Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03ACA89C567C11F0B7F59F4BC4F9AE02.roa
File:                     03ACA89C567C11F0B7F59F4BC4F9AE02.roa (raw, json)
Hash identifier:          eF0hddKFN6U+gz8SKAZvOX4FjaX1AeesRCLTdvgjyOk=
Subject key identifier:   A9:7C:E6:A6:51:99:0A:68:72:D7:A9:41:9D:58:75:5F:FD:B9:E7:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E968
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03ACA89C567C11F0B7F59F4BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:35:48 +0000
ROA not before:           Sun 31 May 2026 17:35:48 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150602
IP address blocks:        103.112.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59752 (0xe968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:35:48 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7174-8c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:1c:24:d8:b0:8a:f7:33:2d:18:ce:ea:92:
                    92:8a:f4:93:4e:67:cc:7c:34:f3:1a:7e:c8:2b:6b:
                    62:57:3e:49:7b:fa:6c:4f:8c:59:14:cf:18:b3:86:
                    a6:d2:a2:58:09:41:20:cb:dd:81:60:51:50:f4:f7:
                    23:22:d6:16:69:eb:bf:43:c3:ac:48:0a:6f:9b:c7:
                    3f:68:db:f1:85:78:2c:5d:3f:46:c5:e5:49:53:db:
                    9d:dd:7a:88:96:37:53:1e:e8:0c:57:c9:d3:d1:5a:
                    83:cc:c9:a9:8a:13:3b:9d:ea:a6:47:e5:91:b9:d9:
                    8b:83:95:45:ae:f2:08:2a:eb:3c:07:2e:26:45:ba:
                    c7:97:d6:54:90:69:bc:af:13:c0:3e:eb:fb:db:d6:
                    f1:09:77:77:2b:95:d0:26:e1:fa:2b:7e:87:b0:dc:
                    2f:1d:cc:be:b4:f7:64:9b:0a:65:23:b2:3c:bb:ed:
                    23:68:c7:98:64:03:25:ff:f2:3c:e2:e5:41:d0:f8:
                    30:9e:7a:d4:5c:7d:63:37:66:81:42:14:43:66:f6:
                    37:b4:2c:77:3b:eb:65:5a:87:a3:9b:73:07:09:51:
                    81:0c:dc:f7:e3:a8:1e:c0:e9:10:5c:56:95:77:86:
                    44:c9:19:f0:19:16:de:19:69:71:3e:85:1a:d5:58:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:E6:A6:51:99:0A:68:72:D7:A9:41:9D:58:75:5F:FD:B9:E7:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03ACA89C567C11F0B7F59F4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:f1:23:3f:37:8e:5c:25:5e:e9:14:43:de:99:b9:28:e9:
         c5:0d:e2:9d:90:63:07:6e:aa:78:12:7f:87:3d:a5:0b:bf:13:
         c9:61:9b:74:92:59:81:b5:0a:df:d9:78:7b:5d:86:97:e0:13:
         3e:6f:cd:70:4f:d3:25:9d:8d:1c:c2:24:e0:e9:c7:a9:c1:29:
         e6:70:f0:c9:fa:ce:86:6a:3a:f6:97:4c:c0:1e:7b:5f:fa:3a:
         71:bb:2d:d0:ee:d2:96:ec:21:8e:0e:89:32:36:fd:ce:8e:84:
         cc:f0:8a:61:31:53:6d:71:69:0b:5f:66:d5:d8:d7:c8:bf:53:
         2c:b2:d9:1e:cf:29:98:cb:34:7b:c7:66:70:09:f9:e5:c7:8b:
         1d:6b:8b:0a:00:dd:83:dc:aa:7d:90:62:a6:62:8a:9d:7d:32:
         14:88:2c:c2:85:b3:0f:ce:c6:ec:98:12:e2:16:56:02:b4:1c:
         53:28:4b:97:88:8f:91:ed:27:de:2c:0d:93:92:fd:4d:0f:ef:
         be:ca:9f:86:8c:12:90:ee:dd:c0:36:35:79:a0:40:cc:5f:75:
         21:f9:59:09:f5:77:6f:7e:ef:49:cf:bb:67:e7:9f:a7:d9:61:
         a9:48:85:ca:11:76:09:9c:d4:1e:d6:90:e4:12:64:ad:86:9b:
         1a:45:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:17 2026 by rpki-client