Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18906FC0409D11ED95A1E456C4F9AE02.roa
File:                     18906FC0409D11ED95A1E456C4F9AE02.roa (raw, json)
Hash identifier:          PG3b6nEitWOn+05hRIpvZSjqr4vfw4pfwAVUgGz1tkw=
Subject key identifier:   6D:BD:83:2A:18:42:EF:EC:6E:9B:BF:24:62:50:FC:36:53:D6:E0:D8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E727
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18906FC0409D11ED95A1E456C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:16:30 +0000
ROA not before:           Sun 31 May 2026 17:16:30 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141541
IP address blocks:        103.163.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59175 (0xe727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:16:30 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6cee-ccee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:70:4a:1e:0f:a9:8f:6c:33:a9:a0:a1:df:e9:
                    ee:0a:7e:13:f9:dd:12:10:b7:f5:d5:81:da:d1:d6:
                    34:2e:89:1a:ae:df:9f:bd:f4:52:bd:a7:2f:a1:d9:
                    40:6a:41:b0:c5:91:93:6a:38:f9:e6:f4:00:af:51:
                    d7:d0:57:66:af:7f:60:bd:d4:c5:58:21:da:b2:5f:
                    0e:ff:be:ee:d6:a5:ba:eb:60:81:c5:23:e5:c1:d4:
                    11:0a:05:f0:41:26:48:e2:85:c3:a9:3c:7b:f4:64:
                    c1:07:6c:8c:43:4d:2a:f1:04:2f:29:68:c6:6d:df:
                    41:f4:6e:1f:1a:a3:f0:5e:61:d4:6d:7a:60:27:7f:
                    8a:64:cf:02:52:af:94:f3:5f:24:db:66:cc:8f:d9:
                    9f:36:e5:c9:fe:2c:a6:78:4d:27:eb:7a:22:77:ea:
                    43:80:bd:48:0d:c8:f8:4c:89:43:57:c1:fa:38:fd:
                    be:b7:62:91:ee:69:35:9d:58:ff:f9:89:96:e9:8d:
                    22:c8:b3:5d:02:03:d0:ce:39:d6:c4:1c:9c:f8:d5:
                    19:9e:36:a8:c8:40:85:22:6a:6a:28:1d:a7:52:81:
                    3b:c8:96:9d:e4:17:23:17:a5:c1:fb:d1:25:0c:16:
                    41:58:3f:d2:1c:25:87:15:e4:f7:4f:05:d8:01:1a:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BD:83:2A:18:42:EF:EC:6E:9B:BF:24:62:50:FC:36:53:D6:E0:D8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18906FC0409D11ED95A1E456C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:02:3b:39:ab:6e:28:de:c4:b6:31:45:97:d2:ce:50:15:
         60:72:79:0f:02:03:22:05:81:b0:bb:cc:13:b7:b2:49:aa:3a:
         77:66:e6:c3:6a:cd:58:5c:24:b5:96:5a:38:ed:60:ae:03:44:
         d9:9e:34:ac:17:1c:fe:a3:ac:80:5f:cc:29:71:8e:23:3a:c5:
         b7:66:63:94:56:bb:a6:5c:68:15:ff:88:29:01:82:61:4d:f4:
         e5:5b:90:4a:77:4a:5f:93:e2:6e:18:17:8d:04:c6:24:46:81:
         2e:ce:26:03:33:a0:81:b7:e6:4b:32:4a:09:f3:cb:79:ee:c4:
         86:93:57:19:cc:7f:39:d2:94:d6:c7:7a:9b:2f:26:85:1e:98:
         71:35:76:ee:f9:19:77:61:c8:00:93:c6:93:51:b1:30:e2:03:
         9b:cf:87:72:8c:23:dd:86:b4:01:ab:46:5c:5f:16:d3:3c:2d:
         49:08:7b:5f:78:91:79:40:4f:a6:c4:20:03:6e:9a:75:81:d2:
         d6:9b:87:06:3a:84:3d:4e:a6:50:e3:1b:64:24:1b:dc:09:ec:
         6a:03:23:5f:dc:39:ce:de:ec:5d:1a:6a:0e:d0:e1:20:45:09:
         e3:5e:8b:ff:91:74:19:ef:cf:b4:fa:d1:08:aa:f0:1e:43:c2:
         37:55:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:50 2026 by rpki-client