Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CD00A7C9B11EFB1CA555DC4F9AE02.roa
File:                     209CD00A7C9B11EFB1CA555DC4F9AE02.roa (raw, json)
Hash identifier:          1JStiFOXi7v+a5KVcezf/UmLEPkGhksyupVzYSNWdlQ=
Subject key identifier:   69:01:CD:77:53:32:7B:70:DF:1C:81:4B:16:24:F1:87:41:B3:2C:D0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CD00A7C9B11EFB1CA555DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:30:21 +0000
ROA not before:           Sun 31 May 2026 17:30:21 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149557
IP address blocks:        103.185.100.0/24 maxlen: 24
                          2001:df0:96c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59594 (0xe8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:30:21 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c702d-fff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:eb:c9:78:7d:ab:01:b2:0d:4f:1b:90:31:12:
                    32:93:e0:66:f3:7d:07:59:44:d7:f5:3d:12:eb:95:
                    0a:11:f4:bf:bb:37:f2:43:c5:88:a8:8b:e5:14:5a:
                    f6:03:b0:75:d7:9b:dc:9a:63:78:27:b1:d2:45:e2:
                    ad:71:03:03:cf:18:aa:83:36:61:8a:00:6f:b7:77:
                    e9:ca:28:e8:42:2f:24:b7:66:74:8d:3a:3c:36:8b:
                    27:9e:db:2e:53:a9:34:f9:6a:49:1e:cf:97:0a:00:
                    68:74:ec:81:b2:7a:b3:6f:a9:73:66:0e:e5:50:2d:
                    bb:9c:89:28:c8:5d:0f:e6:a5:5b:34:25:14:62:3e:
                    07:95:a1:3d:d1:bc:7e:7b:9c:fd:b8:b2:7f:f6:40:
                    8a:6e:ff:77:c1:e2:31:99:01:d9:2a:2b:03:26:8f:
                    ea:3f:51:84:b6:39:59:ca:ee:70:6e:6b:7a:93:11:
                    85:55:73:ee:7b:c2:dd:07:89:a8:9d:7a:01:ea:49:
                    3b:a7:63:b5:4a:c2:9a:65:25:19:2a:36:32:04:33:
                    f2:64:bb:cd:f1:6a:a3:99:2a:ea:15:1d:9b:98:f4:
                    79:08:dd:d2:c8:6d:ab:48:c1:37:05:ab:8a:4d:69:
                    9c:6d:41:aa:1a:93:7d:e3:5d:32:31:93:7f:c9:d8:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:01:CD:77:53:32:7B:70:DF:1C:81:4B:16:24:F1:87:41:B3:2C:D0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CD00A7C9B11EFB1CA555DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.100.0/24
                IPv6:
                  2001:df0:96c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:9f:31:66:58:51:50:21:8b:91:7d:21:ed:5c:c6:83:13:37:
         30:41:39:3f:21:f0:61:2a:b2:37:7f:8c:32:89:6f:a6:71:2c:
         0e:6b:b2:2c:58:1b:01:60:39:48:c0:e7:1c:4b:d1:84:f7:c9:
         21:b8:57:79:31:bc:ab:15:b4:f4:4d:0e:84:35:df:81:02:40:
         cc:6e:8a:2c:a9:89:0d:4c:ce:4d:0b:23:ba:8f:e0:24:9b:67:
         66:3a:e7:97:75:ff:b9:18:f1:29:e6:3c:fd:aa:05:b7:7e:e2:
         8e:78:74:a7:06:5b:c2:09:81:31:25:d9:1f:6e:df:97:57:9b:
         a9:29:2d:5c:0c:7f:e9:f9:2b:49:21:fd:bb:29:bb:6e:80:5d:
         2d:07:c7:18:e9:e8:80:d4:fb:c0:b1:8a:f2:da:ae:21:b3:0c:
         bd:e4:7b:d3:21:ce:9e:f4:85:08:cf:75:ed:e9:13:d2:1b:7b:
         45:ad:da:77:3f:47:51:44:b7:54:dd:f4:af:0b:16:ba:a4:cb:
         d6:77:a2:d5:ac:a6:df:69:b0:4b:d2:2f:85:43:35:a6:57:e9:
         b8:79:8b:f7:a9:ac:45:e6:12:f7:51:88:07:c1:34:9e:c8:d9:
         3e:b6:e5:36:b4:1d:c0:bf:53:86:8d:70:49:a3:dc:1b:7b:0f:
         59:e1:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:08 2026 by rpki-client