Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C930E60A271A11F09E3A5D67C4F9AE02.roa
File:                     C930E60A271A11F09E3A5D67C4F9AE02.roa (raw, json)
Hash identifier:          UZJDyRrKNdZVI30Jn5b30sNaES4YAIfvDeJ+uOkUWFI=
Subject key identifier:   41:4E:0B:53:12:7A:49:8D:2A:9D:13:92:06:6A:1A:98:E5:15:E4:AE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D688
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C930E60A271A11F09E3A5D67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:28 +0000
ROA not before:           Thu 08 May 2025 16:21:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     147269
IP address blocks:        103.69.200.0/23 maxlen: 24
                          103.176.192.0/23 maxlen: 24
                          2001:df7:2680::/48 maxlen: 48
                          2400:34a0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54920 (0xd688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:21:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c14c-6bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:fe:81:58:94:50:d6:8b:a9:6f:aa:75:7a:
                    6c:f6:66:d7:16:0b:ef:6c:42:d5:01:5e:3c:4f:30:
                    e9:fd:32:4a:5a:d8:bd:9e:99:c2:06:e3:0b:72:41:
                    54:a2:26:4e:a4:e1:9b:d9:fb:6e:b9:ad:70:15:de:
                    bd:82:90:8a:de:40:0f:8e:ab:6e:6b:53:47:ba:94:
                    b2:b2:7e:24:df:a1:37:5a:a9:26:b0:f5:40:27:7b:
                    38:8d:85:fa:a8:9f:6c:4e:bf:f1:f7:3d:b6:54:a8:
                    d5:d8:10:3b:99:59:c6:7d:d8:70:3e:50:32:7e:0d:
                    81:1f:cd:ad:c8:92:6f:01:5d:b9:33:34:f2:11:37:
                    47:61:84:d6:b9:60:fa:bb:e7:10:69:59:7d:85:87:
                    f3:80:12:92:a3:e6:8f:3d:95:de:84:49:21:25:93:
                    6d:96:61:7f:78:94:86:16:28:6e:1e:a0:75:a9:fd:
                    47:6a:51:14:9b:30:12:c3:0f:02:d7:81:98:08:1d:
                    73:90:a8:35:bb:b6:d2:ae:20:dd:d8:67:a4:b4:9f:
                    d9:5f:47:a3:47:1b:c6:c8:18:2e:ce:0a:bb:4a:a8:
                    35:e0:60:92:b6:78:69:67:cf:38:ba:91:02:df:00:
                    c5:cd:b6:36:d2:eb:85:15:95:a8:6b:9b:b4:57:b8:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4E:0B:53:12:7A:49:8D:2A:9D:13:92:06:6A:1A:98:E5:15:E4:AE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C930E60A271A11F09E3A5D67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.200.0/23
                  103.176.192.0/23
                IPv6:
                  2001:df7:2680::/48
                  2400:34a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:99:e9:19:18:88:6d:0b:61:d3:01:68:c8:a4:43:a6:90:81:
         6e:25:51:8d:71:83:95:93:0b:82:95:aa:28:69:c1:a4:3f:d2:
         ea:8f:f5:e0:42:b7:f8:4c:ab:db:d3:b6:39:7f:24:ac:fb:49:
         35:09:59:3c:2c:0f:8c:32:db:f7:8f:42:5f:a7:87:03:ee:7b:
         61:5a:ab:ff:58:74:99:7d:c3:20:ef:b9:17:47:6b:70:4e:c9:
         cc:bd:aa:23:c9:68:59:4b:e1:26:6a:ad:c8:c7:d9:53:9e:cf:
         56:8f:72:5d:22:7f:23:08:31:36:cc:f2:0b:25:a6:a0:a3:07:
         3b:89:77:00:4e:fe:c9:6b:64:8b:a3:fd:d7:c0:b8:ff:04:66:
         b7:9e:ff:8f:ce:58:1a:26:ec:ef:f6:e2:e8:9d:b9:ed:30:8c:
         81:17:8c:44:7f:66:b8:87:7c:53:e8:4d:ba:31:44:5f:f0:8d:
         30:a5:6a:fe:82:fa:21:fb:20:f2:2b:21:81:d1:a4:ae:39:60:
         bb:08:f9:31:44:a1:49:ea:21:a2:7c:d2:b8:57:1f:39:78:10:
         e9:ca:7f:a4:b6:5a:74:3c:9a:11:96:2f:dc:e7:ca:13:dc:b3:
         1a:23:81:6e:e4:10:0d:99:8a:be:a8:4f:04:8c:9b:8e:46:26:
         8c:df:3c:c1
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDANaIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjExN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMxNGMtNmJlZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMOF/oFYlFDWi6lvqnV6bPZm1xYL72xC1QFePE8w6f0ySlrYvZ6ZwgbjC3JB
VKImTqThm9n7brmtcBXevYKQit5AD46rbmtTR7qUsrJ+JN+hN1qpJrD1QCd7OI2F
+qifbE6/8fc9tlSo1dgQO5lZxn3YcD5QMn4NgR/NrciSbwFduTM08hE3R2GE1rlg
+rvnEGlZfYWH84ASkqPmjz2V3oRJISWTbZZhf3iUhhYobh6gdan9R2pRFJswEsMP
AteBmAgdc5CoNbu20q4g3dhnpLSf2V9Ho0cbxsgYLs4Ku0qoNeBgkrZ4aWfPOLqR
At8Axc22NtLrhRWVqGubtFe4f50CAwEAAaOCAn4wggJ6MB0GA1UdDgQWBBRBTgtT
EnpJjSqdE5IGahqY5RXkrjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M5MzBFNjBB
MjcxQTExRjA5RTNBNUQ2N0M0RjlBRTAyLnJvYTA9BggrBgEFBQcBBwEB/wQuMCww
EgQCAAEwDAMEAWdFyAMEAWewwDAWBAIAAjAQAwcAIAEN9yaAAwUAJAA0oDANBgkq
hkiG9w0BAQsFAAOCAQEAR5npGRiIbQth0wFoyKRDppCBbiVRjXGDlZMLgpWqKGnB
pD/S6o/14EK3+Eyr29O2OX8krPtJNQlZPCwPjDLb949CX6eHA+57YVqr/1h0mX3D
IO+5F0drcE7JzL2qI8loWUvhJmqtyMfZU57PVo9yXSJ/IwgxNszyCyWmoKMHO4l3
AE7+yWtki6P918C4/wRmt57/j85YGibs7/bi6J257TCMgReMRH9muId8U+hNujFE
X/CNMKVq/oL6Ifsg8ishgdGkrjlguwj5MUShSeohonzSuFcfOXgQ6cp/pLZadDya
EZYv3OfKE9yzGiOBbuQQDZmKvqhPBIybjkYmjN88wQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:34 2026 by rpki-client