Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/128C8D62C36711EF9BC0BB70C4F9AE02.roa
File:                     128C8D62C36711EF9BC0BB70C4F9AE02.roa (raw, json)
Hash identifier:          ZU76FAHcifrNjbQPx5B06G56lRzuxGq+ZYVYibnzS/c=
Subject key identifier:   14:E5:DD:8F:56:74:4A:5A:E4:30:5C:57:F9:16:81:CC:13:7C:AA:E2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E695
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/128C8D62C36711EF9BC0BB70C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:11:50 +0000
ROA not before:           Sun 31 May 2026 17:11:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140180
IP address blocks:        103.155.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59029 (0xe695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:11:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6bd6-fbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:21:be:7d:e4:34:36:31:df:32:bd:13:ff:
                    9b:7c:d8:a5:90:b7:b6:eb:99:b4:28:a5:79:63:57:
                    2e:79:54:30:3f:ea:e5:97:75:9a:f2:7c:e2:72:b4:
                    e2:65:99:9d:32:5f:03:e7:0a:4e:21:35:2d:4f:2b:
                    4d:14:59:db:6f:2b:6e:00:9b:ac:67:00:e5:84:c8:
                    a8:45:d1:b1:d1:d5:e6:6d:bb:92:83:b1:eb:0b:89:
                    29:79:80:2b:54:31:72:4a:a6:79:4b:42:b4:22:a3:
                    c3:ac:2b:c7:05:f2:a4:79:11:bf:ba:74:44:69:3a:
                    42:a3:71:98:4c:34:a4:8e:ba:be:e2:1a:90:12:3d:
                    8a:c3:24:18:c9:43:5b:29:e3:61:f1:f8:a1:63:14:
                    d5:95:8f:78:5e:6c:e7:b9:8d:f8:44:aa:e5:6b:38:
                    4a:96:9e:67:de:b1:60:71:e4:a6:49:d5:8b:da:dc:
                    04:8a:ce:32:74:b7:7b:a9:3f:86:5f:bf:ba:59:c3:
                    c8:69:51:fc:57:8d:a2:63:45:3c:96:63:1a:c8:90:
                    da:77:2f:ec:93:31:56:06:33:c1:e1:e9:17:60:66:
                    a9:31:6d:2f:2a:d1:1f:b9:18:53:a9:2c:e2:e8:46:
                    1e:3d:67:d2:e8:ad:59:da:8e:7c:3e:a6:08:b2:e1:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:DD:8F:56:74:4A:5A:E4:30:5C:57:F9:16:81:CC:13:7C:AA:E2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/128C8D62C36711EF9BC0BB70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:46:b4:b8:b1:d6:2a:e0:3f:35:8e:87:cb:ae:77:58:da:
         7c:86:bf:c9:73:06:28:47:46:e1:58:85:f4:23:5a:9e:46:09:
         97:8a:ce:53:bb:1c:fd:ff:85:63:58:4b:46:3d:8d:0f:3a:75:
         7f:ee:75:23:7f:c7:d6:f2:64:e6:93:0f:36:a9:67:fe:d1:11:
         23:9c:4c:c5:43:02:27:ab:fa:19:69:ff:f8:ed:79:b2:5c:a8:
         5a:13:66:13:5b:11:91:a6:81:74:52:9d:41:1f:33:fc:65:05:
         67:42:40:57:27:26:5a:76:5e:f0:54:fc:88:63:b2:83:09:b8:
         f4:03:a3:22:e1:0f:01:f4:d3:64:90:1b:4b:b1:5f:20:f8:1d:
         e1:b3:09:85:43:26:c7:ea:08:b1:aa:81:0a:d4:56:81:a4:15:
         22:68:12:09:d1:b7:b8:81:c5:8c:5a:58:ca:71:65:41:fc:51:
         53:c5:46:69:94:9a:2f:cc:d9:7b:27:78:a5:a5:59:98:03:3e:
         e9:50:67:0b:51:6b:10:aa:9a:91:b0:ca:42:78:36:c1:c5:6d:
         c6:1c:d1:16:c6:7b:20:0d:26:be:4f:d4:4c:e8:95:38:86:ef:
         4f:b8:72:92:53:f4:45:1b:d7:f2:79:20:7f:78:47:fa:73:35:
         b4:e0:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:52 2026 by rpki-client