Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa
File:                     D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (raw, json)
Hash identifier:          adNVp+jeKpiI/DZRqFAXkjDO248rnrJta6jKv+gGFM0=
Subject key identifier:   CE:3E:FD:1D:C1:BC:A7:D5:E6:AB:04:30:8C:98:F2:8E:A5:74:50:34
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       110B
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:26:40 +0000
ROA not before:           Fri 30 Jan 2026 17:15:01 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     137955
IP address blocks:        103.103.194.0/24 maxlen: 24
                          103.116.192.0/24 maxlen: 24
                          2405:1340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4363 (0x110b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Jan 30 17:15:01 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a468c0-2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:c8:ea:bd:a0:82:7d:8e:ec:66:ef:d2:ad:
                    bf:2c:b2:9e:b1:cd:02:ee:a7:ea:39:9f:35:dd:c2:
                    99:22:a2:ee:3d:df:6b:ed:b8:03:dd:48:7e:2a:37:
                    2c:46:cf:4c:6d:ff:21:8d:65:b3:d6:d3:4d:b7:dc:
                    2a:21:bf:b3:81:b9:c3:c7:6b:fb:2a:34:d0:0b:b6:
                    0e:df:3b:c6:3a:43:32:f2:34:48:3c:e5:7b:e4:df:
                    0d:93:93:0a:23:ba:4b:8b:06:e7:ed:79:c4:0f:6e:
                    87:1e:c1:c4:f6:e1:21:17:44:d1:4b:0e:1b:71:57:
                    87:29:eb:bd:75:1c:36:95:f2:e4:04:18:40:f9:2a:
                    ef:9b:4d:22:0f:a8:24:c9:27:1a:a1:7c:d4:a6:be:
                    13:9a:54:c9:7c:0a:a3:07:37:b1:1c:16:07:b3:10:
                    a7:c5:d4:f1:2c:6a:95:f8:e0:76:d2:72:3e:e8:36:
                    26:47:5b:8c:9c:c2:c8:82:0d:e3:69:90:bf:ef:73:
                    49:f8:ce:83:e4:5c:21:53:5e:c4:ea:25:16:b6:ed:
                    f9:97:b3:34:2e:b2:84:ff:06:fe:df:21:09:e7:60:
                    b5:f8:3c:bf:03:15:ec:70:f7:2f:f8:eb:ea:07:bc:
                    66:b2:fe:8d:f7:34:3b:df:b6:44:14:a3:0a:ad:97:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3E:FD:1D:C1:BC:A7:D5:E6:AB:04:30:8C:98:F2:8E:A5:74:50:34
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.194.0/24
                  103.116.192.0/24
                IPv6:
                  2405:1340::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:2d:92:f7:2e:5e:6a:9d:49:98:8e:81:b7:39:a5:4a:f7:17:
         ff:80:29:a6:e9:7b:69:2c:9b:34:70:03:52:16:69:1a:6e:ff:
         48:d9:2c:a4:34:ad:92:f0:a2:45:ad:38:73:d1:21:0c:46:cb:
         d4:8f:a0:c5:5e:a5:25:8c:c6:f0:6b:c4:83:ad:4e:dc:50:2b:
         d7:ef:90:8c:c2:e8:27:a9:c5:9c:1e:73:1a:60:ad:38:d0:e1:
         8a:a5:fc:e5:b0:2c:cf:f8:b3:c9:0c:45:d3:98:c1:6b:c4:c4:
         56:10:c8:24:18:eb:8d:45:7a:00:38:05:a0:a0:9c:01:0c:f1:
         9c:d6:5a:40:5a:e0:d6:7d:47:9b:ee:fa:1f:dd:44:8a:6c:11:
         f8:74:01:d6:a6:99:ec:37:ce:77:de:fe:d2:98:6c:7d:f0:f6:
         1b:24:b2:d1:fd:89:2f:06:21:18:b5:13:8e:73:92:c8:7c:53:
         e9:39:55:66:d8:eb:23:f8:d4:2a:7e:0f:28:cb:0c:70:5c:3c:
         5e:75:4e:59:62:ed:4e:6e:c0:fd:36:7e:96:50:2e:65:71:b5:
         f7:3c:97:b7:7a:7a:6d:ef:de:e6:05:f9:e9:60:5b:cf:a8:f3:
         3c:63:49:31:2a:55:24:3e:d9:01:fc:0d:5a:e2:a2:44:a9:88:
         cc:07:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:48 2026 by rpki-client