Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa
File:                     E648A3D6F6D511ECA1D6171EC4F9AE02.roa (raw, json)
Hash identifier:          0USs0saS2jkt20hnEE5+sopAp3s5FwYn4AH/VP4L4P8=
Subject key identifier:   81:05:2C:6D:58:0C:A0:00:43:CE:8C:43:0F:65:BE:DC:7E:BE:EC:0B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D87C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:55:04 +0000
ROA not before:           Thu 08 May 2025 16:30:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21788
IP address blocks:        103.156.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55420 (0xd87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:30:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c3c8-1f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:eb:7c:0a:41:c8:35:d2:17:50:7c:cf:0e:
                    f6:d4:bf:d0:08:cd:7b:0a:10:5c:5b:9d:77:90:f8:
                    b1:72:01:15:66:d1:4e:cc:c7:17:cf:2e:ae:e8:2b:
                    f9:f6:9b:13:a0:d2:9e:4d:21:b3:cb:07:9e:10:12:
                    b9:49:4d:ab:71:e2:99:87:a1:c7:b8:82:a0:d2:e0:
                    d0:2e:5e:fd:49:49:89:12:6d:2a:b8:b3:a8:36:50:
                    74:fc:32:b9:93:b4:49:ef:c4:64:f9:3d:e6:f5:53:
                    78:74:d4:0d:12:ee:ce:fc:d6:f7:3e:85:20:65:2d:
                    c5:d5:b7:22:19:3d:c7:66:3c:94:72:2f:39:c3:78:
                    0a:cc:f9:c9:63:c4:18:20:09:de:6c:58:db:2d:d4:
                    d5:2f:2b:b8:cb:55:ec:36:bb:57:58:e7:62:7e:a3:
                    d2:fe:e3:db:57:ed:6c:a5:af:92:f6:ac:ee:4a:c3:
                    1d:b0:0e:d8:57:57:39:75:ce:2a:18:56:40:18:10:
                    71:4f:c9:96:a4:61:45:b3:a6:9f:ad:78:84:af:d6:
                    43:c2:ad:26:52:01:b6:a8:48:78:80:63:18:15:97:
                    63:4e:11:2a:fb:e8:57:eb:47:40:92:4b:56:be:06:
                    69:fe:67:ff:85:7b:c2:e7:ff:88:7c:72:f3:b7:08:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:05:2C:6D:58:0C:A0:00:43:CE:8C:43:0F:65:BE:DC:7E:BE:EC:0B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:52:98:f8:b5:53:64:e7:ed:fa:ce:7b:04:ab:8a:68:09:5d:
         73:56:78:45:e2:59:52:10:a6:a2:af:50:a4:50:bf:eb:e0:e5:
         5f:44:97:2f:f6:ac:ac:d6:cd:cd:76:9e:f8:d7:22:26:71:1d:
         d7:a4:f4:1f:fc:3e:f6:dc:2c:ce:1a:7f:33:19:1a:32:df:a4:
         2e:39:52:a5:24:73:3a:4a:ae:cb:31:1b:33:96:a1:0b:d5:27:
         b0:b2:96:16:dd:01:db:97:3d:94:29:cd:42:4c:43:82:96:22:
         72:69:aa:32:31:0b:12:35:03:32:82:36:55:26:9b:2e:cb:0e:
         09:68:90:a4:52:ae:88:3d:2e:47:03:8c:07:65:bc:92:46:2b:
         29:df:d2:33:58:01:24:fe:f8:35:50:25:ea:24:1b:6a:dd:f6:
         9c:ae:3a:9a:e9:a7:4c:41:a3:dc:ca:a4:76:61:45:11:c8:fb:
         94:ef:69:d9:fd:24:32:6f:f2:f3:5c:26:08:b4:b2:ca:35:4a:
         a3:13:78:99:fb:9e:f3:01:0a:0f:28:8e:67:97:78:cb:a5:74:
         9c:27:74:cd:e9:0c:5c:69:10:1d:92:8b:f6:22:42:3c:4f:60:
         6b:99:f0:15:94:3a:c8:7c:39:03:a4:b9:23:96:46:c3:77:81:
         32:f9:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:24 2026 by rpki-client