Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAE0D570A99411EC806B2763C4F9AE02.roa
File:                     CAE0D570A99411EC806B2763C4F9AE02.roa (raw, json)
Hash identifier:          KMy7/SRYx/vVSOF/JOaFKwTIzU8X4c7dkeuvEADv760=
Subject key identifier:   C9:BF:7D:19:5F:00:1E:40:D1:67:0C:30:92:F1:AE:B5:90:B3:8B:9D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6A6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAE0D570A99411EC806B2763C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:45:16 +0000
ROA not before:           Thu 08 May 2025 16:21:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149200
IP address blocks:        103.178.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54950 (0xd6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:21:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c17b-53af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:19:70:a1:a4:46:c9:89:39:df:da:80:3e:
                    b1:cc:7d:fb:92:46:91:ca:9b:0c:86:44:71:fb:46:
                    a5:d7:df:62:79:19:a4:ea:4b:50:25:b3:89:b5:e8:
                    14:42:17:3f:fd:16:1c:86:a1:04:35:7d:33:6b:76:
                    66:a0:09:7c:7c:b7:6f:7b:d1:2f:73:0b:92:7a:d6:
                    81:2c:ea:2f:72:3d:55:80:ec:a5:fe:a3:2c:f4:df:
                    da:7e:ef:4a:f4:88:6b:86:11:8c:13:c0:06:a2:d1:
                    b7:28:d5:c2:26:e6:00:8c:df:7c:58:7b:9b:c1:96:
                    10:0f:8c:1d:e7:15:31:5a:41:3f:40:14:a4:19:d8:
                    61:15:84:7e:d4:b6:e1:60:71:e0:2c:ff:cb:18:51:
                    80:df:1e:e0:bc:32:92:79:1f:7d:d1:82:0a:a9:5f:
                    c8:4e:56:9c:e7:5e:6f:32:97:f5:b3:96:56:c0:b6:
                    4e:9e:eb:ec:16:58:06:48:79:bd:c5:db:0c:99:9a:
                    9f:b6:3c:dd:2a:b5:0a:14:61:1d:34:26:c3:85:6a:
                    1c:f7:f2:7a:73:a3:26:6f:0a:d1:95:e2:e1:94:38:
                    ed:74:12:92:a6:43:a5:18:10:59:4d:0a:9f:0b:d1:
                    f1:58:91:51:78:61:39:3e:19:c3:1c:99:58:ea:f9:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:7D:19:5F:00:1E:40:D1:67:0C:30:92:F1:AE:B5:90:B3:8B:9D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAE0D570A99411EC806B2763C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:00:5c:35:d9:70:a1:9c:89:2b:86:71:3d:b6:cb:ae:74:6b:
         0e:e4:14:53:56:c9:fe:9d:45:a4:34:33:2b:2d:47:f5:c5:2a:
         e4:97:e4:e4:77:07:b0:d0:fe:79:cf:53:97:70:65:23:84:91:
         40:43:28:d6:e6:0f:49:a6:cb:06:0d:0b:5c:72:39:fe:41:b1:
         4c:47:ae:3c:9b:69:3d:8a:3c:c1:c0:f6:3a:39:11:55:4d:08:
         ee:7f:7e:fe:95:b1:c6:de:d7:ef:26:a2:50:8b:7f:3c:29:1c:
         a3:1c:28:b5:f5:54:6b:94:e9:87:23:1d:46:c0:e4:59:de:d5:
         ac:18:86:94:d7:bc:18:1e:46:bf:1d:ca:0f:39:1b:49:89:f8:
         f3:3d:f8:b3:77:37:ee:dd:32:cb:24:60:27:e8:91:00:b2:d2:
         36:53:a8:cb:35:84:c2:b0:f3:fa:4b:04:67:8c:0e:43:4d:4d:
         e5:34:39:22:3f:0e:e1:90:be:f3:a5:5b:09:be:7e:c6:79:8c:
         62:94:49:7c:df:55:d8:0a:66:59:61:03:83:47:09:c3:ab:54:
         f8:51:c9:82:de:bb:e5:35:0d:ca:e9:5c:fe:0b:be:68:b5:6d:
         ff:1a:9d:9e:fc:4a:e3:ad:04:92:6b:44:90:5b:cf:43:fd:39:
         cd:27:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:40 2026 by rpki-client