Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa
File:                     B8D6098E458A11EEA6299718C4F9AE02.roa (raw, json)
Hash identifier:          74mYTNlM5D4tkvfw5idc9LurvUIwqe7mz8/lNfoQhCU=
Subject key identifier:   10:74:23:AD:24:DD:65:CA:A5:4F:00:88:B7:1C:EC:B2:24:CE:3B:47
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D238
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:18:42 +0000
ROA not before:           Thu 08 May 2025 15:59:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133990
IP address blocks:        103.54.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53816 (0xd238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:59:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bb42-f361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:de:c1:09:62:56:16:a0:68:0e:40:1f:8a:
                    74:14:57:7f:82:7c:99:8a:97:36:cd:e9:d6:2a:45:
                    8e:d8:cc:d1:32:cc:36:70:d5:42:40:71:b3:eb:17:
                    e3:1b:c3:c0:ec:bc:e6:82:68:44:2b:d7:08:70:d9:
                    31:6a:62:1d:24:a0:c7:05:b3:1d:2f:21:d7:a4:e7:
                    af:f9:09:10:2e:4d:91:72:33:5e:44:b4:08:52:65:
                    84:50:1e:33:b5:38:2b:a6:b3:99:49:59:e7:ab:1a:
                    05:03:22:99:79:e4:e2:51:5f:89:ed:8c:94:63:90:
                    9b:3e:75:20:3f:f3:7f:f4:50:7e:bf:2f:17:95:71:
                    fb:f5:23:e6:52:f0:a4:9a:9c:c6:d5:bd:57:61:84:
                    03:43:29:20:01:a0:43:69:b2:ed:3e:5f:7f:9d:e0:
                    17:79:cd:1b:d8:05:9e:dd:3a:28:e8:7b:dc:17:d9:
                    82:c0:1e:81:07:66:14:98:ef:8b:3f:ff:55:df:99:
                    2d:f1:07:43:0f:0b:88:37:2e:64:11:5f:0b:3c:50:
                    11:cb:b3:46:6c:2a:65:f5:f7:ee:6f:ad:e9:aa:1f:
                    a9:b8:cf:22:5a:97:18:56:4e:12:a9:c8:8a:69:5c:
                    56:5f:c5:09:94:7a:19:f6:f0:54:cc:c0:61:ac:79:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:74:23:AD:24:DD:65:CA:A5:4F:00:88:B7:1C:EC:B2:24:CE:3B:47
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:19:4d:3e:ee:3e:bb:63:34:69:64:f9:88:85:7b:d4:16:69:
         20:1a:65:4e:89:a2:1b:7a:7b:9c:95:c0:a2:cf:68:6e:aa:48:
         3d:98:71:ac:d0:83:12:43:f8:3d:84:a0:f5:2d:47:42:28:3d:
         cd:53:7f:a2:ba:c5:1a:69:a4:5f:fc:de:9a:aa:42:0d:8c:af:
         c5:8f:7c:b8:38:d4:4f:68:c7:aa:10:ac:62:f1:2c:60:39:09:
         7f:10:3d:7a:49:68:a1:b6:e5:27:25:f9:08:c1:1b:04:33:5c:
         ae:d9:a9:de:ec:20:e6:f5:05:fe:da:57:81:64:d4:42:d6:89:
         10:f9:78:0b:a7:30:ab:9a:c7:88:52:08:1a:8e:d5:4f:b9:15:
         ae:dc:9d:20:4a:8d:ef:db:02:0c:5c:b0:70:d6:80:e1:f5:5f:
         eb:86:55:20:5f:42:73:5b:c8:ee:51:a7:05:a1:fb:2b:a5:14:
         f7:41:cf:2a:81:32:99:97:1e:17:3f:6a:8a:3d:78:47:a5:a1:
         f0:df:1b:b9:f8:dc:68:01:35:74:9e:db:d2:59:9f:8d:8d:3c:
         b9:65:95:54:f6:82:bd:df:05:87:c2:29:01:5d:e3:2f:16:21:
         4a:18:7d:f1:17:e8:62:bd:88:8b:1d:aa:21:f2:96:a0:85:bb:
         f8:6d:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:35 2026 by rpki-client