Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93FF6B9A015511EBB225B271C4F9AE02.roa
File:                     93FF6B9A015511EBB225B271C4F9AE02.roa (raw, json)
Hash identifier:          c64nrf3xI48RlQjiiarZSv1h/vESAf2xI/P6tEluYJU=
Subject key identifier:   30:5E:49:95:2A:50:7E:2C:9C:AB:31:D3:55:31:3D:E3:F8:30:F8:69
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D52C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93FF6B9A015511EBB225B271C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:36:26 +0000
ROA not before:           Thu 08 May 2025 16:14:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140189
IP address blocks:        103.156.144.0/23 maxlen: 24
                          2001:df1:d340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54572 (0xd52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:14:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bf6a-042f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:00:14:7f:10:df:bd:58:2c:20:f6:d6:9b:
                    39:ce:fb:ce:6d:5f:9c:ca:15:4d:ea:4d:d1:0e:60:
                    e6:7a:ce:2d:65:93:bb:f2:06:65:90:ad:2e:54:db:
                    bd:69:90:7a:9b:6e:9d:ed:14:1e:a4:7c:bc:d1:cb:
                    e3:cd:45:ec:58:4a:e7:b0:13:28:a7:16:a0:fa:0e:
                    88:5d:fa:c8:2f:a3:e8:0f:91:e5:d5:5d:0a:79:94:
                    9c:32:cd:6b:f6:b0:13:78:2a:f3:6b:53:6d:0a:f0:
                    22:d0:15:4a:40:ad:f5:2b:f8:02:13:f6:fc:e0:2e:
                    ea:b0:95:53:36:05:e3:a1:2f:dc:33:7c:5d:9b:77:
                    62:00:b9:51:4a:f3:d7:cf:48:27:c0:1b:82:03:75:
                    62:b6:ff:48:8d:50:5d:e2:ea:c8:bb:81:a7:22:f6:
                    79:d4:53:26:2d:24:f4:25:ba:54:5e:98:b6:8d:1b:
                    24:6d:08:34:bc:ca:d6:b9:b5:84:dc:60:c4:34:08:
                    dd:72:9a:04:94:88:ae:e2:c5:c8:6b:c7:f0:5d:71:
                    9d:a3:cb:af:43:db:d0:2b:0a:ab:f3:6e:7e:5a:51:
                    43:c0:84:d1:13:47:7b:56:80:b4:39:c9:e0:c8:72:
                    75:04:be:b7:b3:90:63:42:b2:46:5f:68:ae:b0:48:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5E:49:95:2A:50:7E:2C:9C:AB:31:D3:55:31:3D:E3:F8:30:F8:69
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93FF6B9A015511EBB225B271C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.144.0/23
                IPv6:
                  2001:df1:d340::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:a3:a5:fc:d8:5e:f4:ea:ec:fa:eb:0a:69:d4:76:62:45:
         51:5d:a5:ec:42:a6:78:d8:02:c5:3c:87:3a:ff:7a:09:47:4c:
         cc:e7:e6:74:7b:04:8f:8d:f2:a9:3c:47:e6:e3:18:cc:e2:bf:
         ec:31:1b:dd:f3:c3:4e:de:3f:cb:c8:3b:c9:84:54:2c:fc:f4:
         94:7e:bd:4e:20:1e:f8:e1:e2:ff:16:89:b2:b3:ed:23:cb:b1:
         58:d4:91:a0:11:34:68:7a:d8:d7:18:56:e4:85:41:97:38:bf:
         0f:a9:63:16:44:f5:ed:bf:52:43:82:74:a1:aa:66:d1:bd:37:
         c4:7e:48:b6:e5:a1:50:c7:6b:3a:c1:2a:24:be:9c:e3:84:e2:
         f4:db:59:f7:fd:b3:a3:b2:ed:e7:62:67:9d:3b:95:c8:2a:fd:
         ec:3e:a0:cb:ee:41:7c:9f:56:8b:ba:c4:98:58:a5:36:4b:4d:
         78:78:15:21:c4:27:e4:bd:c1:d7:09:ca:5c:07:87:d7:c7:2d:
         9d:28:44:c7:b2:a6:2c:b7:8d:19:5c:5d:be:c8:6c:26:25:f3:
         6d:76:dc:69:32:5a:42:99:f4:2d:6d:8f:61:a4:a6:94:6c:04:
         e5:d8:be:d3:3e:8e:f9:41:39:df:c8:c8:78:34:c1:10:42:f8:
         96:c7:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:27 2026 by rpki-client