Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C1DD03A8B2111ECA5CB7719C4F9AE02.roa
File:                     9C1DD03A8B2111ECA5CB7719C4F9AE02.roa (raw, json)
Hash identifier:          MNyiXNYnZteeaaikIo4SaK79xTaJxMhct33yd0K34js=
Subject key identifier:   14:D5:3A:9A:57:FA:FF:23:F8:36:67:F0:A6:FC:AD:52:8D:63:B5:E9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D234
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C1DD03A8B2111ECA5CB7719C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:18:36 +0000
ROA not before:           Thu 08 May 2025 15:59:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133984
IP address blocks:        103.57.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53812 (0xd234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:59:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bb3c-09ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:9e:63:1a:61:3f:d5:47:03:41:7e:de:c5:
                    c9:f7:f7:97:22:c1:f9:09:3a:33:3d:00:ae:56:28:
                    d1:8a:95:af:3c:e9:35:5c:4c:d3:24:68:60:36:05:
                    ae:be:8f:72:92:cd:ef:49:91:9a:2a:f9:ec:e3:1c:
                    b1:59:5c:d5:c8:9c:d1:3a:60:c1:b1:12:c9:52:02:
                    39:dd:d5:e4:6a:0b:b1:0e:d2:d3:27:45:3e:67:bb:
                    e9:bd:43:e4:0c:aa:f8:3d:5a:35:b0:c5:95:8f:ed:
                    80:bf:66:0a:a3:32:49:77:67:70:9b:e4:35:64:8f:
                    c7:12:29:c9:74:44:4a:81:68:b2:90:73:76:d6:96:
                    4b:ed:ca:ec:5f:68:3d:ac:82:3d:8e:65:95:2b:f0:
                    11:31:ad:ad:b6:f3:63:32:05:47:30:fc:85:db:b4:
                    c2:6f:31:0e:5e:7f:0e:8b:a5:dd:92:3d:63:63:97:
                    37:39:54:51:8a:6d:d5:25:8b:99:60:88:57:a4:45:
                    4c:bd:b0:83:3a:32:f6:5f:7a:a1:74:09:d3:a9:c6:
                    24:a8:8f:e3:e6:a8:6f:fb:51:b8:98:fd:22:61:9a:
                    5a:35:32:a6:e0:a8:05:75:9f:af:af:ef:1c:b7:77:
                    d5:96:92:d9:eb:49:f6:66:f1:b7:59:b8:4b:1c:44:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D5:3A:9A:57:FA:FF:23:F8:36:67:F0:A6:FC:AD:52:8D:63:B5:E9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C1DD03A8B2111ECA5CB7719C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:02:a8:65:73:b3:3b:e9:49:cb:6e:08:9f:59:74:4f:d1:be:
         25:e8:7d:27:52:59:73:4e:9b:db:99:d7:c3:cc:81:ee:fd:02:
         22:39:e0:7c:ee:b6:f7:b8:71:b2:73:f4:31:9e:51:bd:76:03:
         35:b9:40:ca:6f:2a:c9:31:56:d7:e2:bb:80:0c:de:84:84:de:
         9d:e3:3a:f9:bf:65:33:6c:3b:74:fd:12:5a:19:47:21:f2:41:
         b6:d4:d3:ce:79:81:d8:31:89:a0:3e:9e:fe:16:fb:8f:03:75:
         07:3c:5d:67:23:02:3b:a7:72:61:5b:92:65:76:3e:40:b9:75:
         73:81:e6:68:ea:c3:2f:5d:8b:6c:b1:b3:a1:e4:ca:8f:a9:7f:
         e7:62:16:44:44:8b:ea:81:82:76:17:1d:a4:3e:c5:95:0e:a7:
         7e:c7:89:48:23:f9:22:fe:6b:72:54:19:51:a3:1f:c3:17:a8:
         e2:dc:8a:ff:97:7f:c9:81:13:97:ae:a0:d3:43:2c:f1:81:0a:
         52:0e:19:7f:ee:ee:35:d5:51:f9:55:46:7c:e8:d2:de:62:af:
         07:76:6f:ca:af:64:a0:7e:78:27:74:ed:b0:4d:78:3d:b9:21:
         ee:5a:ea:d8:4f:a6:3e:c6:d0:41:ea:6f:e5:b2:0c:6f:92:f0:
         15:0a:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:10 2026 by rpki-client