Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/D865F69A233111EE813C5D26C4F9AE02.roa
File:                     D865F69A233111EE813C5D26C4F9AE02.roa (raw, json)
Hash identifier:          i4fkr2yi7rKl11iHs6wQVlIoLCufxpnrDVj0EZBu5xg=
Subject key identifier:   5A:F8:AF:E9:6A:EE:80:F8:F3:E3:79:8D:A1:81:BE:E2:45:98:45:65
Certificate issuer:       /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial:       021E
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/D865F69A233111EE813C5D26C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 03:35:51 +0000
ROA not before:           Sat 25 Apr 2026 03:35:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151076
IP address blocks:        103.129.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
                          rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
        Validity
            Not Before: Apr 25 03:35:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ec3697-3992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f0:51:35:55:06:f1:01:a7:80:97:ae:98:6a:
                    ae:84:01:2a:ae:d4:fd:7e:b0:5a:eb:5a:ee:04:92:
                    2e:31:16:51:96:d1:cd:a1:62:9e:98:7d:ac:de:0d:
                    c8:72:6e:38:e5:72:b3:55:b6:d9:6d:7e:79:7f:37:
                    cd:3f:59:dc:31:c8:fc:54:67:89:a7:ba:e6:07:b4:
                    06:d4:7a:0d:0e:19:1c:a2:31:ba:5d:74:99:30:39:
                    e3:fb:0e:4c:9b:2f:e2:3b:2e:7e:58:a7:29:02:5d:
                    4d:62:6f:cc:13:e9:15:c7:06:7a:44:2f:4e:a6:f3:
                    b9:e7:17:16:df:51:79:50:a5:94:70:fd:96:ea:f2:
                    62:94:b1:ac:e5:9c:02:e6:8b:e3:db:16:aa:93:f0:
                    5c:b6:c2:8e:41:8a:a5:74:f5:e2:cd:f6:05:b5:29:
                    d6:58:65:56:33:d9:8f:fd:60:d6:d5:e0:3e:57:7d:
                    f7:11:3b:fb:64:1f:b4:10:ce:02:dd:54:1f:25:76:
                    80:f9:0e:6a:45:7b:d6:a3:ec:0e:bd:65:98:6c:50:
                    39:17:2f:6f:eb:e2:72:c4:dc:a5:69:3d:63:de:ec:
                    d7:6c:9a:b0:8e:3b:35:48:01:32:62:41:ae:06:2c:
                    2a:3e:97:9b:74:40:15:fb:16:9c:ee:8a:92:09:fd:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:AF:E9:6A:EE:80:F8:F3:E3:79:8D:A1:81:BE:E2:45:98:45:65
            X509v3 Authority Key Identifier:
                keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/D865F69A233111EE813C5D26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:82:75:d4:b2:d9:a8:4a:fa:05:da:6e:e6:7a:da:4a:a3:
         56:ef:94:2c:90:c9:d0:ff:06:4c:2a:24:d5:ae:42:76:a1:a6:
         93:bd:ca:c0:4f:1e:fa:25:fe:f3:f0:66:f0:a5:f7:5b:ea:24:
         bc:dc:12:43:17:e4:6d:96:df:10:cd:92:47:72:66:cc:2a:d1:
         79:21:48:12:7f:9a:33:77:56:5e:25:4f:2b:8e:2d:50:95:ef:
         53:97:86:3e:50:bd:d0:da:4a:85:e0:65:8c:fe:0b:40:24:cc:
         aa:09:d8:dc:24:a0:19:64:21:57:6a:06:9f:61:94:ea:21:8a:
         19:61:9e:4f:71:38:82:3c:60:80:ac:5d:c9:29:1f:d3:a9:9c:
         50:e5:e9:68:86:3d:50:0d:49:81:e5:2b:94:99:75:4e:dc:4c:
         0a:2d:c4:9f:bb:ff:c4:bd:a2:bb:07:35:1b:2f:03:ac:26:bd:
         73:29:dc:b2:01:c2:3d:c7:70:0b:3a:5c:b8:eb:0e:30:17:c3:
         6a:68:5b:67:82:30:af:b1:d9:b8:95:52:2e:69:92:a4:b4:ef:
         14:5e:74:73:b1:c7:99:0e:0e:c5:8d:53:42:30:cd:f2:82:24:
         70:52:7d:21:62:d9:e9:5d:85:bc:da:94:b9:a5:5e:86:14:20:
         03:e3:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:38 2026 by rpki-client