Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C4560F6615311EB8102C616C4F9AE02.roa
File:                     1C4560F6615311EB8102C616C4F9AE02.roa (raw, json)
Hash identifier:          Dpo/zqcoqIALxtDtI7u/BaawxAwEL5q+JG/FKWiSPQ0=
Subject key identifier:   26:A3:5C:E2:E3:01:78:37:A8:AF:6B:AD:BF:1C:F5:A8:21:BD:D2:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E6B9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C4560F6615311EB8102C616C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:12:57 +0000
ROA not before:           Sun 31 May 2026 17:12:57 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141256
IP address blocks:        103.158.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59065 (0xe6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:12:57 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6c19-126a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:86:40:bc:65:df:5a:f8:00:56:be:44:d7:
                    d1:96:af:51:7d:47:f7:67:f5:10:6d:10:b6:11:2e:
                    16:c1:9a:bd:e5:05:d8:ba:aa:37:4f:61:16:78:c4:
                    79:da:0d:cc:fe:36:be:cc:e2:84:ce:f9:02:98:ae:
                    23:bb:64:c7:30:ad:b8:d6:4a:f6:3d:99:1c:21:14:
                    2e:53:e9:88:a0:55:d2:5a:e8:f6:3c:25:7f:cc:88:
                    5b:1a:21:2d:c5:cf:c4:2e:11:b7:27:23:32:99:50:
                    74:97:f0:48:3a:42:04:7b:f6:e5:ca:6f:69:f1:2a:
                    17:ea:56:e0:25:6a:ae:74:62:f2:37:2f:81:b2:b6:
                    22:0b:b2:3a:b5:5c:9c:c2:2e:e4:78:d8:3f:e7:f3:
                    e3:ba:99:34:3d:49:1b:91:a4:cc:40:6b:ba:fc:e9:
                    04:1c:eb:cb:f5:5c:07:4f:17:70:2f:86:6e:5c:71:
                    d8:0f:4c:23:b7:d0:6a:09:4c:db:a5:9e:01:0a:56:
                    7c:46:7f:48:fa:01:aa:02:b0:9b:51:9e:47:6b:67:
                    61:f7:d5:e1:cd:65:e5:32:4e:54:fa:b8:53:5e:30:
                    c0:d8:4f:76:c0:fe:f4:e0:27:a8:9d:41:5b:a3:8f:
                    47:40:56:0e:53:b0:a4:b3:ad:6d:ec:b4:e1:6e:b9:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:5C:E2:E3:01:78:37:A8:AF:6B:AD:BF:1C:F5:A8:21:BD:D2:8A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C4560F6615311EB8102C616C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:bc:61:8b:bc:3d:b2:ad:ca:eb:f2:e0:ac:bf:85:46:d4:
         e2:0a:9d:09:05:c5:ce:b8:7e:c9:a1:ea:99:1e:cd:94:ba:cc:
         9b:c5:af:a7:97:4f:73:52:2a:fb:03:08:90:d1:8e:80:94:5a:
         c8:c9:76:12:fe:4e:e1:a2:db:d1:f4:7d:24:99:bd:ba:35:7e:
         e7:09:24:72:d9:72:01:24:85:a4:cb:c2:71:5c:c3:50:ff:b8:
         24:41:e7:15:51:58:42:d3:a2:b2:c8:9d:f8:cd:40:c4:28:60:
         d6:a4:6d:62:5d:de:f5:c8:0a:8a:a1:5a:f8:0a:84:c2:d9:aa:
         64:4d:4b:eb:4e:a2:47:f5:7e:66:d4:aa:07:cc:fa:fe:b6:cd:
         f9:e7:27:a9:0f:55:9d:ba:d8:d4:3a:2d:7e:43:3a:26:11:ca:
         26:9a:dd:36:91:29:1e:9e:fd:93:3d:c1:e9:b4:5b:03:e4:94:
         e1:29:74:f4:ba:3d:f4:d9:1f:70:7d:78:b4:38:28:c4:1e:8e:
         eb:83:03:9b:4c:8b:08:96:8c:29:a5:56:22:89:da:1f:f3:37:
         85:50:bc:5b:c7:ba:ea:56:3e:7f:b1:57:fd:8f:fd:de:6b:bb:
         a6:a8:fb:82:cc:96:b5:65:7f:a0:61:c4:3c:c8:d9:1f:3a:8c:
         9a:52:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:36 2026 by rpki-client