Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa
File:                     1336FB66ED7311EC86064A84C4F9AE02.roa (raw, json)
Hash identifier:          vl9nJzR4B6H1OVIiAHJTXU5tP1Rl3qadn8DzCu/bUE8=
Subject key identifier:   8B:50:E1:32:19:07:FE:FF:82:70:35:84:CE:EF:DA:4C:B5:E4:56:A5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8B9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:29:47 +0000
ROA not before:           Sun 31 May 2026 17:29:47 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149539
IP address blocks:        103.185.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59577 (0xe8b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:29:47 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c700b-07a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:f5:44:09:3f:28:7e:3b:4e:21:15:2b:0a:
                    f0:49:be:31:5e:b2:6e:cf:6b:05:3d:5f:ff:c5:1d:
                    3a:12:dd:f8:83:63:c4:21:ae:d7:8e:30:ca:9e:10:
                    d5:b4:9a:fe:11:8f:f8:9d:de:1f:66:62:0a:14:63:
                    60:44:61:9a:16:6f:5a:47:1f:b0:7a:d5:d4:49:d1:
                    a0:df:56:49:99:ba:c7:7f:39:4d:85:8b:28:34:3e:
                    fa:df:e3:03:28:0e:56:5d:1f:fc:7d:f2:62:3d:c1:
                    e1:fb:27:25:7e:3b:2f:d5:25:61:42:41:25:af:82:
                    13:a3:fd:2e:43:1b:46:6e:f5:e6:4c:a0:53:0a:ea:
                    6a:1d:7a:6f:77:60:6d:02:eb:02:6e:39:ad:77:8a:
                    05:f8:2f:bd:63:ef:1d:4d:c8:ec:20:bf:ec:a8:e3:
                    78:e3:81:56:56:3c:cb:a6:af:96:cd:05:21:c9:21:
                    2f:6e:29:e9:0c:1d:1b:8a:1e:a0:1e:0a:ec:bb:61:
                    a9:b7:81:b7:7b:7f:3a:3a:9f:6b:6a:f7:7e:ee:4a:
                    7b:cc:0f:6e:e5:35:9d:de:53:16:ad:29:51:31:2f:
                    c5:13:ae:2f:02:6c:8a:82:c2:d6:6f:b8:b8:0c:35:
                    7b:17:4c:5f:b8:96:71:1b:82:5d:ea:b6:96:03:55:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:E1:32:19:07:FE:FF:82:70:35:84:CE:EF:DA:4C:B5:E4:56:A5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:69:ca:ef:f0:e0:bd:80:94:67:c4:93:c4:af:8c:86:b8:ca:
         a8:e8:6d:de:c4:01:6f:02:14:6b:c1:ea:68:f2:6d:56:c1:35:
         6d:48:4c:07:a2:8b:bc:ef:92:b8:61:0d:bc:b4:62:bb:08:bc:
         6a:ce:7e:b6:d5:74:4e:43:c7:48:9d:ca:54:c6:5e:19:a8:a6:
         0d:da:12:19:fb:7b:16:73:24:1f:e8:29:55:5d:02:d5:b5:35:
         3b:92:97:91:29:ad:86:fe:f0:3f:a4:ab:d2:49:2d:05:96:6e:
         03:b5:5c:69:58:b4:88:41:26:c8:3e:1a:80:77:b5:97:b4:34:
         b0:d8:d5:dd:0a:81:7b:ee:c3:72:7d:11:c5:b2:ca:d5:52:d0:
         4e:46:df:82:b4:08:45:7a:83:06:6b:05:3b:54:14:09:9d:6a:
         e3:d2:c1:f0:8e:aa:fd:7d:b3:8f:05:1c:63:26:c0:fb:de:fb:
         2e:c1:06:bc:7b:a7:d4:d4:35:d9:fc:b8:6a:bc:68:f3:32:2f:
         98:e2:26:7e:a8:45:14:25:27:a5:04:d0:f1:e7:5e:21:b4:f6:
         9d:81:53:96:32:58:96:4b:42:60:6b:75:02:16:9f:ad:f5:57:
         49:db:39:f5:c1:f8:57:8c:6d:a5:73:59:27:17:4a:68:9c:83:
         96:35:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:20 2026 by rpki-client