Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCA256506CAD11EDAE46E940C4F9AE02.roa
File:                     BCA256506CAD11EDAE46E940C4F9AE02.roa (raw, json)
Hash identifier:          wzF4cXhmY08fOmxlcatrYXUY3t7NN0NC45xLbP0v7aQ=
Subject key identifier:   E1:D1:5A:BA:87:DA:3F:BA:3F:4C:39:99:92:23:85:C4:ED:75:BB:AA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D59E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCA256506CAD11EDAE46E940C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:39:03 +0000
ROA not before:           Thu 08 May 2025 16:17:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141557
IP address blocks:        103.163.56.0/23 maxlen: 24
                          103.163.178.0/24 maxlen: 24
                          103.163.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54686 (0xd59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c007-7fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:77:8a:eb:df:e1:ee:26:3b:d9:8f:ac:32:
                    33:d7:91:e6:28:a3:49:8c:ab:3f:82:e4:ae:32:3c:
                    70:69:35:35:23:59:37:0f:90:6a:40:82:4a:c8:b5:
                    16:52:20:b9:a7:99:c8:49:da:a8:7f:13:00:0f:d5:
                    c3:2d:f9:2b:4b:1b:d3:b1:91:70:05:05:3f:88:be:
                    c1:4b:4c:2f:37:1f:27:5f:db:6a:4b:0b:ec:39:43:
                    29:c1:95:23:6b:1f:c2:47:a0:fc:4f:9f:cb:9f:4c:
                    ca:68:74:04:68:d2:d4:05:2f:e8:47:9d:de:18:99:
                    60:92:0e:3e:54:b1:fa:d2:d0:09:cf:10:27:57:65:
                    fa:7b:ce:8f:fe:b6:51:65:2b:71:dc:77:1f:c5:97:
                    44:c0:9d:49:a1:fd:ec:5a:c3:41:77:96:84:73:f3:
                    ae:66:58:7c:35:65:0b:60:4d:99:e9:88:5c:97:b3:
                    c5:87:69:6c:51:b3:27:eb:25:f8:76:31:4c:23:ae:
                    1a:f8:47:4f:85:3f:4d:9a:2c:4d:22:1c:c5:bc:cd:
                    60:c8:02:a6:1e:cb:b1:d3:21:00:0d:2a:d7:4f:e6:
                    6d:7d:13:b9:6c:7d:e4:4c:f4:2b:bb:3a:1f:6e:bf:
                    89:44:45:28:7c:f3:19:04:1f:8f:77:01:50:f5:77:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D1:5A:BA:87:DA:3F:BA:3F:4C:39:99:92:23:85:C4:ED:75:BB:AA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCA256506CAD11EDAE46E940C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.56.0/23
                  103.163.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:57:71:83:b1:53:53:ff:3f:ad:72:e8:b9:6d:c3:7f:29:d9:
         c9:9e:f4:71:24:7e:14:17:4e:5a:dc:03:04:49:f1:4b:48:5c:
         ea:88:4a:10:fc:17:e1:14:ad:62:05:a8:a0:81:ce:c3:a4:ac:
         4f:12:bd:71:d8:c4:ce:07:4f:11:28:cb:14:b9:77:e5:5c:54:
         c4:59:ee:bc:74:45:fe:c8:59:a4:f2:4b:b3:a3:e0:86:ab:66:
         bd:14:a4:ce:b5:08:e8:17:4b:16:ef:86:a3:d1:fe:d5:86:92:
         27:4a:b2:7d:d3:ba:c1:db:99:52:e7:94:b6:17:1f:70:e1:be:
         38:af:3c:c8:df:69:8a:5c:d0:b8:11:62:1d:76:74:49:4b:16:
         05:67:8c:c2:47:21:03:cf:36:4b:fc:15:f9:ad:44:aa:5c:bb:
         c4:3b:6b:df:19:d3:43:fc:10:05:26:6c:9d:66:55:33:54:a5:
         0d:0c:1e:7d:91:9f:84:f0:d2:d2:15:00:d0:d3:12:94:2f:10:
         24:d0:ca:7a:38:0e:2d:f0:85:f9:a0:90:12:cc:62:56:51:20:
         9b:ac:dd:05:60:83:a9:3a:bd:86:33:b8:6b:a1:57:48:e7:f6:
         91:1d:2d:6c:74:dd:e9:f9:fc:21:b6:80:15:35:e2:cf:0f:ce:
         30:97:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:40 2026 by rpki-client