Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BB8ABE2F26F11EF9376B112C4F9AE02.roa
File:                     0BB8ABE2F26F11EF9376B112C4F9AE02.roa (raw, json)
Hash identifier:          jJA0jQtiPIlUao7cTV+vioTbCvMF+mFzPnjMJeAmV3w=
Subject key identifier:   59:EA:91:4A:D6:17:32:BB:55:01:22:EA:74:E9:64:96:70:D9:3C:5E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E768
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BB8ABE2F26F11EF9376B112C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:18:37 +0000
ROA not before:           Sun 31 May 2026 17:18:37 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141842
IP address blocks:        103.168.75.0/24 maxlen: 24
                          103.172.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59240 (0xe768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:18:37 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6d6d-4e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:4f:b7:a3:34:04:d2:ff:61:df:ac:e0:0f:
                    9a:35:44:44:b1:a7:4e:70:2d:d7:85:38:d1:ac:97:
                    9d:af:2c:a8:3c:16:76:a9:80:e0:08:35:12:d4:f4:
                    f7:fa:e5:b2:0d:f9:e3:75:05:99:a0:05:fb:e6:ca:
                    a1:78:b1:59:8a:67:47:a6:bb:7f:99:48:34:ed:35:
                    08:8e:92:b0:0c:bb:1f:1c:17:34:80:a7:cd:1a:06:
                    ed:06:58:ca:77:e5:98:c3:1a:02:63:76:ad:8d:cd:
                    be:c6:43:81:38:43:cf:06:5b:5c:83:9e:10:41:72:
                    56:95:ff:13:88:4d:8c:04:3f:56:7f:01:71:12:49:
                    69:83:58:99:e6:f7:a8:f6:3b:fc:92:ea:3e:a1:23:
                    8a:30:4b:e9:99:9b:19:00:66:7d:5c:d4:e5:64:74:
                    7e:76:43:9d:ac:45:07:ef:8b:f7:64:21:a8:96:d8:
                    3c:66:23:e8:c9:c5:77:f2:74:88:bd:ac:de:7b:9c:
                    97:2c:82:e8:f4:cd:53:43:88:79:3f:3d:b1:0f:09:
                    d8:45:09:0e:11:77:7d:a1:30:0d:52:43:81:1f:cc:
                    6b:ea:95:0d:f4:9b:82:08:89:4f:cd:78:74:fd:ac:
                    ea:ca:da:65:97:69:79:f6:a9:ea:fb:7b:26:57:e1:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EA:91:4A:D6:17:32:BB:55:01:22:EA:74:E9:64:96:70:D9:3C:5E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BB8ABE2F26F11EF9376B112C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.75.0/24
                  103.172.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:76:79:40:a7:35:3e:28:08:a2:e0:50:fb:5c:77:50:c4:8d:
         3f:a4:5f:75:14:94:58:0c:13:ee:e8:56:8d:b5:88:80:eb:3b:
         21:f6:ff:fb:36:60:7d:36:5a:c9:0a:15:c8:da:b6:cc:ca:87:
         d6:67:65:6f:0a:8f:3b:06:52:3d:06:db:17:2b:65:69:98:a9:
         84:f1:80:61:d8:b8:d2:da:71:8b:4a:96:b8:96:84:db:14:7b:
         c0:28:99:d7:31:54:d7:db:52:cb:ad:ae:52:b7:bb:ed:76:64:
         22:2d:d7:be:0a:ef:29:1e:d9:38:a4:91:52:aa:c0:99:07:ad:
         ef:3b:53:70:76:5b:02:c9:7b:d2:ef:73:11:a2:b8:70:1e:e0:
         12:dc:f4:54:a3:07:3e:6b:35:22:cc:03:44:de:57:b1:ef:f4:
         a9:59:b7:25:e8:74:06:89:73:dd:77:22:f5:18:8f:68:42:29:
         9f:8b:3a:ec:ee:00:3d:d9:15:11:5b:5d:6e:ae:c3:04:c5:97:
         40:34:52:0a:27:2c:c3:9b:a1:8d:8a:8e:a9:3c:d1:74:2d:be:
         d7:c3:52:22:50:82:5f:e1:94:52:f0:4b:0d:4f:b5:26:a0:0d:
         0d:58:f1:0f:d6:87:4a:bf:3f:e9:b7:fe:33:9a:63:6c:ce:cd:
         08:bd:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:48 2026 by rpki-client