Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E857D1623ABB11EE80089656C4F9AE02.roa
File:                     E857D1623ABB11EE80089656C4F9AE02.roa (raw, json)
Hash identifier:          ArVADEkf5eVPdPMOXXuM0yd8hmdK3np1qd9dHo1nSrU=
Subject key identifier:   88:81:C3:7D:C9:AE:EF:00:95:E8:86:D9:2B:53:30:12:8E:C9:58:81
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E857D1623ABB11EE80089656C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:14 +0000
ROA not before:           Thu 08 May 2025 16:23:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149570
IP address blocks:        103.186.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55027 (0xd6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:23:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1f1-5f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:26:58:e9:b7:96:8b:12:53:1a:55:c2:46:
                    d9:73:96:f1:95:25:96:9b:9a:db:5c:46:22:59:71:
                    ee:53:f6:37:ca:73:c3:4c:06:eb:8c:95:f5:d2:32:
                    c6:3c:0e:59:12:29:32:8d:7b:f0:da:8f:23:59:ba:
                    0a:33:68:7c:e0:b0:e8:48:52:1d:58:8c:ff:0e:50:
                    7a:5b:b9:9a:02:ef:3d:85:9d:f3:4e:63:94:2d:17:
                    c0:64:f3:c5:e1:3a:32:0e:22:a0:70:ab:2f:66:fa:
                    c2:d1:24:9a:de:84:2b:a5:7b:28:30:b6:3b:3c:96:
                    c1:3f:c5:9d:83:4a:77:86:1a:7e:9c:75:c9:72:12:
                    b2:47:eb:c6:30:6f:f8:cb:9e:17:1c:7a:b2:6f:8e:
                    29:bd:0a:5d:ad:ca:58:ca:37:e9:a8:bf:55:65:3b:
                    25:2b:90:06:a8:10:b1:08:75:6f:d7:12:40:ae:e8:
                    37:4b:3c:b5:e7:87:04:62:a8:3e:39:35:2e:a7:b3:
                    b9:91:80:3e:11:24:d1:0b:2a:20:db:be:50:2d:fb:
                    36:13:4f:87:d4:5a:24:ea:58:56:bd:bf:ea:3b:65:
                    bb:46:5a:2c:c3:c8:83:9b:ba:38:db:05:38:e3:80:
                    10:79:e9:13:6c:71:3e:de:eb:76:a6:58:71:bc:ca:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:81:C3:7D:C9:AE:EF:00:95:E8:86:D9:2B:53:30:12:8E:C9:58:81
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E857D1623ABB11EE80089656C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:53:35:27:d0:6d:ad:bd:1b:44:3b:e1:db:8e:ad:a3:bc:
         55:4f:fc:f7:d9:59:24:09:ba:38:9b:79:80:57:1a:4d:19:1c:
         18:ce:74:91:1d:14:70:66:de:8e:ce:9b:5f:ed:6b:19:58:45:
         3e:7f:eb:e1:08:92:48:43:b4:16:8b:75:44:0a:83:c0:c4:d7:
         ef:9e:64:43:97:7b:85:5e:fb:71:9a:71:57:2f:c2:a6:eb:eb:
         a2:5c:97:ad:03:ef:5f:7c:c3:b6:1a:95:e4:da:dd:2f:95:09:
         1d:7f:e4:8e:58:78:db:eb:c9:e2:dd:9b:9c:83:e2:16:9a:73:
         6b:93:b5:da:c0:1d:81:cb:90:7e:7a:63:ef:ca:74:b7:6c:7c:
         a5:e5:9c:a2:c7:9d:b3:5a:c6:cf:a2:22:05:f8:76:aa:02:4d:
         89:dd:0f:1e:6a:40:08:31:8b:32:f5:40:9e:f1:ba:bc:3d:cd:
         35:a6:21:e5:5a:37:9b:36:9c:01:4d:43:d9:bd:a0:8b:4b:1e:
         3a:fe:17:f5:a2:21:75:e3:e2:92:e9:ee:96:9e:c2:de:b4:9f:
         f6:c9:c7:32:28:63:41:7c:9f:08:5a:71:83:75:a1:68:7f:5e:
         d0:b6:72:8d:25:35:a4:a5:fc:8f:f9:01:b5:a0:92:44:e5:40:
         14:96:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:29 2026 by rpki-client