Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa
File:                     7ED42CD6F35111EF8BF19562C4F9AE02.roa (raw, json)
Hash identifier:          U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=
Subject key identifier:   53:A4:0D:3F:13:70:EB:E5:CE:04:A3:49:3B:01:B3:18:93:9A:42:7E
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       0813
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:25:29 +0000
ROA not before:           Thu 04 Sep 2025 22:02:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        43.247.168.0/22 maxlen: 24
                          103.14.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 20:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2067 (0x813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Sep  4 22:02:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a43039-56fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:a9:8d:5a:12:40:26:c1:a1:df:79:ea:24:
                    d9:76:34:ab:f2:aa:e2:68:1a:0d:92:3c:77:ec:77:
                    73:0d:68:5b:5f:5d:00:0f:10:e3:34:96:49:d0:df:
                    70:b2:b3:25:01:8d:92:e3:79:b9:6b:9f:4c:b0:3f:
                    d0:92:c6:6e:24:16:8b:43:d1:b2:ce:96:b0:ff:5b:
                    30:94:9b:8b:86:60:55:eb:db:4d:60:16:c4:d4:d9:
                    29:84:6f:55:81:7f:f6:ae:27:5d:10:4a:de:47:3e:
                    a7:26:11:b0:37:2e:0d:48:6c:83:65:38:3f:22:e1:
                    d7:fe:4f:f0:8a:a1:cb:c7:fc:0d:08:11:39:8a:b4:
                    24:82:01:95:fe:75:29:7d:87:0b:e0:1d:fc:ab:13:
                    99:a5:d9:aa:53:bd:7a:9a:76:64:8c:6d:3f:0c:95:
                    98:25:fb:0b:db:ef:ed:c3:ad:95:ca:0b:27:79:81:
                    3d:4b:1a:fd:ba:ee:2c:24:8d:22:14:4e:f5:c5:d5:
                    e1:76:dd:69:d3:4e:dd:f5:a2:9e:7f:b0:f8:5f:de:
                    11:07:80:e5:25:b2:22:d2:25:72:63:31:d2:9b:a8:
                    ff:fd:6c:9d:d9:6a:60:4e:d4:67:82:80:7e:ef:9e:
                    87:71:d8:5d:2f:4a:5b:65:01:31:39:f3:07:32:a7:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A4:0D:3F:13:70:EB:E5:CE:04:A3:49:3B:01:B3:18:93:9A:42:7E
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.168.0/22
                  103.14.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:c9:f3:07:52:ca:5e:c6:f2:74:c5:c3:bf:a0:34:b6:e3:
         01:2f:70:c0:91:fd:ce:63:63:bd:1b:e9:7f:2d:6a:1c:8a:04:
         c3:ac:f2:6e:8a:d0:ad:08:fc:60:da:26:23:c8:0e:7c:af:3d:
         d3:fb:79:f3:37:dd:42:be:bd:3a:85:23:e6:94:44:62:97:61:
         45:ce:f7:07:7e:6e:fc:1c:2c:33:fd:aa:7d:b3:00:06:9c:4b:
         94:0b:83:33:d3:8c:c9:8f:9b:59:85:fd:e1:eb:5f:98:00:2f:
         2f:4c:1c:54:d1:26:51:d5:f7:2f:6e:bb:e9:cc:23:cd:e2:ff:
         53:b6:9a:ce:59:72:8e:87:84:a1:b9:ae:4f:06:be:d7:a7:dd:
         42:f6:10:6c:1f:71:c7:04:40:36:47:2b:ac:d9:4a:8d:5c:cd:
         6d:7e:bc:d4:87:d2:ba:4a:93:82:cb:fd:f8:d3:64:98:12:06:
         ef:fd:d5:a0:fd:54:92:5f:f3:28:e9:39:e3:29:22:62:c0:31:
         16:51:1d:2b:8b:5e:3c:9d:69:20:9d:a4:72:ec:77:f5:42:d9:
         9e:b3:82:7b:7d:9c:6d:07:ec:1a:c4:55:52:2a:bb:69:43:c0:
         a1:e8:8f:9b:68:d6:d2:dc:c9:71:1a:83:70:7a:25:be:5d:eb:
         e1:e1:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:53:56 2026 by rpki-client