Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D4C5F061E2E11EDB2F1F03FC4F9AE02.roa
File:                     1D4C5F061E2E11EDB2F1F03FC4F9AE02.roa (raw, json)
Hash identifier:          X7Uiz94i8OmsLjMt6BMT2cuBJUH3wi3f734c1dv4rw8=
Subject key identifier:   39:3E:CC:75:95:CF:E1:15:1C:62:27:C9:33:52:25:45:29:26:D2:36
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E911
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D4C5F061E2E11EDB2F1F03FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:32:56 +0000
ROA not before:           Sun 31 May 2026 17:32:56 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150028
IP address blocks:        103.191.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59665 (0xe911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:32:56 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c70c8-6f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:28:28:c3:89:9b:62:c9:e7:a0:be:cf:04:
                    1a:c7:56:da:bf:2b:b1:74:08:34:2f:7c:05:aa:84:
                    3e:1c:b1:a1:5c:d5:94:99:ac:40:80:e8:78:a4:26:
                    26:f0:13:34:54:b6:2c:a9:76:2d:6b:66:5d:1d:ca:
                    cc:79:2d:23:d9:c9:5d:75:df:57:e3:9a:ec:a4:6d:
                    2f:65:d4:6d:1a:b8:70:ba:26:5a:7a:6f:da:ca:c5:
                    c9:64:ea:cc:fa:b3:37:61:7a:77:3b:a7:68:c7:59:
                    66:c9:84:da:a4:72:d0:dd:9a:d7:1a:ec:51:76:82:
                    2b:6b:9c:3f:ad:f2:c0:e0:9b:34:5d:13:b2:3d:8e:
                    8e:c0:16:e6:5b:77:18:e0:9c:eb:03:c3:bf:87:e3:
                    55:1f:05:c5:c9:8f:d9:38:d8:8e:de:bf:38:20:f2:
                    2f:c9:62:9e:0a:b4:a7:eb:77:19:1a:30:3f:5a:08:
                    19:84:7a:1c:84:ba:c6:c8:bd:8c:ac:5d:6a:6f:e1:
                    8d:bd:40:0e:fc:80:40:ce:39:6a:77:a1:46:4f:ac:
                    ae:25:58:4c:6d:82:c0:18:af:31:37:22:52:d9:ac:
                    e0:99:4d:5c:23:18:46:bc:2b:4c:ce:1a:d7:da:3b:
                    6c:a4:0b:19:a9:7b:69:10:46:97:68:cf:e8:d0:67:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3E:CC:75:95:CF:E1:15:1C:62:27:C9:33:52:25:45:29:26:D2:36
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D4C5F061E2E11EDB2F1F03FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:f1:9b:cc:30:a0:af:18:33:24:45:fb:7a:ec:02:45:a1:
         d8:33:ae:5f:a2:fe:7e:68:c6:4d:1b:ce:7c:8c:ec:7b:95:7f:
         ac:cc:f3:bb:60:4a:90:dc:50:d6:c4:ff:15:74:0a:4c:22:65:
         1f:af:d7:1c:c6:76:f5:d5:c5:51:d6:97:e1:c6:43:ec:b4:78:
         da:63:eb:f7:03:eb:bf:c5:02:ff:e1:84:dd:a6:2b:24:02:2c:
         bd:98:51:52:3f:04:93:63:45:08:ad:34:a4:64:16:da:1e:4b:
         41:be:6b:de:0e:9b:13:5a:92:49:0d:e1:5e:fd:95:ec:83:9b:
         e1:33:c9:fa:cd:23:54:97:c2:c5:70:ec:c0:c3:8b:7d:21:76:
         ef:ad:d1:6b:3a:b2:c6:41:21:4a:65:8b:18:4f:97:9d:49:d9:
         81:46:c8:28:e3:08:52:d0:b0:3f:f1:87:46:cd:d1:77:22:77:
         3c:94:1f:c2:91:36:65:59:30:ef:35:a7:ee:f6:00:f8:b7:28:
         fc:6b:7c:ea:04:e9:49:db:0f:bb:3d:6b:7e:ee:78:90:3b:40:
         dc:58:65:57:de:e8:a6:1a:e3:c4:ec:40:92:a7:e6:5c:63:f1:
         f4:fa:c5:d8:e0:34:79:93:b9:c1:d6:d7:6f:5b:e3:a6:6f:64:
         d6:81:66:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:36 2026 by rpki-client