Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E8304CB8C111EDAC68E946C4F9AE02.roa
File:                     13E8304CB8C111EDAC68E946C4F9AE02.roa (raw, json)
Hash identifier:          dXbApkSuFG59U6/LpZpuPYkDoStvnCTtWcilfrW7xx8=
Subject key identifier:   ED:DF:97:39:8C:FB:63:DF:3E:EC:FB:4D:1B:3C:0D:B5:B1:40:48:57
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E54A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E8304CB8C111EDAC68E946C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:00:48 +0000
ROA not before:           Sun 31 May 2026 17:00:48 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137174
IP address blocks:        103.112.84.0/23 maxlen: 24
                          103.112.86.0/23 maxlen: 24
                          2400:e4e0::/48 maxlen: 48
                          2400:e4e0:1::/48 maxlen: 48
                          2400:e4e0:2::/48 maxlen: 48
                          2400:e4e0:3::/48 maxlen: 48
                          2400:e4e0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58698 (0xe54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:00:48 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6940-a56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:5f:d9:df:00:a5:55:6c:1a:b3:65:ad:e0:
                    8d:1a:fc:8b:07:ff:ec:81:32:d4:f7:9d:a2:02:8d:
                    64:00:2c:e5:11:e0:89:9a:56:59:3a:75:5a:ae:25:
                    58:c0:0b:9b:49:33:a5:d1:a0:50:9a:e9:dd:d7:34:
                    0c:03:fa:01:7a:d3:4e:be:b2:6b:15:cd:c1:02:10:
                    46:b0:69:a9:c8:10:b7:d2:0b:47:d6:bd:d1:5a:fa:
                    fc:1c:fd:26:77:36:f9:cb:e7:82:40:2e:6b:fa:9e:
                    53:e4:e0:7b:ba:e9:a1:16:c3:06:20:0e:94:a3:3b:
                    8a:47:29:17:55:9e:36:62:80:5c:8f:ca:2e:3d:f3:
                    c2:53:0a:fa:85:55:87:59:28:8a:bc:cf:60:56:7e:
                    5b:36:c5:79:ef:e0:de:d1:a1:c5:89:1d:42:4e:92:
                    f8:25:d6:3c:6d:40:de:46:ec:87:2c:da:c1:e5:11:
                    d2:03:8c:7a:da:9b:10:3c:e8:f6:8c:e2:34:02:30:
                    4b:75:2d:df:30:11:12:81:4e:55:27:ec:bb:14:a4:
                    8e:88:6e:45:39:00:62:66:4f:fa:ac:18:a3:da:33:
                    ac:95:31:cb:57:03:d0:b5:d2:c1:c0:bf:a0:cf:dc:
                    df:20:9b:af:4a:ff:9e:c9:7f:90:ff:d2:03:84:bb:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DF:97:39:8C:FB:63:DF:3E:EC:FB:4D:1B:3C:0D:B5:B1:40:48:57
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E8304CB8C111EDAC68E946C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.84.0/22
                IPv6:
                  2400:e4e0::-2400:e4e0:4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4f:a7:22:6c:e2:51:2f:55:98:e7:7c:52:66:0b:47:a3:b5:5f:
         e4:f1:29:63:c1:82:19:24:89:53:11:af:1b:00:6d:41:16:6b:
         59:79:3e:4a:79:5c:dc:fa:fc:d5:e6:f9:f1:0f:82:f3:19:6d:
         5d:74:ae:2f:c1:47:30:8e:30:b3:23:2f:82:3d:e2:3a:5c:57:
         3d:5c:93:20:8b:82:c5:78:a8:58:8c:63:b8:5b:b7:0b:77:7f:
         9a:03:9e:fa:9e:e4:8d:b4:ea:8e:41:aa:14:e3:2e:e0:a6:3d:
         d2:f2:a0:14:87:ec:f4:d5:30:d0:92:4c:5b:47:19:4d:81:8e:
         85:d3:ff:6e:7f:cd:16:f4:df:23:91:03:51:c7:71:c1:01:c3:
         1b:ef:9a:a0:1f:0c:49:e0:ed:8f:44:fe:91:e7:d9:6a:b0:cc:
         42:43:7a:2d:3c:4c:0c:61:34:94:f2:42:7a:d1:d5:b4:a0:41:
         50:6b:bc:22:52:1f:47:a7:f3:f9:64:ce:23:6c:ab:61:0e:97:
         9f:8c:f6:0b:d2:a5:59:d1:69:39:aa:15:0b:fc:a0:ee:83:30:
         c7:23:5c:d5:58:d6:05:61:aa:77:47:b8:28:c8:47:90:bf:6a:
         f2:ff:3b:db:76:dd:51:98:44:26:59:c5:54:23:96:1f:6e:12:
         0a:d3:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:06 2026 by rpki-client