Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89A026C43FA911F196D1EF0CBF833773.roa
File:                     89A026C43FA911F196D1EF0CBF833773.roa (raw, json)
Hash identifier:          caq3euw3dbWXnCeaAq1TYMRt9eVB0w7XgsqPD8vD0mY=
Subject key identifier:   DA:6F:9E:77:9C:88:6F:95:24:54:32:F2:EF:8A:14:9E:0B:CF:A1:50
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DF3F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89A026C43FA911F196D1EF0CBF833773.roa
Signing time:             Fri 24 Apr 2026 06:48:02 +0000
ROA not before:           Fri 24 Apr 2026 06:48:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151176
IP address blocks:        103.255.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 10:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57151 (0xdf3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Apr 24 06:48:02 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69eb1221-f262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e7:24:c6:e6:09:3a:89:9e:c3:75:65:68:5e:
                    b9:56:e7:01:b9:e5:8f:9b:18:67:bc:44:dc:27:18:
                    79:7d:f6:a2:07:c0:2e:b1:f0:1c:4e:6f:30:38:37:
                    29:8d:83:02:37:d9:45:e9:76:96:3f:35:fe:5b:80:
                    71:f1:45:17:af:0f:1e:c0:97:df:25:0e:e5:49:e8:
                    c8:c4:5f:2e:dc:c8:b5:86:cb:59:65:ca:4e:90:d5:
                    00:3e:fc:90:48:23:83:a0:ed:7a:3d:70:27:f2:25:
                    7b:83:8e:26:42:d1:db:37:86:d4:1e:c4:6a:44:08:
                    60:d9:74:ce:e5:04:99:61:d2:24:3e:a4:c7:9a:d9:
                    cf:11:28:6a:05:62:c8:53:7c:ed:69:89:0f:81:9d:
                    b2:07:af:87:0f:99:9e:d0:7f:2c:93:70:1b:c0:8c:
                    fe:f1:08:7e:9e:64:bc:2e:eb:db:40:09:3a:27:9e:
                    ac:07:8b:00:e1:9a:24:33:20:ba:f6:fe:02:e7:c4:
                    ec:26:1e:51:09:67:a6:75:6f:eb:d7:96:54:0a:07:
                    13:ae:2c:1f:92:ce:3d:13:a9:4b:79:1f:19:ec:26:
                    bb:53:36:bb:df:37:e2:56:82:88:a7:44:98:cd:79:
                    ae:d1:1e:ab:7e:f2:88:82:b7:ac:15:2b:f2:55:90:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:9E:77:9C:88:6F:95:24:54:32:F2:EF:8A:14:9E:0B:CF:A1:50
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89A026C43FA911F196D1EF0CBF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:86:7c:52:df:f5:38:5f:b9:c1:a3:15:a6:f7:63:2c:8b:92:
         cc:3e:f3:eb:f5:91:c9:18:d5:94:e4:92:29:0b:fe:07:2c:b5:
         37:95:8b:87:71:ec:ec:1d:5f:00:d2:b2:86:34:5c:01:cb:89:
         60:be:a7:e5:3a:7b:bd:02:8c:b8:aa:9d:96:0e:a0:a4:9a:1f:
         d1:d1:79:53:6b:bb:51:b3:12:3a:35:22:5d:ba:10:60:ca:45:
         ce:9a:4b:6d:cb:8b:ca:1d:7f:97:be:d2:06:6c:6b:98:0e:43:
         d4:3f:9e:e8:62:50:4b:5a:3e:14:ae:62:44:94:89:f3:bc:77:
         a4:08:ff:13:cd:7b:63:57:43:f8:3c:02:cb:5d:e6:b8:f9:b8:
         f7:d6:b4:ee:9c:0f:e5:d4:9b:19:98:b4:94:c0:53:be:5e:55:
         fe:45:64:ea:71:1c:bd:5c:ff:16:e8:79:51:2e:b5:ee:d0:62:
         e0:ea:7c:2a:43:28:a6:cd:1e:61:f0:19:f8:01:87:bc:15:04:
         9a:94:82:1e:1d:b4:9c:46:c0:96:81:3e:5d:6b:a7:69:21:4f:
         5f:52:73:e2:93:94:2f:e1:46:83:fd:25:84:30:7d:e6:41:d8:
         69:48:51:a9:4b:d8:0c:94:9a:91:0c:ca:18:99:db:93:4c:ec:
         53:d1:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:46 2026 by rpki-client