Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/859913AC900211F18B14F35E3E11F970.roa
File:                     859913AC900211F18B14F35E3E11F970.roa (raw, json)
Hash identifier:          xgG+ITGmLpBX4gYdZwLHOJ+uogsOha6TJ844c+9P1PY=
Subject key identifier:   D6:17:89:54:CF:72:9A:94:7A:79:45:E8:6A:D1:65:22:8F:C3:E4:04
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FD17
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/859913AC900211F18B14F35E3E11F970.roa
Signing time:             Tue 22 Sep 2026 08:13:41 +0000
ROA not before:           Tue 22 Sep 2026 08:13:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154094
IP address blocks:        103.162.166.0/24 maxlen: 24
                          103.162.167.0/24 maxlen: 24
                          202.1.16.0/23 maxlen: 24
                          2402:7460::/32 maxlen: 32
                          2402:7460:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 10:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64791 (0xfd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 22 08:13:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ab238b5-555d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:93:60:e9:37:07:14:91:f9:59:52:07:f7:
                    ab:c4:3f:ee:ec:e5:e7:65:96:87:6c:81:73:f6:7d:
                    f8:ce:0e:de:86:7d:0b:c5:20:47:dc:55:dc:f3:df:
                    c3:7e:8d:28:a3:2f:f6:1f:41:79:33:2c:f4:d5:cb:
                    e4:dd:d3:38:4c:67:b5:8e:56:b6:e8:83:a2:36:e4:
                    49:72:0f:ca:e1:ff:42:66:27:81:61:c3:96:b8:16:
                    82:20:c9:eb:0a:34:05:38:00:80:14:f0:5f:67:b6:
                    69:cd:96:f6:39:27:f0:6a:55:c3:ef:42:02:51:c4:
                    f7:0a:ef:91:e6:57:6a:d2:9c:cc:4d:33:b8:ec:7c:
                    8b:10:31:3c:12:1a:f2:d3:cc:15:4f:b6:43:bb:04:
                    9d:52:4f:60:ec:e7:76:59:9e:a3:e3:e2:70:ad:b1:
                    4c:e6:01:6f:fc:0b:40:98:ab:2a:c8:4d:be:bb:59:
                    4e:bc:6f:d3:02:65:65:a7:27:22:8b:a6:ae:32:2e:
                    35:59:72:17:69:ce:00:9f:02:ef:bb:23:83:da:83:
                    88:d9:65:e4:04:b9:f3:81:2b:1d:de:af:fa:b8:47:
                    73:49:c0:0c:b9:9b:b3:23:32:97:83:1c:62:c8:17:
                    e3:84:9d:3d:26:34:bb:a9:8a:e1:36:f7:00:9e:75:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:89:54:CF:72:9A:94:7A:79:45:E8:6A:D1:65:22:8F:C3:E4:04
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/859913AC900211F18B14F35E3E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.166.0/23
                  202.1.16.0/23
                IPv6:
                  2402:7460::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:a7:d2:6a:29:87:5b:25:47:2d:92:35:83:38:c0:64:92:44:
         af:09:9d:e9:5e:f5:89:8c:4e:c7:9f:1b:e0:44:21:93:6c:94:
         4e:eb:53:43:8f:38:71:cf:a3:74:ac:ce:74:68:19:0d:9a:1c:
         e1:28:09:81:a0:93:1f:4f:60:4c:ae:60:94:da:97:3a:c9:2a:
         53:11:f4:72:9f:f0:24:b4:c0:d0:53:b7:3d:40:ff:cc:c6:2c:
         63:e5:47:f0:15:28:96:8b:94:59:84:b3:2f:21:a6:86:02:53:
         58:6f:ff:a1:14:13:c4:5a:9e:d5:ed:30:c2:d2:fa:7b:6e:2a:
         64:e3:e8:c3:8e:37:5c:2c:72:67:31:f9:d2:d7:89:9c:2d:2d:
         9c:9f:0b:5e:8a:08:62:c8:49:b2:e4:61:d1:ca:37:34:91:dd:
         a6:56:8d:f4:b3:88:1e:db:57:4e:d9:90:6f:86:ba:58:4e:1c:
         be:2c:7b:ba:ec:fa:21:bc:52:51:a0:42:0d:79:cf:b3:71:4f:
         c4:ff:a4:98:26:7c:78:4e:7d:5f:26:01:c1:3b:d5:f4:8b:31:
         af:3b:1a:af:3c:fa:7e:8a:aa:5f:2c:5f:6c:fa:22:2a:91:36:
         5d:ce:90:14:26:8e:44:5b:be:fa:8e:8a:b0:66:2b:bc:4d:e5:
         b2:72:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:05 2026 by rpki-client