Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
File:                     F8A8459E839811EE9359CD1BC4F9AE02.roa (raw, json)
Hash identifier:          9LOtUkaRfX/fwAyoF/8H3PX+LbeJxHEIW3W4dnNsXrA=
Subject key identifier:   87:23:A6:8B:F3:ED:9A:11:5F:A0:51:45:B8:32:B6:44:F0:4A:87:A1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D45F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:31:36 +0000
ROA not before:           Thu 08 May 2025 16:10:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138035
IP address blocks:        103.187.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54367 (0xd45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:10:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4be48-9d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:32:12:a5:e7:36:88:43:00:cc:ec:4b:3f:
                    fd:c9:52:c8:69:50:bc:76:1f:7d:91:72:64:dc:59:
                    27:6f:b4:85:49:0f:fa:61:1b:42:ae:d1:0a:40:c0:
                    f7:6c:57:f2:b8:8e:1b:c6:4a:16:39:3c:05:02:a6:
                    00:5f:e3:f6:ca:aa:11:c0:13:53:88:d3:24:2c:f1:
                    e9:70:9e:79:2a:66:2a:e2:d5:fc:ae:aa:5b:7c:0b:
                    63:10:26:8b:87:41:67:f6:46:45:a0:6d:48:a9:b8:
                    63:a7:bf:2a:57:d8:63:b9:ba:24:fe:56:50:1f:f7:
                    a3:c3:9c:b0:52:6f:92:2c:44:59:6f:1b:24:24:a6:
                    19:9f:ab:d0:b2:b6:8f:df:a8:5e:c0:f3:ad:25:4d:
                    73:cb:9d:22:0a:26:12:10:2c:d1:17:6d:d2:91:86:
                    f4:2b:00:7a:29:28:c4:39:3b:db:23:2c:37:43:7e:
                    9b:30:24:a5:48:b7:d3:93:d6:10:9b:cc:1b:62:d7:
                    f8:82:8f:07:dd:5f:be:e1:50:b1:21:36:9a:06:58:
                    a8:30:3a:bb:53:d5:8d:a8:5a:1f:99:c2:eb:9f:22:
                    6a:7d:c5:fb:bc:47:5a:d9:3a:c6:03:31:93:4d:e9:
                    f3:1b:45:37:63:17:c3:85:31:9c:b3:d7:cf:5b:dc:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:23:A6:8B:F3:ED:9A:11:5F:A0:51:45:B8:32:B6:44:F0:4A:87:A1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:25:d0:6d:03:8b:2f:c3:cf:0e:49:17:5a:17:98:f0:a6:a3:
         49:e8:7a:ed:71:f4:11:41:4e:48:3e:01:54:c6:23:51:8c:e0:
         20:e4:e7:b8:44:8f:e9:0f:a4:83:a1:c8:20:5a:2a:41:8f:8f:
         78:fd:88:29:b8:15:a9:11:d8:f4:1e:5a:74:56:97:37:ff:c3:
         59:25:ac:fa:31:22:a1:bb:19:52:98:75:39:ff:4a:eb:19:53:
         83:1d:2e:36:f4:21:c7:d5:ac:e8:e0:cb:f7:b7:b4:53:24:b4:
         16:e8:fa:1f:c4:64:09:4a:2a:c3:5c:d8:ce:9e:95:d9:3c:11:
         d0:43:9a:49:4d:a1:63:91:d7:0e:6f:05:87:d4:3d:e7:a9:90:
         e8:82:21:78:2b:3b:d1:2b:36:e0:bb:97:d4:29:3a:fe:21:ea:
         97:88:21:26:e2:7e:de:cd:49:0b:5e:02:19:ba:4d:6e:8b:f5:
         f1:c1:3d:84:4c:55:bd:df:0e:19:0c:bd:ab:77:42:f3:39:91:
         c7:e0:22:c2:21:85:5a:bb:33:65:82:8a:0c:61:1c:1b:c1:27:
         40:95:09:04:ad:b1:0f:ce:bd:76:f9:fc:5b:b5:46:a8:83:4d:
         2f:b1:87:8d:4d:1c:6e:f9:ef:2d:26:83:f7:19:5c:13:1b:c2:
         86:13:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:32 2026 by rpki-client