Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9461C8709F6B11EC9260D316C4F9AE02.roa
File:                     9461C8709F6B11EC9260D316C4F9AE02.roa (raw, json)
Hash identifier:          F9tyjksDcaeBzLzY2zifhILbrhcLEVGAzOK+9PjoCkk=
Subject key identifier:   05:49:06:15:7E:0E:0E:55:32:59:7E:73:C2:6D:53:02:B2:5F:7F:01
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D64F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9461C8709F6B11EC9260D316C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:09 +0000
ROA not before:           Thu 08 May 2025 16:20:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     146931
IP address blocks:        103.140.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54863 (0xd64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:20:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c0fd-c851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:b9:4a:b7:1c:70:bc:29:b3:e1:5e:a9:35:
                    d3:18:e6:66:5a:9b:80:20:57:77:65:8d:06:c2:be:
                    97:3a:d6:89:fb:93:a9:7c:aa:a7:44:ec:35:4a:50:
                    f6:c3:2d:03:46:13:20:6a:a5:df:63:3c:ee:e2:ab:
                    ee:81:11:2c:83:d0:22:4e:52:86:42:ad:20:a6:59:
                    a7:e9:e6:2f:aa:f0:03:ff:ed:85:68:6e:3d:0b:56:
                    10:60:b9:ff:c5:96:fa:dc:bf:47:a8:97:59:9c:30:
                    e3:e6:87:69:6f:fc:bc:c6:7f:22:c5:32:54:c3:12:
                    3b:66:72:3a:68:dd:2c:cf:2e:dd:53:95:f0:05:b7:
                    37:19:9d:3b:19:8d:c3:bf:02:81:d3:5e:38:f5:8d:
                    43:56:65:64:09:87:16:1c:e7:61:31:c1:47:60:66:
                    68:5f:59:3b:f6:a8:82:78:c6:92:f9:b8:e5:8f:eb:
                    cf:8a:6e:b2:5c:8e:93:6d:31:87:d5:64:8e:59:1e:
                    82:e0:dc:da:c3:fe:cb:83:0e:95:63:55:b6:19:82:
                    66:97:c8:38:b3:d2:55:2e:be:4f:25:9c:7c:67:f6:
                    a4:e5:81:80:d8:ca:67:cd:ea:0d:07:f5:92:a8:4d:
                    7d:b3:47:db:85:60:12:32:d3:05:88:74:8a:07:a3:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:06:15:7E:0E:0E:55:32:59:7E:73:C2:6D:53:02:B2:5F:7F:01
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9461C8709F6B11EC9260D316C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:00:36:7f:9a:a9:69:89:4d:71:bb:50:0a:1f:e9:f9:64:7f:
         f4:52:ed:4a:67:0c:44:cb:f2:89:e4:45:17:4e:7e:90:ca:f9:
         b1:65:48:d9:77:6c:fc:e4:6e:75:ad:10:56:95:fe:8d:06:c9:
         a5:05:b0:a9:72:16:f6:8d:73:f5:bc:01:aa:da:26:2d:fa:49:
         8a:4d:71:ed:31:d2:fd:52:79:0f:0f:6c:65:49:42:30:63:6b:
         d8:93:06:be:4a:f7:6d:ca:5a:c2:82:f8:7a:27:65:33:50:68:
         1e:cc:89:4a:79:a0:dd:b8:46:91:d1:2e:b4:55:5c:bc:32:cb:
         b8:23:06:86:3f:63:cb:3c:b2:10:56:6f:5a:03:78:71:7a:60:
         b8:d1:d1:7d:dc:6b:19:6a:2e:df:e8:5f:5f:1e:6a:61:ec:fc:
         7c:0d:0b:89:98:77:e3:a4:76:6d:d1:7f:38:df:6f:c7:41:7d:
         60:91:66:e4:fd:80:40:44:a3:8e:ef:c0:4c:be:89:60:f4:65:
         90:bb:c6:dc:c9:99:7a:a9:1e:44:63:cb:5b:4e:1b:88:e4:39:
         33:a5:74:44:15:ec:7d:6e:85:5d:a8:00:f9:a3:2b:e9:fc:9b:
         a0:8a:f8:4e:c2:8b:9f:df:04:03:29:63:5c:f7:ae:ff:7e:ec:
         29:25:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:59 2026 by rpki-client