Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DB655E20A411EE93C9E280C4F9AE02.roa
File:                     D8DB655E20A411EE93C9E280C4F9AE02.roa (raw, json)
Hash identifier:          vbwbWWLCegP/PvFCDZ6PDRVZlIlecWhjoKqOmxtv/U0=
Subject key identifier:   83:B9:80:AD:74:BB:50:56:98:F7:35:18:9A:CB:C0:CD:8B:53:3A:ED
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DB655E20A411EE93C9E280C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:21 +0000
ROA not before:           Thu 08 May 2025 16:23:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149577
IP address blocks:        103.94.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55032 (0xd6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:23:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1f8-fdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:0a:a5:f9:8c:5e:48:c3:63:e3:7d:ae:96:
                    81:bd:e5:2b:f0:f4:ad:ac:45:a3:bd:95:25:c7:5f:
                    05:d9:41:0c:45:d4:5f:cc:5e:8d:7d:36:57:1b:0a:
                    d2:83:27:76:81:b0:da:b3:08:e1:24:9f:34:aa:c4:
                    9e:4e:ba:73:9b:f4:5d:bb:31:54:06:fc:2f:83:ea:
                    e2:ed:dd:f0:e9:e9:51:47:3b:01:18:99:d5:f8:58:
                    fb:9a:0f:3a:5e:d2:af:16:16:3f:83:95:69:00:a0:
                    ea:68:08:99:ca:cf:70:96:8e:c9:dc:dc:c0:e6:50:
                    3a:cf:8d:14:6a:f2:ad:a2:4e:fb:21:db:29:d8:60:
                    66:c3:7e:5d:e1:ba:2d:2f:9a:c3:92:72:d6:43:d5:
                    87:eb:d1:08:9d:0f:b5:fb:8b:21:0c:44:9e:9b:df:
                    06:51:a0:71:24:b0:ac:fe:06:50:41:9d:20:31:a3:
                    b4:33:46:67:77:d0:f2:f1:00:57:4d:b0:eb:a8:8a:
                    43:17:65:24:24:07:0f:39:58:2f:e1:49:a8:6b:4f:
                    77:71:62:15:ff:79:f9:39:bb:5c:55:a2:ee:65:5f:
                    36:64:bf:67:71:cf:8e:6d:d3:a5:2f:30:30:97:03:
                    69:b5:4e:bb:ce:0a:28:b2:39:84:67:01:4a:71:6f:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B9:80:AD:74:BB:50:56:98:F7:35:18:9A:CB:C0:CD:8B:53:3A:ED
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DB655E20A411EE93C9E280C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:31:ca:65:3c:a6:29:83:bb:b3:2e:ef:75:29:4e:65:36:7a:
         56:7a:c2:c9:05:73:4f:b2:ca:7d:cf:bd:ef:22:0f:25:18:fd:
         04:19:b7:39:e8:ef:f7:85:2b:f3:2e:61:fa:44:f5:d9:ed:71:
         93:5d:17:ee:44:a2:f6:0b:0a:31:0d:3a:20:81:3b:56:c7:5c:
         03:11:94:eb:8a:9e:a0:61:15:6c:ac:a2:6b:24:7a:bf:64:66:
         bd:cb:96:de:49:cd:81:03:8a:3e:2c:c8:37:ea:11:2f:0c:c7:
         9c:00:d7:5e:8d:30:55:4e:ab:97:19:62:de:f4:3c:e8:99:9b:
         50:84:29:8a:7c:86:0c:6f:76:98:7b:03:01:fa:e2:d3:6d:05:
         e4:f6:a8:73:68:92:68:e8:9f:2e:37:55:3f:36:ab:e6:f1:0c:
         62:27:cb:37:9f:0b:f1:b4:f4:63:5d:a8:fb:38:b6:c0:bd:df:
         63:0e:d8:d6:cb:e9:40:72:0f:f5:6b:fb:13:d1:b6:3d:88:08:
         01:47:b8:92:fd:61:4b:2a:ca:98:8e:d5:de:45:4d:59:ae:5e:
         15:0f:2d:1e:85:c5:e2:29:24:54:9e:d4:5b:d8:cb:a2:ea:71:
         c3:9c:6a:ef:a4:4a:24:06:32:20:2d:ed:54:2a:ce:5c:2d:fd:
         05:03:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:39 2026 by rpki-client