Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/583F2920A6E611EF9BD0C728C4F9AE02.roa
File:                     583F2920A6E611EF9BD0C728C4F9AE02.roa (raw, json)
Hash identifier:          jPVq1FqdO/7Sa1Zo63l4DDlY46514aXTAgnERyot6WE=
Subject key identifier:   AC:B0:A5:35:97:96:30:73:A1:B5:40:3A:33:BA:F9:D3:64:B6:B5:4D
Certificate issuer:       /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial:       139A
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/583F2920A6E611EF9BD0C728C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:45:52 +0000
ROA not before:           Wed 24 Sep 2025 17:36:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138197
IP address blocks:        103.129.208.0/24 maxlen: 24
                          103.129.210.0/23 maxlen: 23
                          103.129.210.0/24 maxlen: 24
                          103.129.211.0/24 maxlen: 24
                          2403:8840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
                          rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5018 (0x139a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
        Validity
            Not Before: Sep 24 17:36:18 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44310-6c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:3c:7a:2d:b2:d7:bc:a9:90:10:55:2f:d5:
                    9f:0b:31:53:5f:14:7d:a9:0b:5c:5c:3b:8f:e3:aa:
                    f0:c3:ee:ef:08:47:d7:9d:3e:bb:12:78:d5:c5:a6:
                    63:c2:a2:d2:30:d4:58:42:a3:bd:35:96:90:de:fe:
                    5a:48:11:6f:9a:c8:c6:87:8c:50:d8:32:32:43:c0:
                    ed:f1:4e:25:2e:6e:c7:d3:f4:78:e5:d5:93:1d:57:
                    9e:4b:cd:02:5e:1a:f1:00:97:9e:fd:ce:b6:71:0f:
                    32:db:94:0c:01:10:29:41:ab:5a:9a:19:9b:62:c2:
                    03:37:39:56:d3:75:d4:cd:b4:8b:1a:ca:9d:63:9c:
                    47:c2:7f:7a:19:72:bc:f5:c4:af:d7:f7:83:bb:dc:
                    d2:74:c7:b5:1e:ce:85:58:9d:6e:bc:04:67:5e:56:
                    c9:62:7a:4e:8f:99:db:1d:ea:76:a9:6e:a7:58:9e:
                    45:11:7d:ed:7c:61:ae:df:f2:bd:c4:25:83:f1:35:
                    2c:3d:15:80:e9:18:c1:df:06:9b:94:5c:82:e1:f0:
                    bf:72:49:32:f1:f6:ba:2d:2e:58:be:67:2e:ac:b2:
                    6b:21:de:aa:29:eb:28:9d:59:47:7c:f3:bc:56:5b:
                    30:a4:86:08:27:b0:c3:3d:4b:46:70:af:c9:4d:7e:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B0:A5:35:97:96:30:73:A1:B5:40:3A:33:BA:F9:D3:64:B6:B5:4D
            X509v3 Authority Key Identifier:
                keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/583F2920A6E611EF9BD0C728C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.208.0/24
                  103.129.210.0/23
                IPv6:
                  2403:8840::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:13:da:67:65:e1:35:d9:58:06:b3:84:3e:57:e1:d6:c7:d8:
         a6:26:e6:51:8a:3c:28:d1:02:b9:9e:09:0a:65:7b:f3:94:bc:
         d2:7d:f1:d2:2e:c4:fc:6c:5c:40:92:f6:4f:13:b9:f2:be:3f:
         a1:19:17:76:4e:b7:06:e9:4f:92:09:b1:ab:c0:2e:45:0f:b1:
         28:5e:8c:81:66:3f:f7:49:f5:cc:59:a6:8f:9e:31:77:6b:2f:
         83:a2:cd:88:a7:c2:ae:ec:c0:fb:78:44:aa:5d:6b:b0:c7:e7:
         78:1f:41:86:b2:a6:fc:c3:df:a4:03:c3:01:4e:40:39:0d:c4:
         ad:a4:89:33:75:ab:8a:49:9b:9f:9f:60:8a:04:d1:0f:28:0a:
         41:a7:e6:9d:c0:83:4b:69:ed:46:4a:e7:d8:4a:7b:94:77:d8:
         8a:c0:0b:2f:19:3c:26:ac:89:d8:68:bf:74:75:31:ad:2c:81:
         6c:80:13:a4:30:d9:1f:3a:b8:9e:f2:40:5a:89:4f:37:e4:a5:
         16:90:d7:e2:81:af:21:6d:b3:01:e0:88:5c:8d:d9:f7:ff:68:
         76:7b:24:a2:66:a7:8d:d6:f3:35:c7:82:94:3d:98:63:7c:29:
         dc:b7:63:c4:9b:af:6b:18:5b:fd:00:b2:f0:ff:b8:36:f3:e8:
         02:b9:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:54 2026 by rpki-client