Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa
File:                     D0763FECA68A11EB9F23D74FC4F9AE02.roa (raw, json)
Hash identifier:          N3q1uf5+Rh2DPcAvlgwRY0LjrkAYYmogkX8/JqaD7MM=
Subject key identifier:   0A:D5:74:55:D1:2E:D9:D6:7E:52:45:D4:CA:D6:76:47:B7:1F:38:7E
Certificate issuer:       /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial:       0697
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:47:21 +0000
ROA not before:           Sun 04 May 2025 22:34:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.166.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
                          rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
        Validity
            Not Before: May  4 22:34:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fd19-0cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:04:ac:fe:c8:f7:56:1d:52:47:b4:9b:80:
                    16:a6:1f:1b:b3:a3:95:48:06:7e:ee:fe:68:a2:7d:
                    87:30:02:ea:47:60:b2:45:38:ef:42:6d:94:91:6b:
                    de:ee:c6:50:ed:f7:ca:78:4b:33:0c:fa:a8:85:1e:
                    62:58:76:eb:64:2d:a7:ff:4a:67:57:04:55:89:a8:
                    99:55:3e:df:6e:d6:49:9b:4b:40:54:7e:56:f4:a3:
                    c0:17:68:81:c1:e6:32:f2:7a:49:f0:6e:9f:bd:30:
                    73:8b:ef:d4:5a:68:d1:00:ec:5e:4d:86:c3:6b:e5:
                    e7:b0:76:da:cd:18:3a:aa:2b:a3:43:84:54:7b:96:
                    8b:f3:17:10:21:9f:2e:92:63:eb:60:b0:ea:32:99:
                    5f:2a:14:03:dd:86:99:25:66:2a:ba:cc:3f:ee:88:
                    83:8c:f2:45:22:f1:b2:4f:ab:19:43:81:af:0b:dd:
                    d1:2e:a2:a5:47:19:1a:cf:b9:b5:6d:c3:a7:e3:59:
                    c1:af:07:2b:2a:41:1f:48:d4:73:ab:3c:13:43:ee:
                    65:eb:d8:a5:be:e8:06:08:40:13:b7:8b:36:94:b1:
                    d8:08:58:79:5c:e3:6d:8f:4a:6c:fb:e1:ea:5a:38:
                    a7:5a:52:65:e9:5b:9d:64:f2:9b:40:aa:09:3e:e2:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D5:74:55:D1:2E:D9:D6:7E:52:45:D4:CA:D6:76:47:B7:1F:38:7E
            X509v3 Authority Key Identifier:
                keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:0d:11:4b:f7:80:5a:7b:37:11:ca:cb:1b:69:cd:68:e6:
         4c:79:a0:e6:90:24:6f:06:42:6a:f5:c1:03:4a:79:b1:9e:30:
         cd:5e:c8:e8:9d:42:e9:b5:7c:92:3c:25:4d:47:07:1d:c0:96:
         2f:af:a7:82:e1:e0:53:6f:b5:05:27:18:6e:ae:cb:62:93:a9:
         1c:78:c5:0d:2a:a7:03:60:3a:5a:3f:05:d9:4b:37:b0:31:bf:
         b8:c8:87:5c:43:72:59:4c:54:a7:9a:0a:06:43:db:cb:29:03:
         5b:1a:60:af:4b:87:ff:2a:33:29:90:fd:43:06:e3:44:91:45:
         f4:fc:4e:9a:84:9e:57:a3:db:85:a0:8c:f4:f2:fa:69:de:50:
         51:af:2f:b8:ed:b7:44:43:fe:1c:f6:90:75:87:62:80:2e:76:
         bf:aa:c9:b1:15:90:88:d0:ce:47:45:dd:7b:d3:15:3a:0c:81:
         70:43:ac:b1:c2:ef:0f:f4:58:95:e3:30:9d:59:83:96:42:f0:
         72:ad:f9:71:56:0e:ba:d6:6a:19:d5:fb:c5:bd:53:ae:3f:da:
         0d:d8:9e:bc:cb:a7:cd:cf:cc:cf:19:29:bc:22:70:88:ef:f8:
         f6:9a:32:2f:c6:97:fb:2e:6d:31:a3:b0:bc:d1:14:42:45:d4:
         00:99:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:13:35 2026 by rpki-client