Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6A829B003BD11EBB416B77DC4F9AE02.roa
File:                     B6A829B003BD11EBB416B77DC4F9AE02.roa (raw, json)
Hash identifier:          rjBsSn07TEAZ/cKeJmUiHqsLt9aO1oFIxA3DwHNKxQ4=
Subject key identifier:   9C:4D:3F:16:20:71:AF:61:F1:9D:7B:4C:33:4B:8A:53:4E:FE:C4:CD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D333
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6A829B003BD11EBB416B77DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:24:38 +0000
ROA not before:           Thu 08 May 2025 16:05:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135787
IP address blocks:        103.85.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54067 (0xd333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:05:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bca6-0509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:70:18:13:40:34:6f:2f:bd:2d:32:f5:7b:
                    cc:ca:f9:b1:80:88:bd:af:b0:d7:89:e1:91:92:8e:
                    00:42:d6:76:92:8f:40:56:21:4a:a7:43:8d:a9:60:
                    ff:b5:73:d7:0d:c8:f1:99:fe:f6:92:13:81:61:17:
                    f9:47:2b:6c:e9:d1:0b:f7:54:b8:0d:ad:22:0e:b4:
                    7f:43:ba:df:5e:bb:7c:28:c4:9e:40:1a:0d:f6:b9:
                    49:93:d6:dc:76:6b:b0:45:1a:e2:b2:e3:d0:cf:d5:
                    3d:17:dd:37:32:dd:8c:f5:a9:df:4f:d4:90:3c:7c:
                    1b:e3:7b:5f:c9:43:53:eb:48:6a:a0:17:0f:2a:5b:
                    25:0c:ff:96:21:d0:e8:63:a3:ed:37:45:82:9a:b6:
                    79:d4:d1:1f:ef:92:35:68:5e:b2:73:c9:d4:ed:0f:
                    3c:d4:fe:d1:14:4e:a7:45:8d:1a:aa:a6:16:72:79:
                    98:40:bf:c8:14:bd:ab:d0:ac:f8:ae:1f:92:33:cc:
                    29:c2:49:4d:94:9d:cb:87:19:05:92:a8:5a:0b:8a:
                    eb:44:dd:c9:4d:fe:4e:fd:37:0f:5f:bd:35:5c:32:
                    9a:84:35:11:d5:e3:92:f3:f7:6c:87:41:32:28:2f:
                    e2:fa:c2:52:10:be:b3:51:3a:9e:ab:94:a6:77:b7:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4D:3F:16:20:71:AF:61:F1:9D:7B:4C:33:4B:8A:53:4E:FE:C4:CD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6A829B003BD11EBB416B77DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:ab:fa:70:93:84:f3:2c:40:2e:55:bf:e6:e3:a6:c4:ed:
         69:35:c8:f8:41:d3:ca:11:78:65:75:93:31:b9:05:7c:a9:87:
         8e:1c:4b:79:a0:99:23:3e:9d:43:2f:e9:1a:a9:81:e5:53:60:
         8b:a6:81:08:75:bf:73:2b:19:4e:08:41:d8:c9:87:45:c3:02:
         a1:57:2d:d2:b0:f9:62:2f:19:a7:12:25:56:40:51:2f:f3:a0:
         6d:5f:7b:95:e3:91:27:09:12:a8:c5:32:b2:bc:a4:04:fc:85:
         4e:9d:d6:f6:d2:2a:34:0f:e7:72:a4:f1:c8:b1:8b:bd:a7:98:
         8c:18:22:b1:d4:7b:95:70:1f:1f:f1:4a:49:41:0e:34:65:13:
         2f:2d:23:56:12:47:3a:59:34:bf:2f:c1:58:db:27:81:b8:92:
         48:49:4e:7c:b8:b3:53:b0:be:b9:18:f1:ba:9a:21:f0:bb:f6:
         21:4a:66:65:ce:b8:d4:10:62:26:cd:0a:2b:ef:24:ef:3b:d0:
         3e:78:05:6f:d0:d5:33:01:a5:cb:4b:33:e8:94:5b:87:03:c5:
         63:3c:ba:74:3e:9b:e0:65:36:be:4b:c5:96:99:0b:ef:84:f2:
         31:99:82:5f:2a:4a:fe:b0:11:75:26:48:dd:6c:96:d3:7e:45:
         51:a2:67:98
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANMzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDUxNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJjYTYtMDUwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALFCcBgTQDRvL70tMvV7zMr5sYCIva+w14nhkZKOAELWdpKPQFYhSqdDjalg
/7Vz1w3I8Zn+9pITgWEX+UcrbOnRC/dUuA2tIg60f0O63167fCjEnkAaDfa5SZPW
3HZrsEUa4rLj0M/VPRfdNzLdjPWp30/UkDx8G+N7X8lDU+tIaqAXDypbJQz/liHQ
6GOj7TdFgpq2edTRH++SNWhesnPJ1O0PPNT+0RROp0WNGqqmFnJ5mEC/yBS9q9Cs
+K4fkjPMKcJJTZSdy4cZBZKoWguK60TdyU3+Tv03D1+9NVwymoQ1EdXjkvP3bIdB
Migv4vrCUhC+s1E6nquUpne3gNcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBScTT8W
IHGvYfGde0wzS4pTTv7EzTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I2QTgyOUIw
MDNCRDExRUJCNDE2Qjc3REM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWdVTDANBgkqhkiG9w0BAQsFAAOCAQEAHEGr+nCThPMsQC5Vv+bj
psTtaTXI+EHTyhF4ZXWTMbkFfKmHjhxLeaCZIz6dQy/pGqmB5VNgi6aBCHW/cysZ
TghB2MmHRcMCoVct0rD5Yi8ZpxIlVkBRL/OgbV97leORJwkSqMUysrykBPyFTp3W
9tIqNA/ncqTxyLGLvaeYjBgisdR7lXAfH/FKSUEONGUTLy0jVhJHOlk0vy/BWNsn
gbiSSElOfLizU7C+uRjxupoh8Lv2IUpmZc641BBiJs0KK+8k7zvQPngFb9DVMwGl
y0sz6JRbhwPFYzy6dD6b4GU2vkvFlpkL74TyMZmCXypK/rARdSZI3WyW035FUaJn
mA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:02 2026 by rpki-client