Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05CD2818BAD611F08C370562C4F9AE02.roa
File:                     05CD2818BAD611F08C370562C4F9AE02.roa (raw, json)
Hash identifier:          PvAMd0QEUINjwmbFgGIaf+jX5e6N/xyd0DDCY1mQG+A=
Subject key identifier:   4E:E1:E3:90:5F:1C:AB:5A:B5:31:0A:4A:F5:E4:10:92:09:4D:C9:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E665
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05CD2818BAD611F08C370562C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:10:02 +0000
ROA not before:           Sun 31 May 2026 17:10:02 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     139574
IP address blocks:        103.143.180.0/23 maxlen: 23
                          103.143.180.0/24 maxlen: 24
                          103.143.181.0/24 maxlen: 24
                          103.185.160.0/23 maxlen: 23
                          103.185.160.0/24 maxlen: 24
                          103.185.161.0/24 maxlen: 24
                          2001:df0:98c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58981 (0xe665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:10:02 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b6a-1f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:46:a5:01:32:b1:89:0a:fe:be:17:71:63:
                    03:bd:56:81:b9:71:8f:cd:8a:d6:43:50:98:e5:2d:
                    70:86:e9:27:35:13:6f:a1:d1:34:68:ed:28:40:e5:
                    9a:58:ab:4d:d1:93:12:22:c8:53:7b:dc:da:9d:95:
                    80:3f:6e:67:87:60:6b:da:7d:58:d1:2c:93:0b:7e:
                    c6:e6:30:e2:5a:ca:64:51:14:df:22:c6:74:a8:22:
                    21:1b:b0:0b:a1:f4:97:c9:8a:d4:99:de:2b:e8:2b:
                    ac:42:1d:a4:26:01:59:a3:a5:84:42:85:e7:7d:ba:
                    94:88:a6:1e:af:f2:f7:32:c0:4b:37:c4:96:d8:8e:
                    97:ee:cd:2d:40:ed:9d:9a:ef:95:84:9a:fb:ea:aa:
                    7d:8a:99:05:84:c1:37:db:a1:92:72:7b:0a:e1:bc:
                    b3:a8:71:e0:35:d2:78:00:6d:09:cf:8f:73:30:00:
                    49:34:8e:49:31:8f:0e:a6:4d:27:5c:85:f2:4b:4b:
                    37:b3:73:8d:b8:55:68:b0:8b:72:09:8f:a5:12:f0:
                    e2:30:ab:df:2f:ec:25:65:fe:83:be:20:d6:e2:f4:
                    aa:bb:0c:c1:06:12:54:c5:09:b3:82:c0:9d:e5:98:
                    a0:49:a8:c7:66:13:2e:6f:73:b3:9d:ac:87:c9:61:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E1:E3:90:5F:1C:AB:5A:B5:31:0A:4A:F5:E4:10:92:09:4D:C9:CE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05CD2818BAD611F08C370562C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.180.0/23
                  103.185.160.0/23
                IPv6:
                  2001:df0:98c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:8a:40:1d:03:81:64:25:ee:49:75:59:ab:df:36:cf:3d:78:
         7c:9e:1e:52:bb:20:1b:85:fc:fc:98:55:44:85:1f:aa:d4:dc:
         7a:bb:0c:10:aa:f0:ec:d5:ad:b9:04:f8:91:55:2e:40:56:73:
         b7:c8:59:28:a5:12:e4:f8:37:e6:67:2a:5f:f0:a4:a2:48:ca:
         25:87:3a:71:68:24:fa:5d:bf:29:53:c1:3d:8f:94:48:7d:a1:
         d0:02:65:66:be:89:95:85:26:99:ff:3c:e1:50:8f:ad:a4:80:
         72:dc:d7:36:bc:a3:5b:60:74:e9:2b:f7:ba:be:bb:83:11:5a:
         d0:13:70:6e:57:cd:fb:76:b9:f3:72:83:55:36:c2:0f:d3:27:
         9b:44:2a:b0:c1:05:0a:ce:2c:0d:6c:93:f7:40:e2:8f:6a:7c:
         1d:a0:0b:51:ca:fb:b4:1a:26:16:21:44:9c:3b:98:52:84:67:
         54:ea:0e:a3:05:ef:0c:fb:8f:6c:70:fd:78:fc:60:a4:5e:b2:
         ae:5c:5d:53:3e:f5:e6:ce:e5:7e:99:d4:8b:af:40:8d:48:1a:
         c7:43:66:00:fb:f6:17:a7:7f:6f:96:30:d4:7d:c5:45:a3:14:
         8b:be:d6:9e:82:b1:e7:cc:d3:d1:24:89:32:1c:e8:56:56:5c:
         93:dd:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:24 2026 by rpki-client