Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E1078C8CDE911F193C8BFE20766CEF9.roa
File:                     5E1078C8CDE911F193C8BFE20766CEF9.roa (raw, json)
Hash identifier:          nwpOJLBEtwn0WmW6IjAC/MYV7lmWldsNcPNMzdcIadk=
Subject key identifier:   72:0C:07:E7:A4:C4:FB:53:19:68:F5:CD:19:F6:B6:47:69:39:33:97
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FEA4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E1078C8CDE911F193C8BFE20766CEF9.roa
Signing time:             Thu 22 Oct 2026 07:22:42 +0000
ROA not before:           Thu 22 Oct 2026 07:22:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135031
IP address blocks:        103.82.148.0/23 maxlen: 24
                          103.82.150.0/24 maxlen: 24
                          103.82.220.0/24 maxlen: 24
                          103.82.221.0/24 maxlen: 24
                          223.26.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 19:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65188 (0xfea4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 22 07:22:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ad9b9c1-c21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:9a:e4:10:01:95:95:8c:9c:f5:ea:89:aa:
                    cb:b5:08:ba:49:dd:4f:6c:08:a9:11:22:a2:2a:aa:
                    16:f2:3b:7e:b0:59:5d:0d:e5:5e:2f:3b:a2:6f:35:
                    6f:d5:5f:46:d7:ad:d5:eb:b1:87:47:2d:3c:ed:c6:
                    da:f9:bf:9c:c7:70:df:ef:e0:53:84:5c:42:8f:96:
                    80:4d:96:d0:2e:d2:52:f4:91:e2:2e:f6:d6:61:a3:
                    9b:97:60:60:94:1b:43:8f:5b:2c:69:52:de:48:5d:
                    5c:fc:ec:2f:85:0b:5d:94:25:fe:7c:03:88:d3:82:
                    5f:f7:58:9a:5b:36:f7:7b:56:13:18:bc:0a:76:71:
                    66:e3:e3:bc:cd:78:67:bf:30:72:05:89:62:48:15:
                    e0:0b:37:65:b8:9a:b8:b4:c8:ca:3f:71:80:12:a7:
                    65:82:6e:23:be:48:4b:0d:47:ed:b3:c7:72:0b:b2:
                    bc:df:02:d3:44:c3:64:1c:22:46:f3:0d:ad:1c:9d:
                    c2:e9:e5:92:3c:cc:ab:a0:60:01:da:93:39:9f:88:
                    59:10:cf:e0:d5:4f:7a:9e:ce:5b:95:3f:9b:8e:34:
                    d5:94:72:67:0e:23:c9:ec:4f:8d:26:c7:78:f0:11:
                    ad:6e:49:77:c3:13:16:ab:d4:30:74:f4:f8:76:cf:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0C:07:E7:A4:C4:FB:53:19:68:F5:CD:19:F6:B6:47:69:39:33:97
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E1078C8CDE911F193C8BFE20766CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.148.0-103.82.150.255
                  103.82.220.0/23
                  223.26.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ee:a8:f3:9b:d4:f6:96:cd:c1:50:e6:70:60:fd:ae:01:c4:
         b7:56:7a:33:a9:07:e5:90:cd:cf:65:a7:f2:92:b0:c7:ea:c9:
         8e:77:6b:e6:ad:aa:56:90:21:e7:e5:ae:7a:67:88:61:a9:9f:
         58:39:97:da:44:a3:35:6f:a6:d7:cd:16:52:d4:95:04:f2:86:
         27:fa:49:be:26:c9:d1:4f:05:3a:15:a8:a2:70:ca:e5:2c:2b:
         3e:b6:9d:b5:57:4e:c7:59:dd:66:45:f6:d5:c7:81:b3:62:51:
         2a:01:fe:05:4b:1a:de:01:15:2c:92:14:bf:95:e7:d8:ab:32:
         bc:4b:03:20:a5:f1:7a:72:21:65:5c:67:88:62:42:03:4b:69:
         bf:a2:fc:1a:6c:e0:03:73:f6:0e:03:d9:69:ed:84:5b:6d:4d:
         28:df:e6:1c:53:c5:d6:e1:b9:9e:0f:db:e8:91:2b:e5:c6:65:
         62:b1:a4:0e:4a:ac:8c:19:2c:66:c3:d6:86:28:99:5e:b1:ad:
         c6:af:8c:91:1b:51:51:bb:fb:9a:b0:fe:9f:0b:51:b5:cc:81:
         de:96:3c:d2:ea:f1:c6:12:f2:14:eb:95:8e:81:fa:f9:a6:84:
         be:cf:7b:2a:22:a3:62:f3:59:37:e5:81:ae:96:70:64:8a:a9:
         c5:99:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:18:02 2026 by rpki-client