Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3C8FE32989011ECA9CA0034C4F9AE02.roa
File:                     F3C8FE32989011ECA9CA0034C4F9AE02.roa (raw, json)
Hash identifier:          hs48xkR8xwXUSd8YpLHFf+csnYqdrGfdVKpYXRsV32M=
Subject key identifier:   06:4D:36:E8:34:E4:BC:8C:1B:00:48:1B:B0:8E:D6:70:B1:06:03:08
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D554
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3C8FE32989011ECA9CA0034C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:37:21 +0000
ROA not before:           Thu 08 May 2025 16:15:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141293
IP address blocks:        103.159.182.0/23 maxlen: 24
                          2001:df1:ddc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54612 (0xd554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:15:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bfa1-5081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:65:96:0a:26:fb:39:d3:f4:08:d4:32:81:
                    b8:ca:cb:ab:f5:56:ad:1c:e2:6d:66:50:c8:a7:92:
                    8a:82:83:34:cf:d5:0b:7f:d9:67:55:39:04:5d:61:
                    12:03:fd:6a:68:5b:97:87:a9:f5:df:82:da:3e:62:
                    57:db:99:db:c5:bd:29:42:87:0c:b1:13:d9:5a:da:
                    c7:04:cd:ff:1b:7a:93:bf:da:21:0e:ee:63:77:be:
                    5e:b6:ff:a0:3c:c7:08:a9:19:40:7a:c5:a8:05:8f:
                    34:1c:d2:71:50:25:25:d4:96:44:10:18:ca:e0:88:
                    ae:30:7f:c3:f1:99:2d:ba:56:4d:23:e9:4b:7e:9b:
                    e0:ec:6d:5b:3e:34:cd:ca:23:85:01:4d:8c:fa:b1:
                    9a:42:ac:1f:f0:11:ab:1b:b9:2e:f7:61:7e:e2:55:
                    76:dc:b3:97:dd:e5:1d:03:a5:1f:76:7e:fa:df:a3:
                    4b:88:01:9e:72:2f:a9:e6:11:64:5e:d4:ef:ac:49:
                    a8:e5:9a:1f:9f:4c:40:17:d1:85:cb:aa:a1:fd:74:
                    4c:3e:35:78:fb:42:19:81:50:45:65:70:a4:a2:6b:
                    ef:fa:52:3c:4f:e6:7f:ee:74:ee:db:58:42:43:30:
                    5c:e5:7d:a1:58:c4:5d:1d:8e:e5:6d:4e:97:9a:79:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4D:36:E8:34:E4:BC:8C:1B:00:48:1B:B0:8E:D6:70:B1:06:03:08
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3C8FE32989011ECA9CA0034C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.182.0/23
                IPv6:
                  2001:df1:ddc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:30:c4:86:74:d5:c6:7a:2c:23:6a:d5:7b:51:ef:23:38:73:
         02:05:02:4f:ae:76:df:16:59:0e:a2:ea:cc:15:a0:b6:f9:73:
         44:b7:47:5d:a4:0e:ab:02:2a:fa:57:e9:b3:77:65:22:9b:61:
         b3:3f:6c:0e:14:ee:69:40:15:bf:d8:41:04:3e:55:96:c5:e1:
         09:86:93:85:04:c5:ee:1f:0c:6f:1d:0b:1e:1a:7b:cc:b0:26:
         ce:0b:67:a3:56:63:53:80:68:f8:ec:a7:86:e0:f5:48:eb:99:
         dc:c8:eb:6a:2d:ff:0a:61:ec:fc:1c:2d:04:3b:71:4f:c6:48:
         14:b3:67:7c:0a:22:30:21:23:bf:0f:85:99:84:21:40:fc:35:
         27:28:0b:81:73:28:5a:84:3f:19:3b:85:63:ac:09:b8:8a:b5:
         8e:94:75:c7:82:36:3f:30:51:fd:25:5c:54:e2:eb:47:f1:d3:
         0b:a0:57:16:d7:49:94:fb:44:93:80:0b:4e:b9:87:15:14:ca:
         cf:a1:61:b0:c3:7e:cb:1f:29:05:3d:b0:9a:af:77:a0:32:72:
         4b:16:24:d1:8b:b7:0d:88:3f:f7:4a:d2:09:32:e1:ce:fc:93:
         32:f4:3b:b6:23:95:b2:ea:c0:16:21:ea:9b:42:53:63:fc:66:
         ba:b3:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:17 2026 by rpki-client