Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa
File:                     C3C794CCE22611EFBBF69E1FC4F9AE02.roa (raw, json)
Hash identifier:          +itLiG8oX2GhMt2GAiiBWqBFVnkDoQJuYmJQciswM/c=
Subject key identifier:   77:B2:E2:E7:A4:1A:38:FF:46:41:61:56:4C:FB:AD:FC:68:73:AE:49
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D5C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:39:58 +0000
ROA not before:           Thu 08 May 2025 16:17:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141826
IP address blocks:        103.167.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54726 (0xd5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c03e-dcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:9a:ad:1c:bf:ce:f9:16:1c:46:45:63:7a:
                    b8:91:5f:28:23:55:f4:28:63:ac:b4:72:25:8b:49:
                    66:a8:e2:51:c1:e0:59:f8:ce:17:2f:4f:f6:18:c8:
                    cd:c9:5f:40:30:27:ab:10:ba:a6:ba:2b:1b:ab:b4:
                    61:91:ad:fe:f2:7c:28:e9:60:4e:db:e9:56:bc:30:
                    e4:91:3a:a2:2a:dc:65:14:01:12:d9:ce:de:8a:85:
                    9d:00:73:c1:e0:78:41:58:73:18:b2:cd:26:12:57:
                    3b:78:a7:f4:a6:fd:e2:f5:42:86:c6:b6:a9:b3:7a:
                    36:6e:3f:3a:b2:2e:ac:62:32:4a:5c:e8:7c:7a:38:
                    e2:53:b6:d6:93:6e:9a:6d:b4:47:ca:cb:61:d3:dd:
                    82:f2:1e:30:e8:8c:c8:41:de:e1:36:9c:d5:33:9b:
                    74:04:a0:f0:e4:a8:b0:57:77:ce:2b:0d:b3:1b:3e:
                    e4:f0:3c:37:c3:97:d5:0d:b9:f6:f5:1b:06:57:e6:
                    6e:12:ac:8b:1e:b4:dd:61:44:a7:76:c0:9f:26:7b:
                    b0:85:9e:49:d5:39:8e:1a:55:f1:21:ea:d4:4d:3c:
                    4b:90:22:a3:91:12:e0:92:1b:25:52:fe:f3:b8:35:
                    16:ba:ba:18:98:f5:88:55:d8:f1:56:cc:06:00:b0:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:E2:E7:A4:1A:38:FF:46:41:61:56:4C:FB:AD:FC:68:73:AE:49
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:69:d8:19:e3:a4:04:7f:6b:e4:0d:c6:10:1f:68:18:22:
         41:7d:fe:1a:29:d5:85:b8:bb:4d:84:d0:e6:ff:80:2c:69:5d:
         24:64:f5:5e:d5:b2:bb:4d:95:dd:3a:82:01:46:4a:42:97:4e:
         c7:75:96:ce:e1:26:24:3f:2c:9a:e6:8c:ff:77:d1:8f:c2:1c:
         1f:60:35:f6:3e:9f:56:41:8a:50:96:dd:31:8f:ea:49:8d:17:
         0c:ed:1b:6e:71:24:12:ca:9b:d0:e5:f1:ad:23:f2:79:6f:0c:
         5a:f5:87:4b:df:d7:b6:2c:b4:bc:38:6a:d5:89:a5:a2:d3:97:
         2c:d2:b8:a7:19:db:54:32:4e:15:dc:07:80:37:b2:e6:60:3e:
         a7:b9:0c:55:81:f9:1e:35:51:c3:89:03:32:d4:6d:a9:c1:6a:
         c2:a0:11:0e:e5:c8:e4:78:a8:8e:ab:49:b7:9f:90:22:2a:d5:
         8c:b7:45:c8:e9:af:b8:1c:2d:4c:ad:a0:a1:5e:33:77:96:64:
         f3:e0:31:9e:6d:5d:be:e6:4c:10:9c:9d:d9:51:15:d3:ef:fc:
         c3:09:28:91:77:89:96:2f:0b:66:11:4e:1d:ae:06:05:56:ad:
         5a:46:ed:80:ef:3c:b1:2c:2a:1b:ae:dc:80:e4:a9:16:ca:d8:
         08:25:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:22 2026 by rpki-client