Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B301322BEE11F0A26D1537C4F9AE02.roa
File:                     F8B301322BEE11F0A26D1537C4F9AE02.roa (raw, json)
Hash identifier:          ieOVbxDgFV4cnUYcqrRK7WamL9XIK6qaAo1lQfSa3Bc=
Subject key identifier:   04:5F:8E:2E:E4:C7:1C:2D:81:43:A4:1D:53:5A:45:18:CB:2A:B7:40
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D442
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B301322BEE11F0A26D1537C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:30:46 +0000
ROA not before:           Thu 08 May 2025 16:10:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137634
IP address blocks:        103.115.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54338 (0xd442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:10:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4be15-2680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6a:3a:a5:58:72:61:a7:5e:e1:7a:0b:75:2d:
                    a7:a5:26:4f:17:f1:a1:46:a6:45:c9:52:11:48:8b:
                    e0:6c:98:85:6a:7c:51:33:19:9d:ec:4f:b2:cc:35:
                    3c:e5:b4:40:b6:33:cf:e7:ed:7e:ec:1c:03:9f:ed:
                    c6:f4:75:33:4e:66:9a:0d:1a:46:1c:3c:02:47:89:
                    b7:51:f4:02:2b:85:cc:a7:95:b0:ad:b4:f9:b5:50:
                    3c:1e:7f:d5:93:74:7c:2d:05:52:4d:93:37:6d:e8:
                    87:df:90:28:dc:de:a0:6b:8e:b7:e5:a6:40:42:16:
                    e9:cd:b3:1d:be:a2:ff:8f:21:67:15:1f:53:4b:45:
                    71:54:bb:f1:66:5a:cb:21:49:77:ee:0b:4f:87:1d:
                    3c:5a:e7:5e:23:94:54:ad:0d:fc:71:b8:3b:59:6d:
                    96:b6:a1:2a:d6:9c:38:71:ce:f2:a5:5f:f9:06:9a:
                    c6:52:3a:5c:ec:89:31:64:7d:62:6f:0b:8f:3a:26:
                    aa:1e:d2:bb:90:8f:7a:0d:d6:eb:b2:9b:c2:bb:0d:
                    88:4d:59:88:5c:4a:b4:fd:2c:a4:15:75:2e:e5:96:
                    88:cb:c5:2a:28:eb:80:4d:44:2d:c6:82:11:2f:62:
                    c1:8b:ca:51:46:0a:2a:84:b2:1a:ed:a8:33:96:c4:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5F:8E:2E:E4:C7:1C:2D:81:43:A4:1D:53:5A:45:18:CB:2A:B7:40
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B301322BEE11F0A26D1537C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:65:87:bc:e8:5a:2d:12:6d:01:5f:71:82:f2:f0:bb:0f:3e:
         07:1f:02:b5:5c:b4:57:32:0c:78:22:a3:7d:d6:ee:ab:a4:64:
         31:88:d2:36:03:e7:02:e2:7b:2f:40:cb:22:b2:7f:a0:f0:79:
         d3:71:15:36:30:c1:b0:0b:8f:65:7a:29:8d:f2:76:1e:67:bb:
         c7:78:f0:62:ab:da:3c:5b:8b:01:94:ea:6a:c0:03:5c:e5:a1:
         9a:34:c7:b2:bc:d2:f3:dc:69:96:d5:20:21:b8:8b:1c:08:df:
         b0:09:04:87:58:00:b7:7c:eb:1f:5a:9b:89:2c:6c:0e:28:41:
         f4:91:84:f6:1c:b2:8f:28:e7:33:49:a8:f5:53:07:78:0b:08:
         1d:e0:e5:24:e1:b1:ea:64:b3:7b:ad:7d:77:45:3b:74:41:35:
         63:73:ec:d2:43:26:88:6b:7d:d3:da:dc:9f:bf:4d:3d:96:c8:
         db:be:78:18:a5:2b:36:f8:42:61:fa:c6:e2:72:62:33:27:af:
         00:1f:15:81:fd:11:a1:50:94:b2:a0:40:43:5a:0e:06:8a:21:
         f1:6a:c3:f7:01:c8:76:86:2e:cb:ee:0c:cf:c9:91:86:77:ed:
         76:8a:9f:d9:0a:16:1c:f5:3a:d6:ed:7e:8c:fc:b8:ea:5e:7f:
         8e:8a:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:33 2026 by rpki-client