Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0731FB7A4B5411ECB050D13AC4F9AE02.roa
File:                     0731FB7A4B5411ECB050D13AC4F9AE02.roa (raw, json)
Hash identifier:          2i3lUQguJYBLlKvbMarL9vS4oRhgzsKDWxRo4bJ2YJ8=
Subject key identifier:   BB:F8:F6:6F:63:47:37:7D:9C:39:7D:3E:81:14:B3:61:A0:D2:22:00
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E705
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0731FB7A4B5411ECB050D13AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:15:23 +0000
ROA not before:           Sun 31 May 2026 17:15:23 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141498
IP address blocks:        103.133.64.0/24 maxlen: 24
                          103.133.65.0/24 maxlen: 24
                          103.133.66.0/24 maxlen: 24
                          103.133.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59141 (0xe705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:15:23 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6cab-db47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:6b:1d:b8:3f:4a:fd:7f:db:24:d7:7f:68:
                    c2:13:9f:ff:f0:4e:a2:1d:53:66:e0:29:74:f2:07:
                    e8:00:36:43:0c:44:54:1e:b4:35:d6:8a:b2:43:1f:
                    79:20:35:59:cf:07:8e:8d:07:3b:dc:ca:6d:d7:91:
                    e0:df:ff:32:31:8c:41:89:d9:29:a0:35:3a:d1:00:
                    db:f5:78:ab:cb:80:6c:c0:2b:e3:a5:00:0b:58:41:
                    e0:41:23:9a:fe:59:8a:66:04:92:ba:9c:9a:0d:bf:
                    bc:c8:82:5c:28:da:69:7a:49:3d:63:8b:f6:95:ef:
                    62:61:3d:fc:17:5f:12:4d:34:68:22:a5:37:3c:f5:
                    5d:06:26:c3:ef:a7:e0:e0:31:8b:ff:95:ab:c3:3d:
                    fe:e5:63:e5:00:dd:e8:af:b0:d6:44:12:2d:84:52:
                    2b:84:d8:bd:d7:a1:c9:ce:5a:96:e3:84:2f:27:2e:
                    5a:c5:9e:b9:6a:1d:9f:cd:b1:0f:71:01:22:7a:be:
                    e0:37:9d:5d:de:ae:92:37:e3:94:3f:db:44:58:1a:
                    79:ab:a9:9c:cf:93:f2:ef:82:04:5f:18:b5:14:6e:
                    b3:8d:a2:a3:c8:84:39:dc:b4:78:a4:71:7a:a6:93:
                    85:bf:e8:bb:ff:fd:d0:30:1d:4d:43:ef:8e:aa:8d:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F8:F6:6F:63:47:37:7D:9C:39:7D:3E:81:14:B3:61:A0:D2:22:00
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0731FB7A4B5411ECB050D13AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:25:2e:16:b5:5c:e0:7d:06:17:ac:07:06:02:84:90:39:
         60:2e:f7:5c:48:e6:4a:24:01:38:5d:8b:21:4f:1f:89:26:72:
         2e:c5:3a:1f:89:07:f1:dc:92:29:22:0d:ca:b2:9c:8c:4a:1d:
         38:74:8a:93:da:03:7b:87:ba:5b:3b:a8:3c:66:5e:40:f3:2b:
         da:74:74:8b:cd:29:3f:38:cf:80:85:07:87:40:3d:73:8d:01:
         ba:30:dc:d8:cd:d6:3d:e9:02:69:ab:ee:cb:ea:54:1f:0f:41:
         e9:be:aa:2d:8f:33:b2:2f:f2:30:b5:fe:5d:a4:65:95:a1:96:
         94:1b:ee:dd:2c:23:0e:50:0d:59:23:7b:1a:66:a7:cd:9e:54:
         c7:14:5d:a0:8c:26:28:07:f3:e4:f2:aa:1d:bb:1e:a5:2a:ed:
         15:1a:6c:72:71:ec:37:c1:86:bf:77:49:06:29:bd:56:59:ea:
         f8:54:72:b1:73:af:83:1f:ef:1c:cf:f6:8e:19:fc:4a:c2:4e:
         b5:6b:14:e3:b6:80:f2:0f:1b:c9:62:fd:7b:85:92:78:4f:d9:
         68:17:b9:ae:c2:10:05:20:07:c8:d3:29:da:ed:db:de:d6:bb:
         4a:ee:2f:90:6e:f9:0c:2c:d7:dd:cb:7e:51:13:19:9f:f9:a9:
         11:06:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:44 2026 by rpki-client