Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6D83712C4AA11ED98F4D369C4F9AE02.roa
File:                     B6D83712C4AA11ED98F4D369C4F9AE02.roa (raw, json)
Hash identifier:          ivaKMRxv0Uvue229gYmLL932/sAHZ6w3YF1ob8CeL3k=
Subject key identifier:   7E:3D:C1:D5:D5:1B:FD:C0:11:F1:5B:A8:32:07:CD:5A:65:5F:BD:EB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D727
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6D83712C4AA11ED98F4D369C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:48:27 +0000
ROA not before:           Thu 08 May 2025 16:24:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150023
IP address blocks:        103.113.36.0/23 maxlen: 24
                          2001:df2:1dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55079 (0xd727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:24:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c23b-2fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:92:55:d8:ee:1b:4f:4c:16:51:45:c6:ee:
                    c7:2d:5b:b0:2c:67:87:a5:dd:7b:1e:60:a9:f8:1b:
                    14:9d:2f:66:25:6c:ac:df:b9:3e:2c:b4:5f:b3:d9:
                    ce:0c:23:66:28:d1:67:ca:b0:c1:0b:2d:2d:62:29:
                    90:24:bb:e5:35:57:ac:a1:50:d3:23:48:d2:f5:95:
                    f3:b6:00:06:98:66:9b:d0:d1:d0:43:2c:d3:ba:f6:
                    46:4a:09:ca:bd:f2:ee:8a:3b:a2:5d:bb:1d:d2:f1:
                    24:4e:53:b2:f3:98:cc:65:2f:b9:d5:fb:3e:4d:92:
                    89:f0:de:98:02:da:b0:67:e9:e9:56:92:9d:41:8e:
                    8d:b7:7c:92:39:c2:aa:f3:69:15:7e:60:67:0c:41:
                    fb:22:46:87:f1:ef:59:c2:dd:2b:4e:b2:5d:d4:b5:
                    37:9e:73:c2:51:9b:a5:ff:36:1c:0f:c5:5e:3d:56:
                    f1:dd:2d:3c:59:11:1c:59:3d:29:7b:25:03:1c:e2:
                    11:63:7e:f8:c1:20:74:d3:fb:2d:29:c8:40:d0:bb:
                    61:43:10:1b:9a:78:e0:f0:6d:2b:4d:d9:1a:a8:14:
                    09:88:eb:39:35:41:98:cd:59:36:3b:84:53:91:ce:
                    ca:49:f2:7f:e9:cd:4e:ad:4b:b3:18:fd:77:a7:2a:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3D:C1:D5:D5:1B:FD:C0:11:F1:5B:A8:32:07:CD:5A:65:5F:BD:EB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6D83712C4AA11ED98F4D369C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.36.0/23
                IPv6:
                  2001:df2:1dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:34:91:32:93:4a:a2:9e:a0:5f:d5:40:0b:f6:40:e7:6a:1b:
         d1:99:b4:43:67:92:cf:57:46:2a:5c:a5:4d:a4:19:d2:78:82:
         ab:bb:49:43:c3:b3:93:6e:9c:d8:6e:38:c1:fe:49:db:61:df:
         a4:55:fe:95:da:2e:56:1f:18:b7:45:7c:9b:0f:9d:a4:fe:bf:
         bf:b6:98:d3:13:e1:b9:92:77:07:f8:d2:97:16:bf:b9:6a:06:
         62:b3:68:9e:18:86:75:09:a3:c2:51:9f:6d:c0:c2:68:4c:12:
         55:af:28:b6:4b:da:e2:a2:88:c8:1a:ba:9d:75:c2:03:70:32:
         0c:0b:84:6e:6b:11:12:00:05:68:02:52:87:47:06:63:63:93:
         52:f4:fa:1c:d7:ad:58:8f:c0:83:60:33:09:8d:b2:c9:11:74:
         3d:c7:d1:fc:65:e1:6b:ab:71:5c:ea:87:15:46:b5:1b:7d:cc:
         ec:49:81:6b:d5:d5:4b:b3:16:ab:79:a2:27:9a:d3:19:9d:39:
         ea:e3:61:f5:f8:70:67:31:d4:f1:54:4e:4d:69:c7:d5:99:71:
         6c:79:01:79:97:63:40:c0:b0:38:73:e5:27:91:78:ae:46:6c:
         fc:85:61:ed:30:e5:16:6d:8e:1f:1b:95:30:21:c1:a8:3c:4e:
         af:51:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:25 2026 by rpki-client