Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/3062089A94CE11ED806CD364C4F9AE02.roa
File:                     3062089A94CE11ED806CD364C4F9AE02.roa (raw, json)
Hash identifier:          zCxZkcXZqSKeYkQzTvYaKoPm3rudICweWl7f8p6RH7w=
Subject key identifier:   AB:05:59:B4:46:C0:88:A7:C0:14:1A:BE:DB:30:28:B1:0B:29:9D:AC
Certificate issuer:       /CN=A918F525/serialNumber=18B45E41DA39F6302E31699630D32285DB3D931C
Certificate serial:       023A
Authority key identifier: 18:B4:5E:41:DA:39:F6:30:2E:31:69:96:30:D3:22:85:DB:3D:93:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/3062089A94CE11ED806CD364C4F9AE02.roa
Signing time:             Tue 27 Jan 2026 01:21:40 +0000
ROA not before:           Tue 27 Jan 2026 01:21:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150687
IP address blocks:        103.118.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.crl
                          rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F525, serialNumber=18B45E41DA39F6302E31699630D32285DB3D931C
        Validity
            Not Before: Jan 27 01:21:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69781324-9784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:eb:3d:3b:ab:c4:bd:d9:99:f6:cd:60:b3:
                    93:9c:bc:05:6f:46:45:14:12:e1:15:4b:50:e1:a3:
                    4c:c4:6c:07:6b:9e:de:a1:a5:5c:b8:e7:0b:8a:38:
                    85:a8:4c:6f:3f:f9:56:1c:f8:26:65:e7:7d:5b:85:
                    f5:0b:2b:47:71:72:27:86:80:b0:dd:da:a2:ac:75:
                    d5:1d:57:bb:1d:bf:78:c0:4f:b4:84:09:11:96:e3:
                    22:13:a5:ea:35:38:65:06:d5:04:8d:d8:49:7f:d0:
                    04:c6:6b:36:5d:21:9d:1f:a3:6c:26:86:4e:63:94:
                    61:a4:62:6a:7f:72:a5:23:f5:4c:d3:64:d6:90:44:
                    f7:ea:a6:87:f5:1f:ca:3a:ae:b4:57:fb:21:3f:80:
                    ed:fc:85:5f:a0:96:f5:1e:07:74:64:69:05:89:99:
                    d8:2c:9f:06:fc:66:d5:06:35:60:bb:b5:38:2b:2b:
                    5f:d0:f0:a3:c0:f1:ab:35:7a:d5:6d:93:e4:01:3e:
                    f6:87:c5:f1:91:56:02:d4:b0:4e:e8:dd:3a:d9:c9:
                    e7:8e:fe:8f:b1:4f:70:4a:da:61:b3:13:ff:67:fc:
                    5b:dd:06:8f:3f:72:20:d9:da:d2:51:20:8c:a6:43:
                    e0:f1:f4:45:35:de:c1:e7:76:be:30:c4:b0:fb:72:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:05:59:B4:46:C0:88:A7:C0:14:1A:BE:DB:30:28:B1:0B:29:9D:AC
            X509v3 Authority Key Identifier:
                keyid:18:B4:5E:41:DA:39:F6:30:2E:31:69:96:30:D3:22:85:DB:3D:93:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/3062089A94CE11ED806CD364C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:11:a0:08:46:e5:4a:6c:0f:e5:8b:3a:17:d7:45:0e:1e:c7:
         c2:74:92:bf:40:67:41:10:8c:47:0b:4b:07:19:a0:58:8b:34:
         4c:3e:b2:a2:26:18:9b:ba:f4:78:34:de:2c:4c:24:fb:fb:74:
         8d:b2:10:e0:68:44:97:5e:7f:f7:a6:d5:d2:12:fa:a8:05:b6:
         22:1b:3e:90:68:c5:41:7f:4b:11:dc:9a:68:76:de:17:e2:a5:
         57:1d:be:bb:4e:88:16:0b:8d:1b:bc:79:c6:d1:7c:0d:a7:81:
         db:ee:b9:a4:a4:91:a9:3a:ba:80:16:fc:54:f2:ba:ed:89:37:
         69:5f:84:be:c8:69:59:fe:ad:f1:3a:c8:2a:53:9e:1f:bb:a7:
         fe:0f:36:19:ba:ea:18:03:1b:85:2f:36:37:06:56:04:0b:91:
         9c:85:96:1b:81:1e:c9:30:94:cc:a4:c6:5d:e8:f9:33:86:dd:
         74:1e:2b:0e:2d:62:a2:21:6a:3d:03:2a:d1:32:03:04:aa:96:
         5d:30:df:23:6b:0d:6d:ca:94:c0:d9:52:22:bd:2b:4b:4e:d4:
         af:9c:d6:a3:ad:57:04:d9:45:f1:ec:1d:16:41:d3:69:95:55:
         8e:32:34:a4:36:50:99:5a:7e:ea:aa:8f:ce:e6:2c:e4:a9:7e:
         60:5d:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:37 2026 by rpki-client