Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B3980240D38611EDB6A17E4FC4F9AE02.roa
File:                     B3980240D38611EDB6A17E4FC4F9AE02.roa (raw, json)
Hash identifier:          WU/2JHmqva5kv2UvirKN8KgrSMaABr5IEsDJtE32Hqo=
Subject key identifier:   8B:E6:EF:20:D2:94:89:8D:57:FA:7A:0A:F1:28:A0:01:FF:66:D7:03
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D35B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B3980240D38611EDB6A17E4FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:25:32 +0000
ROA not before:           Thu 08 May 2025 16:06:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135869
IP address blocks:        103.187.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54107 (0xd35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:06:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bcdc-453c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:12:17:41:22:3c:e4:9a:e2:b3:a0:77:83:
                    f6:e4:ac:5a:b0:57:6d:02:ac:84:7a:79:f3:d6:a1:
                    bf:42:bf:19:e3:1e:9d:14:4a:15:b4:70:6f:e0:e0:
                    af:46:63:2d:25:36:ee:34:1b:5c:b3:0c:38:da:95:
                    4b:ad:af:7b:8e:60:b0:62:0e:fb:26:f0:ae:fd:9c:
                    43:3a:74:a7:e7:1a:c0:b1:ff:a4:3a:7e:2f:38:94:
                    e3:a3:99:9d:84:e1:ce:cc:16:37:82:27:b1:fb:59:
                    ce:0d:8f:f8:c7:16:b7:b5:3b:07:f0:f3:e7:58:9b:
                    59:ce:ef:df:23:9a:2c:f0:36:67:96:a1:fe:e2:72:
                    3f:dd:6e:4f:64:bf:5a:0c:44:40:11:1f:a5:c1:3c:
                    bc:e2:ee:2c:54:0f:4d:59:b5:ba:10:0e:ac:37:5e:
                    b7:b1:3c:57:91:df:8e:c8:a7:a1:5a:e0:a8:f4:ec:
                    73:b5:95:2c:b9:14:f5:d9:81:83:63:06:95:43:a8:
                    f9:ce:f1:73:5a:ca:32:d8:c7:72:ab:ae:94:2b:35:
                    a4:bb:de:0b:c0:63:0e:de:4b:5f:e6:c8:d0:a9:92:
                    a2:1e:e5:c7:12:3c:a7:ad:1e:85:e7:1f:0d:cf:b5:
                    f0:3b:f8:3f:32:d2:8c:2b:53:0b:fb:85:16:57:ac:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:EF:20:D2:94:89:8D:57:FA:7A:0A:F1:28:A0:01:FF:66:D7:03
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B3980240D38611EDB6A17E4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:88:b7:b4:75:28:92:c2:28:59:ad:b8:99:0d:6f:95:d0:2e:
         d3:d2:13:2d:96:ba:7a:45:81:f8:a7:5b:9f:a8:83:d2:fc:54:
         7d:ae:55:61:b9:04:88:a1:c6:ef:51:43:bf:09:a9:00:2a:b6:
         ec:0d:1f:9e:1c:60:02:ff:3c:c4:e3:db:fc:96:52:85:21:66:
         f0:4b:5e:ce:62:82:c1:7e:26:65:0e:3c:89:b3:64:ec:52:1a:
         0b:97:08:50:16:cb:27:27:bf:62:e5:d9:d2:7b:c4:f3:f8:e0:
         ed:ec:6b:00:4a:eb:d9:ef:d0:a1:d6:58:20:6a:5e:09:24:21:
         bc:8f:05:4a:4a:33:62:31:39:0a:52:37:58:10:73:9f:36:f2:
         86:d1:61:bc:f2:d5:5c:fa:a5:c1:f2:1d:39:d2:46:3c:9b:e0:
         19:57:94:01:40:7b:27:89:5a:7c:59:ed:07:47:73:20:82:29:
         2f:cb:17:d2:da:0f:16:c2:ab:fb:f2:cb:98:92:df:8a:e8:8b:
         d3:cf:89:97:ab:5e:bd:c0:81:b8:66:ae:53:0a:af:d1:0d:15:
         3f:7c:b9:e4:a9:e8:6d:a2:87:cb:d1:ea:6d:e5:20:0e:cd:0a:
         cf:a6:84:d2:d5:ac:8a:16:5f:71:ed:96:1d:d5:48:71:f0:09:
         de:70:3e:38
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANNbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDYwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJjZGMtNDUzYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIMEhdBIjzkmuKzoHeD9uSsWrBXbQKshHp589ahv0K/GeMenRRKFbRwb+Dg
r0ZjLSU27jQbXLMMONqVS62ve45gsGIO+ybwrv2cQzp0p+cawLH/pDp+LziU46OZ
nYThzswWN4InsftZzg2P+McWt7U7B/Dz51ibWc7v3yOaLPA2Z5ah/uJyP91uT2S/
WgxEQBEfpcE8vOLuLFQPTVm1uhAOrDdet7E8V5HfjsinoVrgqPTsc7WVLLkU9dmB
g2MGlUOo+c7xc1rKMtjHcquulCs1pLveC8BjDt5LX+bI0KmSoh7lxxI8p60ehecf
Dc+18Dv4PzLSjCtTC/uFFlesjZECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSL5u8g
0pSJjVf6egrxKKAB/2bXAzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IzOTgwMjQw
RDM4NjExRURCNkExN0U0RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGe7tjANBgkqhkiG9w0BAQsFAAOCAQEAr4i3tHUoksIoWa24mQ1v
ldAu09ITLZa6ekWB+Kdbn6iD0vxUfa5VYbkEiKHG71FDvwmpACq27A0fnhxgAv88
xOPb/JZShSFm8EtezmKCwX4mZQ48ibNk7FIaC5cIUBbLJye/YuXZ0nvE8/jg7exr
AErr2e/QodZYIGpeCSQhvI8FSkozYjE5ClI3WBBznzbyhtFhvPLVXPqlwfIdOdJG
PJvgGVeUAUB7J4lafFntB0dzIIIpL8sX0toPFsKr+/LLmJLfiuiL08+Jl6tevcCB
uGauUwqv0Q0VP3y55KnobaKHy9HqbeUgDs0Kz6aE0tWsihZfce2WHdVIcfAJ3nA+
OA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:44 2026 by rpki-client