Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7B800C03E911F09296AD79C4F9AE02.roa
File:                     0A7B800C03E911F09296AD79C4F9AE02.roa (raw, json)
Hash identifier:          5Lk9W+CdXh4pYdRgKWWfldmPgXePmhmbevwsMiSzrK4=
Subject key identifier:   7F:BF:79:39:52:75:1B:91:2E:F5:BF:70:5C:10:FE:A4:84:12:D8:CA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E56A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7B800C03E911F09296AD79C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:01:56 +0000
ROA not before:           Sun 31 May 2026 17:01:56 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137621
IP address blocks:        103.125.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58730 (0xe56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:01:56 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6984-0e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:21:b2:68:dc:5d:06:57:7f:1f:f8:b8:98:
                    88:5e:58:6c:59:3b:83:ed:8e:00:f7:9c:6d:b3:d2:
                    8e:ad:88:f4:6d:6b:99:6d:ee:a6:c3:f2:ed:5f:6a:
                    4a:5f:44:1c:6c:87:b2:a4:c1:f8:d6:c3:0f:13:b2:
                    be:08:b2:c4:c9:6e:4b:8d:6c:ae:30:8f:0a:0a:03:
                    81:53:81:40:76:04:be:e1:eb:b1:8a:d2:54:26:71:
                    a1:3b:2f:85:4a:15:42:3e:ce:7c:0d:15:09:60:d6:
                    56:2f:8a:76:b7:f7:c3:9e:a6:49:66:d6:4c:3a:db:
                    0d:43:73:13:82:d4:e0:7f:b4:5e:5d:13:d6:f8:3f:
                    42:31:f2:89:ec:02:d5:16:c1:d7:81:eb:f9:72:fa:
                    6c:43:be:01:db:5e:c5:92:5e:b5:c3:82:3a:a5:04:
                    f7:6f:b6:a2:f2:68:6b:21:ae:93:3f:7f:db:0c:c4:
                    6e:73:01:9e:c0:5c:59:6b:63:5a:1e:02:96:37:14:
                    21:91:6d:f6:ec:b1:ad:8f:39:ba:64:54:a0:16:05:
                    ee:35:fd:91:b6:e3:eb:1b:b3:73:0c:c8:31:ab:01:
                    db:19:49:c5:ec:56:d4:d0:4e:04:1e:af:14:5f:28:
                    d2:0d:d4:86:48:66:ba:8e:b6:0c:6d:01:71:52:fd:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BF:79:39:52:75:1B:91:2E:F5:BF:70:5C:10:FE:A4:84:12:D8:CA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7B800C03E911F09296AD79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:64:2a:1b:ad:b0:a1:82:a6:b1:f2:be:96:73:86:d4:90:e0:
         00:16:88:91:2a:af:f6:d4:28:ae:1f:b5:b8:07:bd:0b:9c:1a:
         29:09:51:0a:79:13:57:d6:b2:be:22:8d:da:7b:d8:ff:0e:45:
         6b:3d:82:29:09:6a:31:70:d3:6c:71:a7:95:ec:0d:0a:74:18:
         2a:97:55:11:b9:bf:cb:cf:bc:4a:0f:bf:21:25:bd:29:a0:3b:
         4a:e7:7d:2d:3a:ef:41:f7:59:0c:05:d1:28:b7:68:83:d0:c5:
         09:16:fb:f5:fe:2e:66:81:d1:41:51:44:8c:8d:5a:78:aa:e4:
         0b:85:43:cc:ea:f7:d8:43:08:69:8c:44:64:b1:f5:a0:d8:4b:
         e6:3d:78:3f:c7:a3:11:de:00:f9:9a:04:bc:e2:f3:56:0a:61:
         9e:62:71:bc:3e:df:95:e3:fc:c3:9e:0e:17:f0:96:86:9f:b6:
         2b:32:7b:82:78:2f:80:cc:0a:6a:d5:6d:3b:1a:88:27:f3:68:
         3b:0b:57:29:e7:75:ed:b2:5b:bc:d9:93:19:15:cb:72:8b:86:
         9b:90:26:be:0d:b6:ea:79:6d:5a:84:44:39:c0:d0:36:90:39:
         cf:85:40:98:99:f9:a3:e4:b3:63:ec:dd:84:56:f3:d8:eb:f1:
         cc:db:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:41 2026 by rpki-client