b:1f:5e:2b:4b:3a:b1:ec:1b:65:37:36:c8:0f:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AD:F5:AF:74:99:25:F8:57:49:06:C9:C1:03:36:86:18:13:E3:AB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.162.0/23
                IPv6:
                  2407:b3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:46:f2:1f:04:c9:23:d4:17:31:d2:8a:ec:35:33:41:da:47:
         6c:44:97:de:d3:92:3e:2a:cc:dc:76:ac:c7:6c:e5:9a:25:5d:
         70:6a:ae:6d:8d:7f:6e:5c:52:5a:d6:46:7a:8e:68:3e:29:39:
         7b:a0:dc:78:a2:3d:21:ca:81:56:ca:e4:f5:3d:73:aa:b0:2b:
         9f:d5:9f:a7:d1:66:c1:6c:ca:23:79:ad:7b:e9:f3:03:83:ae:
         f6:dc:f3:de:9a:50:ef:25:ec:09:ca:89:30:ac:3d:2b:df:a6:
         b9:e1:dd:6e:a9:29:58:18:46:56:e3:a5:88:4f:de:9b:3d:b4:
         f1:07:30:c0:25:c5:8f:19:b2:5b:b4:33:32:69:47:35:c7:3a:
         65:ef:70:f8:80:c4:cc:43:48:77:a6:27:31:cb:3b:0b:4b:25:
         06:7a:41:28:9f:0b:d0:8d:3d:d6:55:99:09:74:e3:27:d1:37:
         6e:bd:eb:d9:67:32:0a:84:d7:d0:89:97:99:40:ee:cb:72:da:
         2d:cb:df:13:a0:d2:fb:b0:b8:f1:2f:f2:f2:8a:e8:07:39:28:
         ee:75:3b:31:41:0f:b5:8d:3d:06:7e:0f:ac:9a:31:11:6e:33:
         09:77:a3:51:3d:86:e7:6b:12:0e:9e:b8:30:c0:50:d2:46:83:
         15:4a:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:38 2026 by rpki-client