Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08E55036EC3A11EABDBB980CC4F9AE02.roa
File:                     08E55036EC3A11EABDBB980CC4F9AE02.roa (raw, json)
Hash identifier:          71AQLmMP56ql4RlglsHay2rbUYdiET1rExzRrgZqmT0=
Subject key identifier:   AB:F8:62:23:D2:12:D3:2E:64:DC:16:BB:CD:B6:4B:9A:79:87:8C:2F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E5CF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08E55036EC3A11EABDBB980CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:05:12 +0000
ROA not before:           Sun 31 May 2026 17:05:12 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138300
IP address blocks:        103.130.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58831 (0xe5cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:05:12 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6a48-6f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:54:d2:05:ae:fe:4b:c6:05:25:3a:5c:27:
                    6d:c8:ab:d5:e8:1d:64:fb:05:8b:66:e4:e7:50:cb:
                    64:0f:4f:df:18:7e:67:1b:4d:9c:77:ad:76:af:24:
                    47:22:df:ba:b6:d0:c1:4c:ba:dc:b3:04:3c:6d:45:
                    db:c4:ba:9b:c2:60:39:40:f0:10:e5:e0:25:25:0f:
                    f4:74:c6:24:b3:6b:00:a9:93:dc:ff:b3:76:7a:33:
                    e7:fc:00:52:5e:49:19:be:fe:85:41:2e:f5:ce:97:
                    c5:09:86:74:80:9e:67:14:94:95:55:32:30:65:9d:
                    24:6d:09:38:6f:6e:1d:f6:d9:9e:b4:6f:db:7c:fc:
                    21:8d:f5:06:07:84:7b:b5:ff:b9:0c:01:db:a1:da:
                    63:45:b6:ba:8e:65:bc:59:83:9a:76:e3:85:e4:3a:
                    57:a2:cd:aa:b3:5f:b3:d8:c9:93:09:d3:30:88:4c:
                    8f:1c:24:93:89:b4:60:ac:84:d7:2a:1c:8d:d7:6d:
                    ba:71:dd:76:88:a4:bf:a9:b2:fe:87:8e:f4:5d:99:
                    45:8d:41:f1:7a:ec:ec:f7:e2:82:2b:d9:15:0d:1b:
                    fe:4b:a2:47:d6:97:9d:45:fd:7a:9d:d4:c5:fd:25:
                    67:01:17:b2:05:a7:81:06:85:0d:73:c4:5a:39:8f:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:62:23:D2:12:D3:2E:64:DC:16:BB:CD:B6:4B:9A:79:87:8C:2F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08E55036EC3A11EABDBB980CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:95:32:c7:a9:b9:60:f2:2e:0a:b2:d6:db:fa:9d:43:23:aa:
         7f:c2:57:eb:fc:64:b9:64:06:cd:eb:3a:ee:63:58:f3:af:a1:
         11:53:e5:a1:07:1e:25:72:3d:56:90:d8:6f:4e:11:b5:0d:00:
         e2:05:a7:79:08:08:27:76:04:78:da:09:8c:c5:ee:63:64:07:
         70:03:d7:b2:4e:a2:3d:6d:07:80:1b:ae:60:2d:21:3c:11:3d:
         66:00:ca:c0:96:fb:e6:1a:f6:f5:06:6a:45:86:5b:34:6c:1c:
         b9:c7:4b:1e:30:8a:40:fe:e0:8c:72:72:b0:ac:84:bd:aa:3e:
         be:42:f3:a2:96:ae:93:71:a7:92:56:0f:63:2c:a0:be:92:82:
         93:4b:c1:d7:c9:e9:d3:24:9a:5f:13:01:35:9a:9a:91:24:88:
         90:3d:cf:e7:e1:2f:97:c1:4b:35:62:4c:57:37:79:b5:0a:09:
         40:7d:b2:b6:62:c9:b4:38:39:26:45:b6:64:38:9a:57:35:7c:
         2c:f2:77:da:38:34:2b:f1:c7:70:0b:e4:84:e6:c1:a6:79:6b:
         3f:06:6c:94:55:73:e5:c9:bc:83:d8:33:06:3b:3c:8c:a4:3d:
         a0:63:72:14:7c:7a:22:a8:a6:9b:0d:75:fa:93:20:d3:f5:e7:
         5d:2b:1e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:05:11 2026 by rpki-client