Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa
File:                     F44DE9A8687011ECA192E768C4F9AE02.roa (raw, json)
Hash identifier:          7+7FzlYARfgT69VgU+JybydNjhr3PKx/tHgILofupjQ=
Subject key identifier:   FB:FC:9B:9D:F0:C9:A1:B9:AD:54:9D:C7:F4:E8:1B:2A:D2:E8:BA:CF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D3E3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:28:35 +0000
ROA not before:           Thu 08 May 2025 16:08:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136722
IP address blocks:        103.101.134.0/24 maxlen: 24
                          103.185.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54243 (0xd3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:08:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bd93-9cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0c:49:3d:55:2d:2d:15:b3:8c:9a:0a:d1:e7:
                    40:c9:e5:2c:8f:31:d7:47:56:20:5e:53:ea:00:5a:
                    e1:02:c3:4b:97:fc:b2:a0:ba:d8:9e:39:35:25:14:
                    4d:32:82:28:2c:f2:a3:d8:d8:98:c9:dd:a8:f7:de:
                    24:08:ec:85:73:eb:c4:0c:40:fb:38:01:9c:fc:cd:
                    b0:1a:9a:b6:e3:36:29:28:b9:43:a2:17:53:2c:a2:
                    83:f8:60:19:32:4f:e3:75:0a:f2:81:7c:84:f6:9d:
                    4c:a7:e8:0d:d6:46:ea:d4:8f:cf:71:a3:04:cf:0a:
                    fc:8c:6f:24:16:fd:50:45:bf:a1:2c:3a:e1:74:ee:
                    fa:d6:3b:d3:95:2f:7d:dd:f2:7a:a7:45:c9:7d:6f:
                    99:85:81:72:d3:08:ca:7a:c1:a5:59:83:83:65:7e:
                    41:2f:80:20:8a:76:c6:54:9d:c1:b3:27:f0:62:c2:
                    63:c4:ca:52:09:88:75:71:84:4f:6b:65:ad:83:f9:
                    33:2b:4c:9c:29:de:c6:12:c2:78:60:eb:ae:2b:87:
                    f6:01:3e:dc:aa:70:fb:8b:fa:b5:37:d5:23:43:4e:
                    ff:5f:0c:c7:ed:2f:1c:84:2b:4e:31:f3:f8:52:16:
                    2d:2b:09:63:12:17:27:44:ac:59:c8:42:4c:5e:ca:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FC:9B:9D:F0:C9:A1:B9:AD:54:9D:C7:F4:E8:1B:2A:D2:E8:BA:CF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.134.0/24
                  103.185.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c1:83:81:b0:86:5f:f9:f6:75:d1:71:b4:bd:90:eb:28:c9:
         5e:4a:b6:da:ea:f7:27:f7:ca:ea:d9:86:fa:15:36:e0:87:2e:
         88:9b:10:83:44:12:c4:bc:18:50:cd:73:09:41:7f:60:c6:ae:
         bc:40:6d:d2:c6:42:40:54:f0:e6:a0:c9:f0:c4:c1:96:8e:dd:
         7c:4e:cd:47:41:8d:1d:3d:ad:97:43:c6:9f:3e:e4:43:a8:e6:
         d6:ff:12:b9:1c:b2:de:04:4f:fb:e1:bf:cf:e5:72:09:63:24:
         d1:66:97:ae:29:08:90:e9:ed:8e:05:cd:27:79:f0:9b:78:2b:
         db:9a:c6:7c:2b:3c:a7:b5:40:c4:7e:52:07:2d:86:ae:6c:29:
         f2:50:de:76:a8:08:d7:7c:3e:0d:df:06:44:72:58:18:f3:df:
         81:d4:ba:8a:f6:8c:48:13:2b:ef:74:30:14:b1:5d:38:a1:0e:
         3d:d4:95:ac:73:bc:a8:b9:22:e3:a7:eb:44:0b:71:a8:c9:19:
         1c:66:de:40:bb:b7:d0:f5:20:9c:68:ea:4d:f8:5d:63:aa:fe:
         99:50:04:62:c4:36:ad:73:0c:5f:ef:72:be:39:ad:2b:9e:5c:
         d2:de:0e:ca:70:1a:2e:92:b9:43:0b:27:5e:ca:29:28:32:83:
         ab:eb:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:26:01 2026 by rpki-client