Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
File:                     E491F456D8A011EB8F5C1925C4F9AE02.roa (raw, json)
Hash identifier:          y+aeaoqoQe8/u8hcmStz+GCglUz0ZrX57z9Muiu6BL8=
Subject key identifier:   9D:F6:DE:EF:14:CD:D3:CF:B2:2B:77:4F:91:03:D9:AE:D6:4E:18:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D465
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:31:44 +0000
ROA not before:           Thu 08 May 2025 16:10:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138229
IP address blocks:        103.124.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54373 (0xd465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:10:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4be50-dc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:9f:d9:d1:50:ea:6d:47:c5:a8:81:24:20:
                    66:44:ce:33:59:c8:c5:84:b6:5d:a9:9d:cd:be:3d:
                    a7:c6:0b:3f:df:97:be:94:36:cd:79:00:a7:29:2c:
                    a4:30:90:21:85:21:d1:12:33:9f:fa:53:a9:91:a3:
                    30:24:19:e4:83:a3:47:4e:92:23:31:55:f2:db:d3:
                    b3:d3:c9:6e:88:4b:68:63:04:9c:e0:16:74:c6:05:
                    1b:ae:d0:80:2d:f0:14:b7:aa:9e:84:b2:c0:0d:54:
                    98:37:b7:92:73:67:ba:58:8f:07:83:c9:d2:b2:4e:
                    a9:b8:4d:c8:d2:cc:90:75:d9:c9:88:07:18:d1:e3:
                    f6:40:91:df:e6:c1:ed:4a:56:53:4b:bb:f6:c4:13:
                    3c:98:8d:36:94:c6:40:1a:2e:88:e2:5e:f0:27:c6:
                    28:ef:e8:4c:5f:e8:7e:a3:f8:48:e4:11:3a:f5:5a:
                    53:b0:92:2c:71:2d:33:19:22:c4:85:40:a1:af:8e:
                    07:0e:ab:22:17:9f:ea:c4:80:5a:c7:4c:30:31:8b:
                    2c:d4:fe:e2:59:c0:b7:f4:d4:81:d1:8c:db:1c:9f:
                    89:22:34:07:35:81:88:1e:a7:35:c6:a7:8b:89:7b:
                    eb:97:1b:74:68:1d:97:f4:24:a7:19:14:63:c7:c8:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:DE:EF:14:CD:D3:CF:B2:2B:77:4F:91:03:D9:AE:D6:4E:18:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:3e:8c:04:93:a8:41:ad:9a:ed:98:a2:e8:90:05:71:2b:36:
         4d:38:fe:5b:35:b4:da:67:92:3e:3b:1c:28:f6:e6:bf:df:ce:
         02:7b:95:e6:b8:bd:61:5a:66:7c:2e:d4:6e:00:41:a9:f8:1d:
         ff:f8:79:76:cd:51:dc:06:bc:73:f6:40:37:a6:e3:ed:21:cc:
         fa:aa:75:07:9a:29:a9:b1:d7:25:21:5e:ab:0a:9a:53:39:c2:
         22:7d:51:82:fa:85:e6:1d:a4:18:6d:45:d0:0b:cc:9b:24:da:
         75:16:4f:f3:80:23:d2:e5:53:0e:6e:b5:2e:b9:e1:e7:ca:7f:
         e5:18:40:eb:7b:e5:8f:77:34:3f:7e:11:18:23:3c:7f:31:74:
         ac:16:d4:a4:0d:65:0b:b7:fe:3d:2c:d1:67:a7:9a:50:1d:72:
         ff:f2:6d:5a:5f:6b:f1:69:cd:0a:3f:65:89:78:d9:87:c9:56:
         c9:88:b6:49:be:51:5a:c1:97:04:95:e6:6d:91:10:42:b8:8f:
         cf:d3:7c:9f:88:7f:d4:c4:87:73:65:82:08:32:55:ea:70:13:
         b9:e8:eb:eb:38:38:53:ce:a6:75:14:a2:66:af:18:01:89:87:
         09:f4:a0:76:5a:84:80:fa:fa:61:69:83:1b:35:8f:36:2c:0a:
         f5:3e:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:43 2026 by rpki-client