Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A93E77EA31B911F1A1C532DDBE833773.roa
File:                     A93E77EA31B911F1A1C532DDBE833773.roa (raw, json)
Hash identifier:          coCmLmeX+QlOyDGqLe7y9KxTBV3y6c4MP3OS8kNyG0o=
Subject key identifier:   7D:E5:B0:92:2D:57:C8:15:0A:63:25:A9:73:8B:DF:8B:29:43:0B:5D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DDBD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A93E77EA31B911F1A1C532DDBE833773.roa
Signing time:             Mon 06 Apr 2026 13:08:10 +0000
ROA not before:           Mon 06 Apr 2026 13:08:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133675
IP address blocks:        103.185.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 11:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56765 (0xddbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Apr  6 13:08:10 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69d3b03a-841f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:6d:9a:b5:48:16:2b:e9:b1:fb:c3:f7:5f:
                    27:38:49:18:8d:0f:1a:3e:1a:a5:54:8b:23:74:62:
                    f5:95:03:87:a0:32:76:2c:54:82:1f:a4:22:87:3c:
                    30:d5:1b:ef:9d:11:48:89:1e:dc:24:1d:5a:32:38:
                    bc:e1:29:38:57:78:e0:03:1f:d9:56:ec:df:db:59:
                    a9:2b:c9:42:30:60:b8:05:ef:de:bc:0b:b1:6a:d5:
                    95:43:cb:5c:42:a1:d6:2a:ee:65:4e:e8:7f:6b:98:
                    5d:0f:df:bd:a4:c8:89:f0:09:e5:1c:26:ee:8a:fd:
                    95:a2:99:a1:92:10:4c:a6:02:dc:08:1d:3d:f6:1e:
                    2f:a2:2f:38:99:62:d9:0b:32:1c:52:4c:f3:8b:b1:
                    69:58:98:d3:d8:07:3f:b6:da:2f:9e:a3:8c:37:86:
                    f3:dd:55:41:02:30:6f:ba:b0:57:d0:c7:59:cb:30:
                    b1:49:87:c5:7d:d3:ca:52:56:20:c2:1d:33:31:32:
                    7a:f9:13:37:fc:f8:85:54:41:ab:31:89:62:5c:eb:
                    23:41:f5:f2:ca:c1:58:7e:f9:12:cf:b3:ee:82:f9:
                    1b:fb:dd:3c:d2:a0:e4:5c:66:95:ac:3f:7e:2b:f6:
                    26:9d:0d:d0:f3:f0:4b:59:93:92:63:36:44:6d:04:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E5:B0:92:2D:57:C8:15:0A:63:25:A9:73:8B:DF:8B:29:43:0B:5D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A93E77EA31B911F1A1C532DDBE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:b2:8b:bf:06:45:eb:40:a7:a8:97:9b:d7:d5:d6:9c:6b:5d:
         74:00:74:15:d4:65:6e:d4:87:f4:f0:1a:5e:82:97:9d:72:02:
         60:d8:38:54:1f:f6:f2:4f:43:95:3d:aa:5f:30:5e:6e:ab:1f:
         e7:fb:f2:96:13:d5:90:54:a4:58:e9:eb:f7:ac:2e:64:5c:4a:
         17:95:6a:b5:9b:99:f8:05:ce:ee:a2:2b:6c:4d:cd:1c:77:ec:
         73:19:b7:54:65:25:c8:0d:fb:07:15:7b:b7:02:af:27:43:09:
         a7:b9:38:de:b4:43:35:39:41:63:67:85:10:ca:ed:dd:66:ff:
         34:a2:f0:1f:2b:f0:be:8e:80:1e:c5:c5:a0:69:f2:25:d7:03:
         05:45:18:84:65:92:26:85:00:0f:ee:c1:8e:ef:60:b3:04:0c:
         81:61:74:cc:52:6e:1f:df:66:99:fe:ad:04:74:46:90:c8:e2:
         92:a7:29:6f:cf:79:d2:02:2a:93:1a:81:e0:c8:8f:1a:0f:df:
         91:23:13:05:6d:3a:85:90:f7:7c:23:23:d6:0f:87:e5:a6:f0:
         e3:e2:70:24:b6:e7:f5:a8:01:d2:36:28:06:8b:fc:e8:68:d5:
         fb:e7:50:f5:5b:57:c5:d4:e7:7e:91:79:b8:17:3c:19:55:b5:
         13:72:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:26 2026 by rpki-client