Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa
File:                     FDF734905C9D11EA91DB3C7CC4F9AE02.roa (raw, json)
Hash identifier:          Vo2gb0Ruj1Zv/A+25ZKhCm9/QwYUFkh7XCmhdh1SERo=
Subject key identifier:   1F:85:11:AF:42:24:DD:64:D3:45:4F:65:B1:3C:8D:84:37:39:EA:16
Certificate issuer:       /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
Certificate serial:       0B67
Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:18:35 +0000
ROA not before:           Tue 02 Sep 2025 20:10:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        103.246.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl
                          rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 18:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2919 (0xb67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EAFB, serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
        Validity
            Not Before: Sep  2 20:10:08 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a51daa-8d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:55:53:13:89:22:b6:c8:d2:89:d7:aa:8f:
                    ea:c5:70:98:b3:ea:64:4a:f5:26:be:fe:3b:c4:fc:
                    08:1e:fe:77:ce:e8:18:8a:55:e2:bf:b3:76:6d:4a:
                    2e:82:13:80:79:4f:41:39:e1:0d:47:7e:69:bd:8b:
                    e4:20:ee:62:54:e5:32:32:41:9b:2a:6b:3d:35:cd:
                    bc:87:5b:b7:8d:08:25:4f:e2:9c:cf:47:9d:41:49:
                    70:76:ff:ac:70:6e:cc:29:2c:3b:49:f7:de:c5:b3:
                    95:52:aa:9d:17:c5:91:06:91:cd:fa:cc:b4:3d:3b:
                    f1:f3:71:3a:0e:29:44:b8:51:7f:e4:94:b0:26:e9:
                    eb:e3:b0:8d:e9:47:25:96:b1:0d:fa:d0:a7:c2:1c:
                    03:30:d2:16:3e:d3:9c:74:fc:fb:1e:56:ca:d5:63:
                    ef:84:37:1d:98:d5:ee:bb:44:4c:45:6b:77:fe:af:
                    1e:de:b0:1a:51:47:77:14:27:fd:13:bc:b3:bb:55:
                    e7:c8:99:34:f9:34:ba:ff:0a:df:ce:10:dd:c9:6d:
                    eb:d9:db:d5:db:d0:f3:f5:25:62:ed:82:a5:9a:c3:
                    cb:3d:dc:65:1e:35:0d:91:28:52:ba:d3:84:02:21:
                    f1:bb:3b:b5:71:ef:b4:e1:58:78:b9:32:51:ba:90:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:85:11:AF:42:24:DD:64:D3:45:4F:65:B1:3C:8D:84:37:39:EA:16
            X509v3 Authority Key Identifier:
                keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:6b:db:fe:c8:35:55:78:fb:32:87:c3:2b:68:7e:9e:c9:
         d4:35:d2:e5:c6:81:20:53:de:70:b7:ab:0b:e5:bd:1c:3a:27:
         bb:36:46:7f:ac:f8:59:04:d7:45:b0:25:6a:34:5b:ce:54:1d:
         d4:06:f8:82:29:83:1d:ad:62:6c:6d:c7:93:16:bc:ed:b6:8d:
         f9:cc:c8:64:0c:1a:ee:bc:8e:cf:d6:31:96:b4:52:9b:ce:50:
         40:53:60:17:8a:9e:87:03:05:be:89:c2:9f:84:7a:47:e9:bd:
         d1:50:39:25:f8:d0:e9:78:e0:7b:da:99:f2:88:6e:0b:51:de:
         1d:10:67:a4:13:3c:1b:d5:f8:d5:56:d4:96:ce:59:8b:99:47:
         3d:e5:c3:74:a5:8f:4f:1e:35:d2:be:c4:b5:1c:18:ef:3b:ea:
         20:1a:54:22:83:7e:f3:b6:a2:76:11:8a:5c:a4:7b:a9:24:db:
         86:03:53:c2:d8:0b:fa:65:0b:3f:f4:ad:57:d5:80:a3:8f:fe:
         2c:d5:74:18:65:77:05:61:7f:18:da:de:43:e4:54:92:51:f3:
         ea:68:e1:39:c1:6c:83:cb:2e:d2:f7:67:9b:da:5e:0d:89:d6:
         07:f8:c6:af:f5:d5:9c:af:e2:d1:f8:38:5e:bb:bf:40:b3:73:
         3b:35:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:12:02 2026 by rpki-client