Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4980DAA45E311EBB10CAF2AC4F9AE02.roa
File:                     E4980DAA45E311EBB10CAF2AC4F9AE02.roa (raw, json)
Hash identifier:          WphLfnOLp9wTon66/cNCygWJgLteoekkULrKWmwLp/o=
Subject key identifier:   0F:96:2D:53:3B:79:26:10:0B:40:1F:76:BA:C4:E1:08:BF:3F:EF:16
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D34A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4980DAA45E311EBB10CAF2AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:25:09 +0000
ROA not before:           Thu 08 May 2025 16:05:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135837
IP address blocks:        103.93.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54090 (0xd34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:05:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bcc4-0897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:db:83:05:43:4b:a2:7f:04:6f:6a:02:59:
                    da:78:48:48:15:36:29:ff:6b:2f:f1:32:d9:7b:7a:
                    c9:e3:9d:cd:63:21:06:70:4a:e1:cc:a2:ad:da:2c:
                    34:24:b6:ef:5e:fa:d1:a3:94:8e:89:77:6f:73:6e:
                    bb:f9:0e:c5:4f:e7:34:18:f5:a2:5a:c0:e0:e2:58:
                    75:94:7c:76:e9:e4:e8:2c:4f:d6:80:90:ce:db:11:
                    e8:f2:92:80:8c:1c:22:b8:c9:57:d6:8c:d6:9b:4b:
                    5c:44:84:7b:96:b3:08:7d:24:0d:2e:81:70:2f:9f:
                    db:b0:71:2e:be:fa:d5:49:1d:31:08:be:4f:7c:97:
                    82:cd:a6:01:9c:e2:0f:0d:8a:aa:83:1a:d6:3c:87:
                    dd:c4:5b:24:4c:e8:62:90:74:41:ed:50:9d:3f:82:
                    8b:bc:89:d5:a0:3e:cc:dc:06:db:5c:c3:9b:b6:60:
                    9a:8d:3e:e8:39:95:82:c7:6b:63:2c:fb:c2:83:dc:
                    8d:e0:64:a5:fe:ac:9f:74:5c:53:41:75:16:ef:35:
                    2c:5c:3c:f0:6d:b8:eb:8c:1d:03:1c:e2:cd:0f:43:
                    69:d5:67:24:ed:66:9b:89:9e:a5:62:4b:eb:08:5a:
                    ea:06:d8:ba:aa:b0:e3:fe:d0:96:78:d7:06:2f:cd:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:96:2D:53:3B:79:26:10:0B:40:1F:76:BA:C4:E1:08:BF:3F:EF:16
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4980DAA45E311EBB10CAF2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:95:e6:b9:21:c8:aa:d0:4f:fa:8c:35:45:1c:93:06:5f:
         95:7b:a9:65:a2:0a:5d:0e:69:7a:e4:8d:19:31:96:72:cb:e4:
         a6:f8:70:aa:41:32:37:a4:8c:c2:49:e2:66:9f:55:8c:aa:c5:
         59:1a:1d:81:be:c7:2b:98:a2:2a:30:14:e5:aa:b8:5b:9c:ea:
         75:b2:d3:cf:68:e5:c7:f7:28:14:4d:52:b6:50:62:3f:92:1f:
         1f:95:1a:58:a0:ca:f6:b6:05:21:96:87:ae:e1:64:97:85:2b:
         e6:61:4b:42:68:6a:fb:b3:ed:5a:3b:47:82:db:30:3d:0f:e6:
         b3:bd:a0:8c:59:ec:da:25:00:65:e9:88:86:76:d6:9e:77:17:
         aa:a8:11:45:d7:73:5e:31:52:71:8d:4d:59:85:b9:d6:96:60:
         8d:94:97:ab:ec:34:56:79:97:d1:a9:26:fc:5d:d1:44:4e:17:
         f5:97:ce:2c:7d:eb:dc:f9:c2:01:70:91:04:ba:1f:1d:96:84:
         25:3f:23:e8:ad:7b:64:c5:b5:49:b0:c9:20:1c:cd:57:1c:07:
         bb:dc:c7:14:0f:ce:8f:a4:9b:59:eb:8c:16:44:a0:69:ba:57:
         2b:fe:2b:a6:f3:40:38:16:19:94:5a:3e:36:6e:18:2d:c1:8b:
         dd:10:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:15 2026 by rpki-client