Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A268ECE2861B11EBA8F61933C4F9AE02.roa
File:                     A268ECE2861B11EBA8F61933C4F9AE02.roa (raw, json)
Hash identifier:          eXdy4IM8fnRBgAhx6+7/coyLymvmxyFctrPGdU08Fks=
Subject key identifier:   30:FE:C9:C3:29:A8:5B:40:B7:12:AC:37:15:A2:21:C1:59:03:DA:16
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D2AA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A268ECE2861B11EBA8F61933C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:21:24 +0000
ROA not before:           Thu 08 May 2025 16:02:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134900
IP address blocks:        103.210.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53930 (0xd2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:02:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bbe3-7155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:0f:61:08:18:2b:31:d6:ec:f6:61:a9:11:
                    f3:c3:e0:e1:d8:79:d7:39:c1:1d:04:00:71:38:47:
                    97:c6:21:08:57:ea:9b:51:68:86:21:c3:46:9a:7a:
                    1a:48:18:76:c3:33:b7:70:2c:40:e3:04:1d:5d:ca:
                    93:ff:c5:0b:18:c5:fe:c8:b6:65:82:c1:b7:ac:56:
                    79:d5:ea:34:ff:17:50:c1:a3:2a:ff:23:52:fb:05:
                    1e:b1:2e:d5:ea:d0:6f:2f:73:68:9e:e1:12:0a:45:
                    f7:52:a0:c2:2e:75:21:b2:f8:aa:8b:97:49:73:10:
                    1e:c4:da:92:49:1b:64:d2:5e:90:a8:2e:7a:8e:27:
                    46:e2:48:a1:14:c4:c9:6b:11:d4:2b:ed:53:8d:62:
                    40:24:2d:88:f3:6c:b7:ee:f0:26:82:27:a1:b0:be:
                    8c:5f:eb:54:e2:fc:89:80:4c:3e:c2:0c:1d:ff:cd:
                    2d:a3:b7:49:61:ae:da:c9:37:6e:44:0c:8d:3c:8e:
                    17:0e:0e:f7:69:a1:68:9e:d2:00:59:f9:57:01:45:
                    de:ba:e4:38:b3:12:df:ba:60:e9:05:b5:56:f7:4c:
                    06:7b:ec:2a:09:33:2b:08:b4:18:36:d4:06:95:a5:
                    5e:f8:73:f0:4f:2d:46:68:32:d7:36:c8:7c:58:98:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FE:C9:C3:29:A8:5B:40:B7:12:AC:37:15:A2:21:C1:59:03:DA:16
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A268ECE2861B11EBA8F61933C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:5c:5a:ce:58:ce:31:53:bc:9b:33:b1:ad:db:b9:30:7f:91:
         fa:a8:70:12:4f:23:18:4d:10:9f:71:d0:42:4d:6d:ce:92:eb:
         5a:73:8e:0d:a4:75:1e:ea:b6:2a:56:09:d5:23:20:99:f5:56:
         79:5f:8e:7d:55:7c:38:4e:87:57:25:70:6b:0c:68:0a:eb:02:
         7f:4c:9f:e1:c9:0f:82:90:46:b7:84:20:8f:43:98:26:da:dc:
         20:9d:fe:d6:e0:af:64:2e:aa:f9:8f:7f:20:3b:54:8d:19:a8:
         e0:a5:a6:64:f5:5d:b5:e2:54:df:12:9d:e5:51:ed:f7:b3:5a:
         7c:2c:71:32:ff:e9:77:06:5b:f6:dc:9d:ba:01:25:ab:76:c1:
         9f:59:4d:e2:e4:6b:ad:93:7f:c4:06:43:79:11:b3:b7:21:8a:
         18:bb:11:2f:db:75:8b:d1:ec:79:8f:80:18:a9:e3:fe:a7:ac:
         bb:3f:04:da:1f:01:18:d5:9c:56:aa:06:61:f5:ce:36:a0:d1:
         1f:97:2d:74:fa:00:c4:46:38:ef:6a:19:5b:11:22:71:8b:ea:
         b1:2f:22:b4:f8:c5:74:0b:f2:2c:ae:16:ed:7b:e7:c5:dc:19:
         55:5f:84:50:0a:df:ba:6a:5a:5e:d9:e0:d4:62:dd:7a:7a:f2:
         58:84:bd:67
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANKqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDIyMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJiZTMtNzE1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANnED2EIGCsx1uz2YakR88Pg4dh51znBHQQAcThHl8YhCFfqm1FohiHDRpp6
GkgYdsMzt3AsQOMEHV3Kk//FCxjF/si2ZYLBt6xWedXqNP8XUMGjKv8jUvsFHrEu
1erQby9zaJ7hEgpF91Kgwi51IbL4qouXSXMQHsTakkkbZNJekKgueo4nRuJIoRTE
yWsR1CvtU41iQCQtiPNst+7wJoInobC+jF/rVOL8iYBMPsIMHf/NLaO3SWGu2sk3
bkQMjTyOFw4O92mhaJ7SAFn5VwFF3rrkOLMS37pg6QW1VvdMBnvsKgkzKwi0GDbU
BpWlXvhz8E8tRmgy1zbIfFiYStUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQw/snD
KahbQLcSrDcVoiHBWQPaFjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0EyNjhFQ0Uy
ODYxQjExRUJBOEY2MTkzM0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWfSIDANBgkqhkiG9w0BAQsFAAOCAQEArlxazljOMVO8mzOxrdu5
MH+R+qhwEk8jGE0Qn3HQQk1tzpLrWnOODaR1Huq2KlYJ1SMgmfVWeV+OfVV8OE6H
VyVwawxoCusCf0yf4ckPgpBGt4Qgj0OYJtrcIJ3+1uCvZC6q+Y9/IDtUjRmo4KWm
ZPVdteJU3xKd5VHt97NafCxxMv/pdwZb9tydugElq3bBn1lN4uRrrZN/xAZDeRGz
tyGKGLsRL9t1i9HseY+AGKnj/qesuz8E2h8BGNWcVqoGYfXONqDRH5ctdPoAxEY4
72oZWxEicYvqsS8itPjFdAvyLK4W7XvnxdwZVV+EUArfumpaXtng1GLdenryWIS9
Zw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:48 2026 by rpki-client