Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D90A77A228A611EBAB193C69C4F9AE02.roa
File:                     D90A77A228A611EBAB193C69C4F9AE02.roa (raw, json)
Hash identifier:          8oljdXh26dgBRmGsMmbt0AS8H5JvG3PJ1I072wQwUUE=
Subject key identifier:   71:21:A4:E3:1E:68:97:A8:18:24:F6:69:D5:D7:F2:98:F5:2D:E5:31
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D1F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D90A77A228A611EBAB193C69C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:17:39 +0000
ROA not before:           Thu 08 May 2025 15:58:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133313
IP address blocks:        103.238.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53752 (0xd1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:58:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bb02-586c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:5d:d4:50:b6:44:dd:47:9b:da:6d:62:13:
                    d5:23:f4:30:8d:19:d4:12:88:9d:52:76:dc:eb:05:
                    71:41:e0:30:8e:8a:18:d3:3a:81:d9:bc:f1:fa:4e:
                    a3:b5:0b:ac:09:32:7c:a5:ee:c3:37:14:75:82:5a:
                    8a:48:03:78:e1:cd:5a:5c:1f:b7:7b:63:cb:a8:1a:
                    ab:23:bf:a2:76:81:f5:97:96:45:35:96:9e:cd:78:
                    67:80:1a:91:8a:46:61:5f:d2:5f:c9:a4:37:b5:88:
                    9c:f3:5c:f6:44:45:e9:5f:15:33:9c:25:c8:81:9a:
                    46:6f:47:cb:74:4e:bb:db:46:36:ee:31:63:64:73:
                    b6:ed:b7:e5:c8:ed:07:29:00:bc:cf:0f:8a:d5:68:
                    b2:f7:7a:60:77:52:82:37:ad:72:e2:92:8e:3b:51:
                    bb:ce:54:3a:c3:a8:17:50:c2:ff:22:3f:2e:9e:81:
                    82:48:d3:5b:f4:e0:3a:f7:f7:84:f8:47:30:e9:39:
                    e4:0b:60:7a:2f:dc:84:14:5c:5c:4e:ab:3e:1d:45:
                    76:f8:19:bc:1e:ad:74:71:ec:92:20:f2:bc:95:b5:
                    c5:c0:64:88:34:37:1e:4d:ca:d1:60:29:16:a7:bc:
                    2e:eb:7b:c6:16:27:27:09:4f:74:92:76:53:be:92:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:21:A4:E3:1E:68:97:A8:18:24:F6:69:D5:D7:F2:98:F5:2D:E5:31
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D90A77A228A611EBAB193C69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:34:35:a6:9f:2e:22:2a:59:69:f1:5d:e0:b9:4b:ef:e7:32:
         ed:da:d1:37:6d:09:9f:c8:43:71:83:39:ab:48:8c:7f:30:6d:
         9f:3e:b1:fa:3d:cb:01:af:05:7e:4f:de:4b:d9:c8:73:be:88:
         5a:49:59:a6:41:f7:8a:bb:a2:d5:a0:2f:42:fe:06:a0:1c:9e:
         0b:38:1c:c3:96:85:27:97:59:d5:db:0d:f6:33:78:85:aa:c6:
         07:59:21:84:5d:36:e3:c8:fd:c2:5b:59:b5:6c:bd:90:8a:44:
         fa:17:43:c1:32:17:72:2b:b9:bf:43:68:75:15:e9:d2:4d:24:
         6b:95:70:dc:ee:7d:dd:e7:69:fa:db:61:68:1b:b9:bb:28:b1:
         d2:8a:0d:d3:39:f9:93:d3:c1:e7:ba:26:91:cb:65:60:10:7f:
         4f:63:b8:04:76:4d:41:50:cd:db:db:84:bf:e6:b8:55:8e:6c:
         03:bc:b2:76:f2:e4:8f:39:7f:41:51:8c:c4:e5:2b:a8:a7:7e:
         ef:62:ab:a0:7f:55:f8:a4:b4:27:fe:6b:e1:64:4c:c5:3f:78:
         89:b6:9d:a5:c9:e3:5c:b0:74:91:5c:b2:cf:1b:ba:74:a9:e7:
         6d:29:9c:76:e7:8a:39:3a:d9:4d:38:63:a9:3e:89:7e:39:d4:
         d8:49:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:40 2026 by rpki-client