Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0F7F310D9F911ED90712E4FC4F9AE02.roa
File:                     F0F7F310D9F911ED90712E4FC4F9AE02.roa (raw, json)
Hash identifier:          CeSVfx9cb7nF9O7GMFeIldZyg10/j5PapeqPE339HOg=
Subject key identifier:   31:00:A7:1F:14:DF:1E:EA:18:0E:72:27:0E:12:89:32:40:89:8D:64
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D4FD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0F7F310D9F911ED90712E4FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:35:19 +0000
ROA not before:           Thu 08 May 2025 16:13:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139565
IP address blocks:        103.147.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54525 (0xd4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:13:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bf26-7432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:c0:ce:42:a0:3d:7c:11:97:ee:c4:35:70:
                    e8:54:d9:8c:dd:1a:2d:10:34:a5:b9:3b:69:87:b9:
                    8b:03:95:7c:ec:ff:0f:0b:b0:90:f5:a5:d6:a1:d4:
                    ec:74:f5:d8:0f:73:ae:7b:e5:4c:1c:ef:60:a6:0e:
                    d2:11:e1:e5:a1:0e:90:f9:54:cb:e1:c3:10:9b:a7:
                    2f:d0:4e:0b:11:9b:ef:46:34:7a:e5:a9:10:69:2e:
                    47:74:df:87:ec:c4:c2:48:6f:8e:78:2c:6d:ad:87:
                    e4:4f:52:13:86:c9:67:a0:bd:b5:52:d1:1e:0b:ea:
                    99:d8:78:bb:8b:36:7f:6e:08:c3:29:89:c7:83:87:
                    ad:a6:5b:61:78:c9:69:e9:10:cf:fb:4a:43:18:90:
                    bc:f7:26:c2:dd:f2:15:af:da:25:f3:74:72:e8:0a:
                    b4:cc:a7:10:a6:5f:16:22:66:c1:65:0d:d8:11:db:
                    33:e8:f1:f4:80:86:c9:75:30:44:74:24:96:0f:db:
                    12:85:a4:8b:54:83:67:91:d7:4b:fd:1d:f3:76:e7:
                    50:ff:05:ea:52:e7:da:ea:6a:09:40:58:ee:63:9e:
                    92:ab:36:de:39:75:b6:cb:b4:7b:51:db:ed:b6:03:
                    a6:c8:16:95:46:4d:fe:9c:14:30:d3:32:6e:b0:09:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:00:A7:1F:14:DF:1E:EA:18:0E:72:27:0E:12:89:32:40:89:8D:64
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0F7F310D9F911ED90712E4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:4f:cb:01:0e:ab:da:31:11:3d:0b:7e:a0:c1:bf:75:7b:
         64:80:ee:b5:ae:5c:ea:56:11:53:d8:19:3c:cf:73:2f:4d:dd:
         96:33:d7:bf:70:3d:fa:3e:8b:bd:ec:8b:ca:ac:46:d1:de:c8:
         9f:00:d9:29:49:78:40:3b:a4:49:e2:80:7c:49:d8:2b:24:63:
         17:0b:62:c0:a1:c3:b8:c6:13:93:1c:2a:88:8f:4a:50:1d:d4:
         e5:5c:90:9d:f1:00:e9:10:21:76:f6:68:df:47:76:3d:44:8d:
         36:ed:e6:52:86:b3:5a:51:8a:91:a5:51:57:4c:34:93:50:5a:
         b6:0a:b5:c3:dc:d8:b7:59:08:9f:63:7b:de:67:20:0b:d3:2f:
         9f:44:c1:95:09:c8:ba:b9:7c:c7:3a:02:e4:f8:45:e2:8b:26:
         e3:1f:c4:b9:77:d5:b8:ec:18:99:d3:a6:12:97:9a:4a:2a:6d:
         a5:f1:24:a3:c2:a1:c3:b2:22:32:b1:03:c3:cd:e0:ca:0c:c2:
         00:a0:b7:77:4a:49:48:85:70:8a:4d:f4:78:d8:34:81:a6:23:
         60:8f:b5:a8:6f:bc:e8:97:8f:48:4e:ae:6d:f7:a4:1f:85:af:
         1f:32:d3:cc:09:88:ef:68:f5:f1:ca:08:f0:a9:d0:c3:8a:ff:
         78:2b:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:17 2026 by rpki-client