Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1926FC8438D511EEBCEFA224C4F9AE02.roa
File:                     1926FC8438D511EEBCEFA224C4F9AE02.roa (raw, json)
Hash identifier:          nWE/QdNG9TwPZ17p1Gxdw62tfc3JUzppSD+YbC4l3YQ=
Subject key identifier:   C2:A9:27:7F:68:0F:59:62:14:77:2D:5F:0C:BB:3A:7B:44:DB:D0:49
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1926FC8438D511EEBCEFA224C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:38:47 +0000
ROA not before:           Sun 31 May 2026 17:38:47 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151140
IP address blocks:        103.132.204.0/22 maxlen: 22
                          103.132.204.0/24 maxlen: 24
                          103.132.205.0/24 maxlen: 24
                          103.132.206.0/24 maxlen: 24
                          103.132.207.0/24 maxlen: 24
                          103.250.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59845 (0xe9c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:38:47 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7227-0d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:4b:1e:ce:02:d7:b1:94:a9:2c:af:50:53:
                    92:4c:97:2d:8e:ce:56:47:9c:32:2f:4e:11:51:3b:
                    3e:ea:f1:c0:9b:22:07:3a:b7:ea:85:9f:82:cd:e7:
                    a4:cb:58:5c:e4:f8:70:4a:bc:c7:c2:fe:56:88:66:
                    1a:f7:e9:d0:61:1b:ef:79:85:0c:c2:75:4a:36:a7:
                    90:1a:ef:c1:b3:4e:00:3a:2a:77:b5:ac:f3:64:7f:
                    9c:39:80:61:8f:b3:48:a8:45:c3:47:82:4a:4a:09:
                    81:11:09:a5:f0:0e:b8:fc:b1:e1:b8:ba:6d:a6:c0:
                    7f:ab:7f:ab:60:9e:a9:47:24:ea:13:41:fa:1f:cf:
                    7a:5e:47:76:d8:21:e5:71:8e:13:56:6c:36:31:02:
                    4b:f6:a2:bf:12:91:74:f8:3b:0c:ee:0a:90:20:c5:
                    31:be:94:a2:34:4f:51:ef:74:d3:af:18:50:8f:53:
                    bf:12:06:04:49:65:71:a3:25:c7:33:11:53:d7:91:
                    df:ab:71:17:34:ba:ea:5c:55:2a:90:f2:fd:36:4e:
                    61:a0:ca:12:16:2a:c2:41:39:7c:10:74:70:84:e7:
                    0c:98:0a:00:93:1d:c5:3f:98:99:45:f1:5e:30:c1:
                    14:90:44:a9:b8:21:b4:c0:c2:f9:6c:06:47:9d:08:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A9:27:7F:68:0F:59:62:14:77:2D:5F:0C:BB:3A:7B:44:DB:D0:49
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1926FC8438D511EEBCEFA224C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.204.0/22
                  103.250.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:dc:7c:c7:87:7c:73:f6:4a:cb:f8:6d:16:25:5a:c1:77:
         84:a4:fc:74:1d:ec:32:e6:02:c0:9a:71:b7:5f:e9:20:2c:1f:
         c1:d6:d9:c8:f5:71:94:5d:58:25:ad:48:27:12:d8:f2:a7:2a:
         be:0a:67:2e:b7:81:05:db:07:48:5c:63:6b:73:c0:10:00:2e:
         02:e7:47:c8:b0:ac:87:4a:71:d3:5d:d6:42:ba:a1:fd:f4:f2:
         ea:3e:4a:c2:f2:3e:3b:f7:6e:dd:64:6c:59:a2:72:da:05:e8:
         19:bc:56:48:61:50:82:5b:f6:74:1a:e6:80:0c:b8:9e:12:d4:
         fc:db:91:a2:c3:9d:d8:10:c5:e0:7b:c5:17:9c:7b:87:9d:e5:
         f7:ec:a0:db:df:cb:bd:52:35:ea:ca:1f:f5:44:cb:db:26:20:
         43:93:a6:28:f7:28:ae:02:1e:38:41:9b:63:6d:69:08:b9:5e:
         53:1d:c3:fe:eb:f1:f7:a9:a4:82:59:10:15:be:04:91:93:7a:
         29:70:92:4c:76:84:cd:74:df:f0:9e:02:c6:26:eb:09:97:34:
         20:02:3d:b0:0b:9a:87:64:69:68:86:33:bb:61:4d:13:67:a3:
         ec:82:4a:42:57:e2:c7:7d:d1:aa:20:65:56:a9:1c:5f:ea:42:
         75:71:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:57 2026 by rpki-client