Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BCA4A640D8111F1B51EF542243D8C67.roa
File:                     9BCA4A640D8111F1B51EF542243D8C67.roa (raw, json)
Hash identifier:          Dr5ymDLt3scu/ppyKzijbr9k8tcXZgaIEcfsbynfmJs=
Subject key identifier:   40:35:52:33:6C:5C:5D:7A:F4:87:1A:3E:C0:31:5C:D4:AD:EC:2C:CF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DB30
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BCA4A640D8111F1B51EF542243D8C67.roa
Signing time:             Sun 01 Mar 2026 23:07:12 +0000
ROA not before:           Thu 19 Feb 2026 11:01:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150606
IP address blocks:        103.61.242.0/23 maxlen: 24
                          2001:df3:b6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56112 (0xdb30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Feb 19 11:01:27 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c6a0-a66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:0b:66:8f:97:67:88:87:68:3e:90:5e:b7:
                    4e:4d:57:bb:2d:4f:37:22:c4:51:32:2f:9f:a0:c4:
                    f7:f8:ac:8e:10:37:3e:79:6d:22:59:20:21:a4:e1:
                    c4:d1:91:4e:8a:7f:9a:76:5e:3e:c2:8e:26:54:e8:
                    d8:55:4a:35:d9:9e:b8:1d:10:83:8a:04:3c:f4:19:
                    1e:3f:d6:4e:7e:2b:48:38:50:a5:ec:0c:18:be:87:
                    a4:58:9c:93:b3:f6:d9:12:ca:b4:ed:5a:b7:19:8a:
                    a4:e1:54:b7:da:3c:68:76:76:81:6b:b6:b8:4a:2d:
                    aa:85:ac:cd:d9:10:22:02:47:39:a5:d7:17:fe:31:
                    30:d6:7e:5f:22:70:c6:73:51:ac:97:42:03:56:27:
                    f9:a4:9f:9b:85:64:f4:44:32:c0:07:38:f7:1c:1a:
                    15:7c:fc:00:13:f5:f8:d0:54:a0:55:f0:2b:4b:8d:
                    0b:31:34:d3:16:44:a2:03:be:c2:c7:6d:28:41:e1:
                    06:76:ae:2b:c7:bd:58:77:4f:49:6d:e1:b6:7b:2d:
                    92:35:6a:6d:c1:49:f2:b0:b8:1c:4c:fd:1e:cf:9f:
                    48:af:b4:b1:8f:53:70:ae:7d:0e:cc:d1:32:6b:99:
                    36:b8:5c:1c:6d:df:9e:ab:ee:2a:83:bd:02:82:dc:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:35:52:33:6C:5C:5D:7A:F4:87:1A:3E:C0:31:5C:D4:AD:EC:2C:CF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BCA4A640D8111F1B51EF542243D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.242.0/23
                IPv6:
                  2001:df3:b6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:cd:bf:f4:27:90:f4:e6:3e:2b:18:9d:8d:d5:ef:13:89:27:
         96:45:f4:46:9d:4a:fe:21:cd:60:f6:4f:08:ed:12:55:91:9f:
         dd:c0:08:41:31:01:40:5b:ae:5f:14:6b:08:29:70:3b:8a:fc:
         51:c2:37:bb:ad:98:d6:82:f6:95:38:43:a5:96:be:47:0c:9a:
         05:37:34:b8:92:38:c6:a6:e2:be:a5:19:75:9c:a4:a6:65:0d:
         a9:12:7e:9d:39:1b:9e:b8:86:e1:5c:31:be:94:c0:13:80:af:
         43:56:a3:fe:1c:fe:df:82:c6:17:cb:4c:d1:c5:06:5e:a7:a6:
         16:34:21:c0:5f:e9:dc:d8:d6:47:32:cd:7f:58:8b:d9:fd:36:
         7c:20:66:a4:b2:bd:d3:1c:91:7c:e2:9d:b2:b7:b0:43:85:fd:
         c7:b6:c6:c0:79:34:94:b2:64:e4:34:15:ff:2a:32:c6:91:ca:
         c9:39:8a:96:f6:3f:6f:ec:ab:8b:67:0b:56:fc:a8:15:c2:9f:
         33:96:aa:c3:00:b2:f6:1c:12:7b:e8:15:35:16:cc:13:36:bb:
         97:36:b1:11:14:ce:49:69:79:ec:69:33:51:af:ba:3f:82:e3:
         43:eb:35:ed:68:0d:21:1c:50:76:30:e7:59:d9:e6:e4:72:7e:
         10:7e:84:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:47:41 2026 by rpki-client