Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B269BD8C840011F0BF2A156EC4F9AE02.roa
File:                     B269BD8C840011F0BF2A156EC4F9AE02.roa (raw, json)
Hash identifier:          p0vHuS9Tt0vQ+l21qttMGymAkli9RjjD3Vm9fM3R4Og=
Subject key identifier:   5F:DE:0B:00:DD:20:27:B5:35:E7:A9:B6:9C:CF:F2:77:BE:E2:98:34
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D9E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B269BD8C840011F0BF2A156EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 23:01:36 +0000
ROA not before:           Fri 29 Aug 2025 08:08:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141321
IP address blocks:        103.157.222.0/23 maxlen: 24
                          103.187.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55782 (0xd9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 29 08:08:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c550-f392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:0b:00:8b:d6:5f:ab:c8:20:4a:98:b8:62:
                    51:80:70:95:60:87:18:77:3f:0f:7a:a5:d0:ac:9c:
                    36:e6:d4:ce:a4:ee:b5:76:82:83:22:66:f3:35:95:
                    8e:dc:6d:cd:5f:fb:62:f6:e7:90:8d:3b:42:ab:90:
                    ab:b2:9d:7a:b8:b4:c8:a1:2a:fe:87:05:d4:bb:34:
                    8a:a0:e8:86:29:68:96:d6:fb:c1:c7:ea:d1:9f:98:
                    39:34:43:51:fb:3e:5b:90:31:e9:14:93:82:27:cc:
                    0d:82:c7:7c:45:49:ae:23:53:6b:b0:df:4d:1b:4f:
                    44:8a:ac:ea:94:8d:10:b7:aa:b7:ac:9b:25:ff:da:
                    f0:20:22:9a:74:b6:40:28:13:f0:cf:c3:2a:aa:9b:
                    37:e5:a9:94:a4:1e:d5:a4:1b:66:d6:13:c7:6a:d1:
                    bd:8f:a0:26:f3:7d:40:61:65:aa:8a:31:b3:b8:01:
                    80:21:47:a8:37:4c:5f:fd:a1:a9:b5:13:cd:94:a1:
                    34:e2:f6:dc:cb:28:35:56:4d:71:1f:59:d8:85:b0:
                    fd:11:69:7c:d4:08:6c:d0:d0:fb:e1:1a:02:f2:0e:
                    ec:b3:44:d7:ea:1b:c8:09:79:ae:24:1e:c3:15:9a:
                    95:a5:e9:56:07:f0:25:84:24:cf:98:bb:61:3b:a8:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DE:0B:00:DD:20:27:B5:35:E7:A9:B6:9C:CF:F2:77:BE:E2:98:34
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B269BD8C840011F0BF2A156EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.222.0/23
                  103.187.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:d6:bd:95:eb:37:5e:ac:65:dd:b4:3f:ee:2d:3e:af:4e:36:
         1f:ee:b7:ca:4f:28:f4:42:c1:61:56:79:9d:a6:f8:ea:01:02:
         2f:82:52:a2:0d:cc:ed:a3:78:a6:c8:cf:e3:3d:93:8b:8f:17:
         92:96:23:24:f3:d0:d1:cc:8b:82:43:19:e7:d6:58:b0:fe:62:
         09:88:37:57:0e:f5:5a:84:0a:96:95:cc:2c:f6:ab:a1:73:75:
         14:23:e2:92:30:5a:78:f4:26:14:13:14:0e:69:e1:e5:50:c8:
         66:09:a2:5f:0c:51:25:5f:dc:f3:18:a7:85:1f:37:fc:8e:dd:
         ed:5e:f4:96:60:98:1d:a9:f5:06:72:bd:35:43:46:cf:4c:30:
         a7:67:60:37:cc:e7:02:bc:ba:92:7b:b3:c9:df:d3:76:db:06:
         25:dc:fd:e3:66:ee:55:5a:21:7e:96:8b:f1:ae:55:6f:8a:1a:
         d2:b0:00:34:d9:bd:37:88:e1:78:ab:5c:56:2d:ec:0b:f5:c5:
         9b:df:d8:e2:2d:49:3f:91:27:c1:b3:13:1c:38:b9:71:82:2b:
         9b:b4:71:f0:c5:59:23:b3:82:22:06:19:43:3d:72:98:a8:51:
         aa:03:fe:f7:23:c3:04:82:d0:3e:01:b7:d1:d9:2f:07:3a:4a:
         79:e8:0d:1f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDANnmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDgyOTA4MDgwNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM1NTAtZjM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMrQCwCL1l+ryCBKmLhiUYBwlWCHGHc/D3ql0KycNubUzqTutXaCgyJm8zWV
jtxtzV/7YvbnkI07QquQq7Kderi0yKEq/ocF1Ls0iqDohiloltb7wcfq0Z+YOTRD
Ufs+W5Ax6RSTgifMDYLHfEVJriNTa7DfTRtPRIqs6pSNELeqt6ybJf/a8CAimnS2
QCgT8M/DKqqbN+WplKQe1aQbZtYTx2rRvY+gJvN9QGFlqooxs7gBgCFHqDdMX/2h
qbUTzZShNOL23MsoNVZNcR9Z2IWw/RFpfNQIbNDQ++EaAvIO7LNE1+obyAl5riQe
wxWalaXpVgfwJYQkz5i7YTuoZwECAwEAAaOCAmYwggJiMB0GA1UdDgQWBBRf3gsA
3SAntTXnqbacz/J3vuKYNDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IyNjlCRDhD
ODQwMDExRjBCRjJBMTU2RUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAWed3gMEAWe7QDANBgkqhkiG9w0BAQsFAAOCAQEAtta9les3Xqxl
3bQ/7i0+r042H+63yk8o9ELBYVZ5nab46gECL4JSog3M7aN4psjP4z2Ti48XkpYj
JPPQ0cyLgkMZ59ZYsP5iCYg3Vw71WoQKlpXMLParoXN1FCPikjBaePQmFBMUDmnh
5VDIZgmiXwxRJV/c8xinhR83/I7d7V70lmCYHan1BnK9NUNGz0wwp2dgN8znAry6
knuzyd/TdtsGJdz942buVVohfpaL8a5Vb4oa0rAANNm9N4jheKtcVi3sC/XFm9/Y
4i1JP5EnwbMTHDi5cYIrm7Rx8MVZI7OCIgYZQz1ymKhRqgP+9yPDBILQPgG30dkv
BzpKeegNHw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:40 2026 by rpki-client