Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCDC80A0C42611EFA5CC3D70C4F9AE02.roa
File:                     BCDC80A0C42611EFA5CC3D70C4F9AE02.roa (raw, json)
Hash identifier:          iqyh+zT7oAl+TNZIqxdWf+iKLT/zkiHJFRseCtvchqg=
Subject key identifier:   A0:72:2C:C3:9F:A5:46:37:96:A2:38:A9:95:CD:25:AA:F8:60:3F:58
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D775
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCDC80A0C42611EFA5CC3D70C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:50:15 +0000
ROA not before:           Thu 08 May 2025 16:25:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150600
IP address blocks:        103.108.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55157 (0xd775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:25:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c2a7-5258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:24:8a:3c:37:27:bd:93:55:63:a8:b2:b9:
                    fb:0b:36:ba:73:75:82:7e:3e:82:07:39:63:1c:17:
                    2b:a2:d0:b5:70:0c:42:32:e9:bb:7b:1f:81:14:d4:
                    f6:fc:61:79:6b:ba:47:07:03:05:7b:b9:76:95:f0:
                    fe:6d:84:81:b0:55:8b:96:3c:e4:f0:d7:e5:0b:fc:
                    ec:50:60:38:26:0c:8f:e6:cd:b6:a4:ec:b5:09:ce:
                    65:2d:f9:7b:0a:36:f0:eb:e2:a5:1e:ee:98:59:10:
                    e2:27:ca:7f:d8:8d:fa:1e:90:29:4f:a1:86:8d:fc:
                    75:e2:31:a4:dc:c0:4f:cb:4e:03:41:4e:23:cf:1c:
                    da:08:69:e9:25:42:ee:40:63:30:27:74:b5:8c:64:
                    26:eb:a6:82:b4:f5:86:1a:d9:bd:a3:c0:8f:79:fe:
                    2d:0c:b4:50:1d:b8:13:a3:58:11:36:83:5f:0a:43:
                    c3:60:36:79:a1:1f:40:d5:76:d3:04:e3:4e:49:60:
                    fa:a2:8f:ce:84:22:bb:63:9a:70:88:7c:57:7e:31:
                    5f:04:4e:b8:d5:ce:7a:4c:8c:ac:e1:67:5e:23:52:
                    b9:06:ce:48:48:5d:ad:34:94:35:7e:81:aa:ae:49:
                    3d:de:af:f1:04:bf:f9:82:d2:c6:01:8a:4f:20:23:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:72:2C:C3:9F:A5:46:37:96:A2:38:A9:95:CD:25:AA:F8:60:3F:58
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCDC80A0C42611EFA5CC3D70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:56:be:a3:a9:b8:3a:f8:89:ee:9e:41:37:7e:07:67:29:
         85:58:14:ff:ac:8d:61:7e:9b:0f:32:65:d5:cf:49:ed:b3:6a:
         10:c6:bd:5d:ea:3c:c5:72:e8:02:37:ee:9e:e9:9e:86:06:ad:
         ca:ad:39:b1:ee:17:72:bf:cd:c8:45:98:33:e6:03:ea:4a:04:
         61:72:d2:a1:49:db:af:26:ec:34:f9:b4:93:02:e5:a9:6a:2e:
         65:8e:12:16:36:d4:97:b2:53:5f:af:29:82:a3:f3:cb:3c:af:
         90:33:eb:6b:9c:92:9f:07:53:8a:6d:fe:e3:a4:46:d9:71:be:
         75:62:41:e7:d9:39:4e:02:98:d3:d6:91:a4:c9:66:6d:b4:1c:
         18:28:a8:bf:78:f7:c7:8a:64:63:3f:dc:21:5e:09:c1:55:a5:
         00:99:71:65:10:b0:62:20:5d:96:99:6c:13:67:fb:b4:2d:3b:
         39:f0:22:24:d9:b9:cb:b4:c0:09:f0:1e:96:22:72:a8:79:b7:
         54:06:f6:93:37:85:eb:1a:f3:bd:bb:bd:91:12:f5:fe:f5:cd:
         7c:ed:c1:b5:01:d4:31:f4:34:83:ad:0c:f0:7b:56:ba:d6:6f:
         1a:d5:94:56:a7:61:30:ea:a8:3d:d9:8a:5f:ee:d0:8e:a6:51:
         52:89:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:39 2026 by rpki-client