Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C744DC3C769A11EBA4F54754C4F9AE02.roa
File:                     C744DC3C769A11EBA4F54754C4F9AE02.roa (raw, json)
Hash identifier:          gQiGuiDKqK5HoM0BQi0dTR/QikS47gUye0AFDiQ0I1U=
Subject key identifier:   D1:2F:C4:7B:29:A3:BB:95:22:45:E5:80:94:DD:7B:48:34:F2:B4:30
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D5A5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C744DC3C769A11EBA4F54754C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:39:12 +0000
ROA not before:           Thu 08 May 2025 16:17:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141568
IP address blocks:        103.162.179.0/24 maxlen: 24
                          2001:df0:c080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54693 (0xd5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c010-f25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:27:93:a0:49:16:63:25:3a:00:dd:47:b5:e9:
                    a8:ed:07:3d:58:87:ef:8b:1e:19:1e:28:72:d8:96:
                    a4:c4:17:66:50:ed:07:7c:f7:ee:54:48:9a:08:14:
                    ac:c5:a1:2b:62:6e:68:88:ac:69:8a:f7:86:7b:73:
                    de:4c:d3:59:d1:3f:42:2b:7f:bc:09:7d:7c:d5:bd:
                    f0:73:92:80:41:a3:06:2d:68:fc:81:ff:eb:02:fb:
                    19:14:84:b2:3f:28:16:8f:6f:f1:5f:ed:5b:d8:8c:
                    b7:cd:ed:2f:30:d6:69:56:df:62:44:79:d6:1c:fa:
                    de:0e:5b:ba:32:4a:61:7f:ed:0a:78:5e:99:49:42:
                    fa:95:9c:bc:f5:aa:58:81:11:5a:37:bb:50:a6:e7:
                    0b:83:b1:9c:a5:97:15:a9:d6:95:52:38:c8:4e:8f:
                    dd:d3:23:a2:a8:6a:79:2b:0b:57:db:44:c7:f6:a4:
                    ad:ad:b7:23:88:81:5c:f0:55:94:3d:bc:36:4d:96:
                    b0:b2:fb:af:d4:26:10:2d:cc:e2:59:b2:32:2d:9a:
                    1c:2e:26:19:24:2d:ef:c4:22:a9:fe:b2:e8:82:2f:
                    06:ea:ab:69:3d:bd:72:29:e2:4a:72:dd:8a:64:bc:
                    a7:57:58:9d:ae:7e:ff:05:9a:ab:e2:ea:f8:83:9e:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2F:C4:7B:29:A3:BB:95:22:45:E5:80:94:DD:7B:48:34:F2:B4:30
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C744DC3C769A11EBA4F54754C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.179.0/24
                IPv6:
                  2001:df0:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:56:bf:88:f7:8b:04:ce:90:70:36:8e:63:ba:c6:a8:60:
         fb:13:46:50:fb:1d:67:dd:a6:03:74:7a:34:0d:33:02:11:1d:
         1d:07:cb:a1:b8:df:61:ce:85:4d:e9:77:e2:a8:90:47:84:9c:
         81:0d:92:a7:de:08:3a:33:41:ba:fa:3a:c9:b6:cf:c9:fe:79:
         1d:ca:3c:15:84:63:14:98:3a:1b:d6:5e:a5:35:4e:84:ba:12:
         41:bf:fa:15:90:ac:ab:db:c7:14:d7:c9:47:55:5c:d7:b0:26:
         ad:a5:bf:38:6e:67:0d:74:3e:f7:f1:d1:5c:14:7e:80:c4:17:
         5a:8d:27:7c:bc:6a:ed:b6:8c:56:9f:f6:c4:5f:d0:2f:b0:14:
         f0:e0:49:d0:7b:5a:ed:61:aa:2d:15:4e:ea:24:d5:28:35:c4:
         8a:33:cd:ab:38:9a:1e:d0:78:34:38:c9:58:40:83:c7:8f:f1:
         79:0a:86:f1:7f:e8:f1:c6:c9:00:4f:35:8f:41:cd:8d:cd:46:
         0d:5d:60:4e:28:d7:88:8a:c4:c9:2f:f9:db:34:5a:91:f8:51:
         18:ec:ee:d8:57:4d:71:57:eb:76:3e:88:55:f0:88:a0:29:11:
         bb:32:f2:f3:34:44:3e:6d:a3:17:54:3c:93:43:c2:04:44:c9:
         98:de:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:34 2026 by rpki-client