Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/108F99EC325111F0A399A30CC4F9AE02.roa
File:                     108F99EC325111F0A399A30CC4F9AE02.roa (raw, json)
Hash identifier:          aDHPPX67ilH8Pu7/zuYzpbNLtpgfGe+gvJXfnf/nts8=
Subject key identifier:   9B:8B:F8:03:93:75:46:C1:50:BD:FD:0E:9A:FE:90:D7:C4:1E:5F:1F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E53F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/108F99EC325111F0A399A30CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:00:28 +0000
ROA not before:           Sun 31 May 2026 17:00:28 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137162
IP address blocks:        103.112.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58687 (0xe53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:00:28 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c692c-3827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:c1:88:03:bd:a9:67:71:77:7b:ed:e0:e0:
                    77:a7:18:98:6a:87:84:a2:1f:21:69:b3:15:dc:f3:
                    b0:1b:26:e0:36:e7:ac:5c:bf:36:d6:b6:d5:54:27:
                    74:7c:6f:6e:fe:4c:fc:7e:0a:d3:90:29:80:a8:20:
                    75:f1:23:c1:64:52:1e:80:b1:43:7c:82:23:20:7b:
                    bd:b3:5c:17:73:ef:31:ce:57:96:36:1f:08:eb:47:
                    04:6b:6b:47:a3:e4:7a:ef:15:09:87:cd:20:4e:c4:
                    7f:72:33:bf:d7:a0:34:0f:d9:83:3d:6e:92:68:91:
                    eb:54:02:bb:60:e4:dc:02:8a:10:37:04:56:2b:30:
                    9d:a3:68:92:d3:ba:a8:de:d0:07:f1:b1:4a:fa:a7:
                    55:6d:a4:70:f1:71:3e:2b:88:cd:2f:13:26:2c:8b:
                    3e:58:1f:7f:d5:3b:34:49:b0:3d:69:23:95:08:5d:
                    f8:a9:6d:08:eb:2e:8c:09:0a:f4:65:d7:5b:ed:d6:
                    94:13:5c:a3:ae:38:18:90:d2:b3:45:2a:c0:b0:ce:
                    a2:f3:89:99:d5:f8:6b:00:04:56:b4:ea:ab:2e:14:
                    75:7b:75:1d:75:d1:1d:51:e3:5c:e6:bb:ce:26:6d:
                    fa:4f:b9:2a:e1:87:cc:af:13:0f:23:a8:ef:94:c1:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8B:F8:03:93:75:46:C1:50:BD:FD:0E:9A:FE:90:D7:C4:1E:5F:1F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/108F99EC325111F0A399A30CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:ee:52:4e:3a:22:71:ca:2c:6a:3a:d1:37:88:ca:4c:1f:
         60:08:a0:26:20:fb:75:1a:d1:9a:a1:f8:52:d8:84:9c:19:bb:
         3a:c4:05:f2:f4:af:0f:86:01:72:fe:15:05:c1:ca:46:85:56:
         03:af:cc:19:8d:df:cc:07:33:25:40:12:65:8f:69:b9:ff:a8:
         c4:3d:20:28:82:0b:82:5e:2f:4b:20:c0:62:ae:17:0a:d7:99:
         d9:73:8d:97:aa:39:cb:63:93:84:91:a6:dd:4f:af:d9:c2:8b:
         a1:cc:62:36:f1:f4:2f:ac:24:73:a7:6b:38:76:56:a7:80:d3:
         25:a8:58:45:31:d7:1b:1c:21:e5:e9:69:33:a9:6e:c8:cc:e0:
         9b:fb:0a:d8:64:6b:b8:e3:52:63:bf:4b:a0:b7:0f:92:be:28:
         e4:ba:d7:22:0a:29:6d:ea:22:e7:13:1c:4a:61:89:2b:7f:65:
         ae:b6:ae:b1:9b:e6:e6:47:31:4d:57:3a:da:d9:d9:a0:bf:18:
         4e:db:63:86:ae:43:9c:f7:52:83:da:05:a5:72:2e:79:f2:cb:
         13:df:9f:77:74:ac:c7:ff:e4:54:94:9c:13:64:c2:7f:df:a2:
         9e:05:4a:28:80:60:f4:89:ea:74:ca:24:13:39:b7:68:80:55:
         e7:aa:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:20 2026 by rpki-client