Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9003BB0FD7111EE87C9375BC4F9AE02.roa
File:                     B9003BB0FD7111EE87C9375BC4F9AE02.roa (raw, json)
Hash identifier:          6ER/b8DSHigisB5EZrzkBA3lPVKOnt2R9r7yeuhRWs4=
Subject key identifier:   FA:72:92:D3:E4:5C:CD:00:C1:4C:3F:09:FF:D5:15:6D:9C:B6:1B:D6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D87F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9003BB0FD7111EE87C9375BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:55:07 +0000
ROA not before:           Thu 08 May 2025 16:30:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     23528
IP address blocks:        103.11.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55423 (0xd87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:30:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c3cb-66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4b:41:f4:2e:fd:ba:04:d9:bf:da:4a:cc:c3:
                    45:eb:00:a7:68:4b:0c:51:c8:82:da:8d:37:97:c8:
                    3c:4a:29:b4:d8:51:58:2e:b3:34:ed:cc:28:8f:0d:
                    6a:de:7b:c3:f3:15:22:07:70:ac:f2:f7:f7:4f:3c:
                    b2:d3:66:0a:c9:9f:5b:de:08:da:49:61:16:89:a2:
                    df:7e:f1:3c:a5:0e:5e:5c:48:0a:b6:14:dc:2d:29:
                    6d:f9:b0:85:59:0f:ea:36:d2:29:66:30:db:27:d6:
                    af:c0:ae:58:98:eb:b2:f8:3d:9b:5a:ea:97:74:9e:
                    f6:69:e5:fe:85:b8:f3:58:7d:fa:21:8c:ee:7e:1e:
                    2a:bc:bb:d1:1e:e0:13:e3:d9:b1:8e:05:03:b2:5a:
                    e2:03:25:52:7d:57:c1:d9:32:58:fb:e0:85:af:0c:
                    fd:da:2c:15:54:7b:77:97:a0:aa:73:61:27:c0:2f:
                    af:cd:a9:5c:e4:4c:e8:11:2d:0e:94:ad:ae:43:e0:
                    0a:4c:b7:2e:d3:35:f4:e5:29:74:36:0d:df:67:2f:
                    2e:65:ef:58:ac:9f:d4:55:bb:2b:85:6a:f6:2a:14:
                    c1:e7:46:47:6e:c2:93:f9:80:dc:1a:a9:c6:32:bf:
                    fb:69:bc:6d:fd:f9:a1:db:ee:46:56:bb:f7:28:d5:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:72:92:D3:E4:5C:CD:00:C1:4C:3F:09:FF:D5:15:6D:9C:B6:1B:D6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9003BB0FD7111EE87C9375BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:54:f4:f7:45:61:1f:c4:78:f1:4c:62:42:63:d8:d6:b1:b7:
         05:8a:8c:16:6f:2b:66:79:e8:29:fb:f9:1f:a8:91:b3:32:36:
         6b:24:43:cf:5b:62:ed:59:12:5e:14:6c:88:c6:be:b8:46:15:
         3a:61:f9:f2:44:31:fc:12:72:ed:da:b2:50:b4:85:1f:53:b7:
         2c:ad:70:28:e8:58:2b:38:ad:c2:08:39:87:5c:5b:98:0d:bf:
         cb:73:51:f1:d3:e0:4c:58:44:42:b6:73:24:ec:86:a3:38:9d:
         1e:ef:74:a6:6a:44:8a:96:08:4d:14:3c:45:4d:f8:8d:cb:9b:
         18:67:f5:f5:10:30:15:f1:63:50:5b:28:9e:0a:71:74:6e:a9:
         ff:63:6a:10:47:de:be:4e:9c:ab:eb:dc:4e:3f:00:13:e3:55:
         8a:33:4a:e9:45:d2:57:67:5f:ee:8f:66:43:fc:53:7e:e0:2f:
         98:1f:98:ad:fb:8d:f2:80:3f:b7:ac:bd:1d:5d:fd:dd:bd:56:
         eb:78:80:0c:3e:60:69:3f:9e:46:12:de:b1:da:d5:f4:4d:a8:
         99:e1:36:74:1c:de:4f:ed:6c:a0:1e:98:89:f2:52:54:e1:64:
         00:83:0b:ef:de:a8:8f:ab:11:10:74:51:15:df:bf:52:65:5d:
         7c:77:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:32 2026 by rpki-client