Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/B029CB28E36C11EF876EED6BC4F9AE02.roa
File:                     B029CB28E36C11EF876EED6BC4F9AE02.roa (raw, json)
Hash identifier:          PyU6A1DhRXU6i/qPmYU5NKhtcCkvx6iikxDn+GpKOmg=
Subject key identifier:   88:3D:D5:2E:C4:C3:96:6C:9B:1B:C1:8F:15:BB:F8:C4:90:72:B2:C2
Certificate issuer:       /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial:       0299
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/B029CB28E36C11EF876EED6BC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 03:35:33 +0000
ROA not before:           Wed 29 Apr 2026 03:35:33 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     24499
IP address blocks:        103.122.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
        Validity
            Not Before: Apr 29 03:35:33 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f17c85-5702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c4:8d:23:1d:01:26:7d:e2:81:c9:42:a3:8d:
                    29:56:ce:3b:7c:77:97:2a:db:86:ef:83:55:6b:a7:
                    b9:95:b0:ee:bd:da:65:5e:91:8a:5e:d1:5c:c2:48:
                    48:9c:46:9d:8b:48:5d:71:92:ce:06:11:ac:33:e7:
                    36:aa:b5:e0:6b:42:fd:9c:30:fd:1f:df:a2:f9:24:
                    92:a6:4d:38:a6:3b:76:61:28:63:b8:5b:40:89:10:
                    09:eb:1b:1f:1b:71:cc:45:a3:e7:b6:99:50:79:11:
                    69:5d:cf:e4:a4:7e:da:07:9f:61:a7:aa:6d:46:9c:
                    d2:70:64:f9:20:47:88:db:25:b0:67:16:58:da:2c:
                    2c:66:e6:e7:a5:91:38:0a:fa:8f:c1:e0:17:82:40:
                    50:1c:cb:72:e2:9b:5c:3f:d7:69:f8:06:08:3d:88:
                    fe:a5:8c:45:af:6d:1d:e2:50:31:2f:9b:39:7b:b4:
                    6d:74:bb:4a:f1:ab:65:4c:19:3d:40:51:72:e1:50:
                    f0:79:bf:b3:54:60:42:f3:94:ef:9c:e3:44:0e:3e:
                    6d:f2:2a:2c:1d:34:c1:9c:5e:54:f3:a5:2c:c8:48:
                    2e:3e:cd:38:6d:d5:cd:aa:d2:5c:56:01:22:11:7e:
                    85:e3:a6:88:0a:08:b6:84:fd:87:d7:3c:66:81:62:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3D:D5:2E:C4:C3:96:6C:9B:1B:C1:8F:15:BB:F8:C4:90:72:B2:C2
            X509v3 Authority Key Identifier:
                keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/B029CB28E36C11EF876EED6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:21:8d:d0:32:55:7d:12:03:cc:0e:b1:59:9c:88:ad:46:11:
         ac:1e:86:3e:17:b3:c9:13:dc:97:cf:c1:32:d5:47:9c:55:fa:
         61:f0:2a:86:7f:55:00:01:4e:f3:98:53:be:7e:a2:28:4b:e9:
         a9:55:e6:22:c2:04:78:df:fd:79:1d:45:61:3f:64:fe:ff:6e:
         e9:8b:72:0c:f7:a2:d3:6d:64:12:52:38:c7:5b:17:66:f3:54:
         81:3e:0a:d0:28:75:af:6a:d5:ae:ac:55:ef:cf:71:81:b7:07:
         35:dc:04:f1:af:86:c1:7c:c1:c3:e6:fb:ee:cb:db:a9:f8:dc:
         a7:92:97:25:d1:c5:81:8c:50:30:5e:92:99:51:27:f9:0d:74:
         40:77:28:c5:b5:93:4a:77:94:40:6f:fc:24:fe:28:a4:a6:97:
         be:94:c5:91:2d:48:f4:97:4f:07:ec:d2:55:b6:00:0b:e6:d6:
         77:4a:05:a6:12:af:23:08:49:58:36:bd:90:7e:97:c2:05:a9:
         52:e9:a5:98:42:ef:43:8a:96:79:ea:48:33:50:b2:e6:cb:12:
         f8:b6:19:36:bb:ee:cf:4b:23:84:11:d6:75:6a:2f:a9:f1:eb:
         46:3b:4b:46:95:1f:6a:67:aa:7c:84:ac:55:76:9d:fd:b2:e6:
         e9:6e:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:45 2026 by rpki-client