Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF752C4A507411EE9ECFEE7BC4F9AE02.roa
File:                     AF752C4A507411EE9ECFEE7BC4F9AE02.roa (raw, json)
Hash identifier:          FPP6Fe9fJkvjMOdZsOl6O3UrU0aG5+p10AmBQW0oAIg=
Subject key identifier:   F7:B9:9E:2C:64:5F:EB:35:05:3B:EA:48:15:A9:49:FE:27:E0:A5:21
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D317
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF752C4A507411EE9ECFEE7BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:23:57 +0000
ROA not before:           Thu 08 May 2025 16:04:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135727
IP address blocks:        103.250.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54039 (0xd317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:04:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bc7d-7385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:07:d8:44:3f:c7:e0:c6:61:d3:6e:9d:83:
                    e9:d7:dc:da:87:ed:34:e7:44:77:37:57:37:ca:9c:
                    55:66:a7:3e:b3:be:18:44:61:cc:75:fb:cd:fa:9e:
                    bf:32:25:f1:3a:a3:fa:fd:fc:06:76:97:eb:21:37:
                    d7:05:71:a5:64:e1:fd:59:26:18:b2:4a:00:0f:43:
                    7a:97:01:a2:bd:10:06:64:b4:4e:d8:a0:53:5b:9e:
                    23:58:47:03:ae:e1:f6:ec:66:60:1d:5c:d3:9c:25:
                    87:5d:89:54:4b:51:97:7e:c7:7b:21:69:ee:2f:28:
                    c7:2c:5e:50:af:db:54:d9:31:ec:53:1f:5e:c4:4d:
                    09:64:23:dd:a4:79:5f:57:31:0d:5f:8f:9c:db:07:
                    4c:27:d5:71:a2:9a:41:74:cc:77:23:3b:f4:c5:15:
                    24:7d:73:1c:4d:ef:b0:33:a7:a7:ad:c0:34:e6:2a:
                    98:98:13:10:12:11:10:5f:d8:e2:93:42:53:80:09:
                    de:cf:91:0f:c6:66:4f:ed:23:6d:70:84:e5:40:ac:
                    d2:8a:76:3d:26:52:22:15:1d:3a:9f:75:6e:88:b5:
                    d1:81:9c:37:96:8e:13:d1:b2:8c:f9:31:97:3e:c3:
                    ef:50:52:82:33:a7:5e:7c:bc:9d:a6:89:86:9f:92:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:9E:2C:64:5F:EB:35:05:3B:EA:48:15:A9:49:FE:27:E0:A5:21
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF752C4A507411EE9ECFEE7BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:93:08:71:e5:1d:78:ba:31:a6:db:ed:57:ae:47:0e:d8:a1:
         da:a9:44:33:2f:85:14:3a:19:72:ff:9e:14:c3:d1:17:b2:5e:
         c9:aa:f2:31:2b:c4:48:a0:09:d4:e3:f1:77:12:dd:25:50:1d:
         42:c3:6c:1a:65:dd:5b:c3:b2:30:16:d1:79:58:eb:22:38:46:
         5b:e6:34:c3:c9:d7:cb:f8:7d:29:43:16:a9:47:57:fe:1c:ce:
         42:d9:a7:e8:77:21:fd:d4:e8:b6:00:ae:42:84:f0:eb:c4:b0:
         ab:2f:0b:ac:f3:86:e9:d6:50:5e:37:73:e4:b1:fe:e7:a2:a4:
         75:9a:68:56:0c:82:70:0e:ca:3d:6a:8b:1c:a2:87:28:80:9f:
         ee:28:8b:dd:b1:69:b8:5e:af:dd:c5:39:f5:73:66:16:16:eb:
         5b:06:8d:43:27:88:95:d4:ca:79:bb:71:91:27:89:02:df:b8:
         3f:c8:82:60:fb:a3:a1:3b:4c:51:e7:d1:52:0f:dd:80:ef:43:
         5f:96:e3:fa:e6:c4:71:c4:69:1f:b6:77:09:5e:27:00:e6:39:
         40:94:23:5c:be:96:98:70:95:3e:f5:9c:7f:b7:61:fb:6f:f5:
         e3:d8:3f:5c:76:ba:4e:f0:98:49:ba:a2:ef:40:5c:61:0c:da:
         35:e1:97:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:15 2026 by rpki-client