Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A592606AEDE111EF8FFBF67AC4F9AE02.roa
File:                     A592606AEDE111EF8FFBF67AC4F9AE02.roa (raw, json)
Hash identifier:          XTZGz0xA/ahcOJG6yglFbJCOG0JShd0BPfA0bz4uBNc=
Subject key identifier:   9D:C9:70:22:56:FE:B6:2E:92:45:A3:1D:29:87:1C:29:4C:7C:E6:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D84E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A592606AEDE111EF8FFBF67AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:54:17 +0000
ROA not before:           Thu 08 May 2025 16:29:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153283
IP address blocks:        103.147.248.0/23 maxlen: 24
                          103.168.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55374 (0xd84e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:29:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c399-2839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:22:a3:61:8d:c9:04:a8:05:66:1f:8e:b9:5d:
                    33:45:72:2e:5c:c2:e5:fd:31:a2:f7:2f:12:42:ea:
                    da:1b:a5:dc:20:78:41:5a:4d:84:03:6c:66:5b:6f:
                    af:34:79:9c:7b:19:fb:33:30:bd:5f:98:bf:18:45:
                    16:2f:7d:93:f6:fe:dc:55:25:96:74:59:9a:54:42:
                    4d:f8:87:9a:93:c3:3a:fe:21:79:33:56:6e:8d:41:
                    d3:2d:26:f0:88:9c:3f:67:0d:c5:17:2e:22:c9:50:
                    bd:4f:fd:5b:da:0d:47:26:65:85:d3:e8:b2:1a:95:
                    32:bf:a1:df:f6:d6:d4:4b:6e:7d:cb:6f:82:19:0d:
                    ce:43:20:14:d5:6c:08:0d:2a:8b:6f:ae:53:26:89:
                    5a:8a:1e:6a:5a:de:c4:97:fa:cf:9b:f1:f5:cb:8c:
                    09:96:90:37:c4:cb:e5:2c:aa:64:8b:ea:6a:bb:ef:
                    05:91:40:9f:3f:48:8a:9e:bb:0b:3e:e9:fd:00:7c:
                    9b:e0:c9:a8:d3:cd:9c:ac:77:6a:dd:b9:2e:8d:93:
                    6e:d9:3a:69:46:13:61:1d:42:4b:b6:d5:7e:5a:37:
                    f5:dd:16:b7:7d:5d:a5:9f:55:c0:f1:3b:5f:a4:07:
                    7c:74:6f:86:c8:18:c1:77:23:6f:6f:0b:a0:ae:c8:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C9:70:22:56:FE:B6:2E:92:45:A3:1D:29:87:1C:29:4C:7C:E6:CE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A592606AEDE111EF8FFBF67AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.248.0/23
                  103.168.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:da:4d:5a:22:37:d3:25:3f:bd:40:80:1b:20:cf:b5:1f:d1:
         87:f2:12:1c:c6:21:e1:44:95:ee:66:a4:61:20:7f:e1:0c:2e:
         82:59:fd:ad:e0:a0:55:ac:a9:a1:aa:e1:b4:bb:55:8c:5b:db:
         f6:41:f9:67:51:74:e9:46:da:29:b8:9c:3c:0d:54:ba:37:04:
         9e:5f:50:45:d8:ce:91:9a:29:b6:33:84:de:a2:ec:e2:96:0b:
         49:1f:e4:f5:0a:72:13:e3:80:69:0b:72:f8:41:0f:76:f8:a4:
         41:7f:fc:14:1c:2b:2d:14:e9:6a:b4:46:39:c9:46:18:e1:67:
         59:1d:c0:9f:14:db:6a:13:68:fc:4e:eb:dd:ad:8e:fa:2a:04:
         0e:a3:83:7a:40:8c:2a:a8:22:cd:b7:d1:3a:2a:7c:0a:d1:56:
         5f:64:d9:c4:57:4a:76:1d:8a:ea:cf:1e:23:a3:ad:04:89:75:
         22:96:41:65:27:04:bc:81:b9:ab:db:0f:86:50:73:c6:bf:af:
         e1:bc:ba:58:0b:ff:6b:ab:81:cb:ab:3d:ff:2d:1a:f3:28:22:
         da:d5:5e:04:12:52:b7:53:a8:a3:78:a7:2d:f5:9b:fe:9f:7c:
         23:59:d0:d5:67:28:31:73:93:17:19:81:19:e8:88:e1:59:9a:
         ee:9e:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:24 2026 by rpki-client