Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/BEB5E328397011EDA97F630EC4F9AE02.roa
File:                     BEB5E328397011EDA97F630EC4F9AE02.roa (raw, json)
Hash identifier:          J9UUSEwKqauquMmKvfncZPjjMkXwX/cwJi3gEdCy2os=
Subject key identifier:   AB:16:B8:12:C3:DA:48:25:FA:DE:AF:3A:3C:E3:44:81:24:21:FF:7A
Certificate issuer:       /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Certificate serial:       0299
Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/BEB5E328397011EDA97F630EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:08:47 +0000
ROA not before:           Wed 01 Oct 2025 02:28:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137869
IP address blocks:        103.7.192.0/23 maxlen: 24
                          2001:df1:4bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl
                          rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CE56, serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
        Validity
            Not Before: Oct  1 02:28:51 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a42c4f-2519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:51:80:c4:e9:31:d2:9c:da:d2:bc:98:c1:ab:
                    f9:6b:13:cf:54:93:79:1e:7f:a9:8f:33:5a:bc:92:
                    70:31:14:18:58:93:94:c5:5d:38:92:bb:3c:15:54:
                    d0:b3:e1:15:86:d3:da:95:e4:18:d0:e1:43:1a:7d:
                    c2:b8:b7:02:14:87:63:6e:04:e4:92:43:50:39:ac:
                    d8:bf:5e:7a:0d:f1:1e:db:c3:55:d9:f9:e5:9d:ee:
                    9b:3c:1a:2b:6d:16:2b:a5:39:b7:50:19:c9:f0:e7:
                    38:87:e1:93:2f:cf:de:5d:95:cc:5b:df:e7:8c:7d:
                    d0:5f:69:e1:3f:38:f5:c2:fb:b6:c2:9e:7a:0f:db:
                    b7:e4:5f:b0:9e:42:72:c9:c1:fa:fd:41:f5:d4:42:
                    53:7b:85:ff:c0:e3:d9:67:71:8b:ae:0c:96:6d:7a:
                    ba:11:d2:da:b3:f0:4b:78:8f:90:2b:6a:54:71:ec:
                    ff:33:ca:18:13:48:aa:bb:a1:b7:85:25:14:97:2f:
                    cb:fc:6f:a0:93:f1:6c:ac:3b:6c:8d:0c:ee:99:3a:
                    60:7a:ff:eb:51:3a:5d:29:84:1a:ff:4a:fd:0f:e4:
                    5c:83:9a:d0:4b:86:5d:1c:c2:3a:77:72:42:62:18:
                    28:7c:05:f7:a0:f3:11:bc:0a:25:47:75:54:db:d4:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:16:B8:12:C3:DA:48:25:FA:DE:AF:3A:3C:E3:44:81:24:21:FF:7A
            X509v3 Authority Key Identifier:
                keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/BEB5E328397011EDA97F630EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.192.0/23
                IPv6:
                  2001:df1:4bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:6f:27:67:10:aa:30:59:6e:a1:67:c8:50:87:e5:b3:b8:
         d1:67:01:d8:d3:00:30:56:ea:b8:7f:07:1f:af:4b:32:cd:62:
         66:7d:7b:2f:ef:02:b1:2c:94:c3:ea:78:e8:6d:a6:1c:f6:b6:
         03:1b:5f:1f:25:1e:57:d0:4c:f9:80:22:e3:4c:bb:aa:6b:48:
         f4:e0:f1:60:65:25:c9:27:70:4d:9f:67:3c:4c:91:e2:4e:c8:
         4f:39:7d:d7:92:e4:8d:be:4b:25:93:12:2b:69:d8:85:3e:7d:
         bc:74:73:ca:84:79:b2:77:b1:69:4d:8b:40:15:1d:6e:f1:59:
         98:f8:08:cb:46:02:55:06:b8:c9:5a:12:2b:6b:89:74:aa:70:
         83:96:05:97:49:29:fa:b8:ce:6c:48:a6:d5:c9:1e:aa:99:92:
         c6:29:67:75:db:2f:04:23:f5:6d:12:7e:d4:ae:c5:e4:e8:56:
         a4:96:b0:39:67:51:96:fd:27:39:09:3a:db:a2:00:ce:78:5f:
         95:ab:3d:c4:f6:ee:07:cf:a9:21:d3:c3:4f:6f:ff:c0:a9:2b:
         b6:13:e9:81:18:67:6e:c0:0d:b0:64:b6:9e:fb:d4:7d:cc:a8:
         ca:1f:d0:5a:ee:fd:41:c7:37:c2:8f:f9:4a:5a:18:cc:8e:62:
         30:33:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:37 2026 by rpki-client