Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B581773824E311EC81167B44C4F9AE02.roa
File:                     B581773824E311EC81167B44C4F9AE02.roa (raw, json)
Hash identifier:          Sg2J8PFa0gc8zAU8kalSwvCHr3ui791N79tGh01fpdA=
Subject key identifier:   E4:FE:03:08:FA:11:FD:AA:84:F9:4E:F5:7C:84:DF:1A:FE:C8:11:3C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D242
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B581773824E311EC81167B44C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:18:56 +0000
ROA not before:           Thu 08 May 2025 16:00:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134012
IP address blocks:        103.58.96.0/22 maxlen: 24
                          2407:4ec0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53826 (0xd242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:00:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bb50-8f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:26:71:2e:19:30:7b:17:f4:d4:2b:20:28:
                    72:96:64:84:16:73:e4:33:d2:dc:e5:a8:80:71:7a:
                    19:b3:83:6b:2f:fb:fa:9a:e2:c9:c5:a3:b0:e8:44:
                    54:56:e6:38:ca:ce:fa:81:16:fd:94:4d:a3:70:7c:
                    cf:4e:3a:1f:33:68:f4:49:74:9b:8d:99:27:03:b0:
                    8a:eb:de:26:6a:fb:f1:4d:bc:69:68:3d:21:b1:50:
                    92:9b:8e:d0:ca:ab:05:07:a6:9a:ea:d7:8d:96:72:
                    dd:45:f5:03:d6:e0:52:11:73:c7:ae:d2:1b:5a:b4:
                    79:7d:bd:c9:c8:fe:7d:d6:0d:b5:22:93:c2:88:9e:
                    82:e3:38:ee:f5:fd:e7:da:f7:b6:51:36:4e:4d:37:
                    44:fa:f3:b4:c9:72:38:43:02:7e:b2:24:0d:2c:30:
                    53:67:cc:75:e0:28:df:d3:fc:d2:dc:80:71:2d:b5:
                    be:91:c3:4d:49:9d:db:f5:d6:c5:1b:0f:bb:1b:9b:
                    f8:79:15:d8:c9:80:a3:6a:34:a2:bd:6e:95:0f:3b:
                    b8:2f:3f:41:af:4f:e1:f5:c3:33:2d:10:c5:38:7e:
                    c8:9e:31:78:3b:cb:24:9e:42:5d:dc:8a:0a:d4:95:
                    65:4d:65:9f:f2:88:52:5e:d4:43:ca:e9:9b:b3:a9:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:03:08:FA:11:FD:AA:84:F9:4E:F5:7C:84:DF:1A:FE:C8:11:3C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B581773824E311EC81167B44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.96.0/22
                IPv6:
                  2407:4ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:58:04:4c:73:9d:ba:60:6e:0c:91:0b:ad:60:73:e1:96:
         77:a2:22:da:48:3e:38:67:df:01:c7:ec:a6:ce:89:db:29:3c:
         9f:b5:dc:33:0b:7b:7c:21:dd:ed:95:b1:ee:c5:a9:b9:b0:3b:
         5a:bd:32:35:a8:11:78:5f:6b:d3:9b:6d:04:24:b9:b0:4b:d4:
         81:95:71:65:8f:8c:96:0d:68:e4:63:14:b7:dd:95:e3:03:89:
         42:f9:b8:ff:f5:a2:cd:96:0a:b0:bd:62:5a:bb:52:cc:db:6b:
         54:f9:44:c4:b7:c5:b4:f2:dc:29:20:f6:06:d1:01:b8:9e:36:
         c9:31:2b:10:35:e8:99:fb:0e:47:ae:ff:c3:2e:69:7a:20:2e:
         38:98:29:bf:cc:f8:ff:0b:c5:b0:37:3c:5a:18:c5:43:28:9f:
         ac:ad:06:89:ec:d6:f2:f1:e2:9e:8a:07:b9:8d:f5:0d:12:56:
         eb:5e:61:1a:43:7a:5f:b6:b9:1e:df:3f:83:9c:ad:a7:e9:21:
         c3:92:05:d1:3d:65:15:2b:33:38:ac:cd:66:73:cf:fa:ed:f6:
         39:5f:46:c0:d8:7b:56:cf:74:4b:1e:7a:62:84:9a:af:45:12:
         4a:9b:e6:e9:7e:c4:20:ff:66:ac:63:c7:f8:f3:32:b9:17:f6:
         26:40:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:12 2026 by rpki-client