Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A1FD605BBF11EFAAF09614C4F9AE02.roa
File:                     26A1FD605BBF11EFAAF09614C4F9AE02.roa (raw, json)
Hash identifier:          kVPAEjgYPJdfhzuJr8Bv1Qc7XFfKeNPrIIt36aKO04E=
Subject key identifier:   99:43:15:D1:E3:1B:03:41:AD:C0:14:D9:D6:A5:12:F9:74:A2:54:C5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9FA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A1FD605BBF11EFAAF09614C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:40:24 +0000
ROA not before:           Sun 31 May 2026 17:40:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151713
IP address blocks:        103.172.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59898 (0xe9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:40:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7288-ecad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:85:34:3a:14:65:8a:42:e9:28:6e:aa:17:
                    ea:ea:a6:bf:15:66:00:c6:83:b9:95:9b:4f:8e:21:
                    9c:1e:da:86:07:d0:47:f8:4f:1c:45:0c:bb:00:94:
                    db:13:68:a5:aa:af:79:8c:5a:a0:4c:5d:d2:5b:ca:
                    6f:bd:38:79:10:71:c2:25:d1:a9:0f:88:4e:a7:53:
                    33:ad:ab:56:59:bc:5f:b3:c1:e4:fb:b9:f8:06:bd:
                    61:76:14:0a:36:91:99:91:fd:10:c6:53:f6:8a:b4:
                    11:65:fe:53:4c:04:e3:08:30:48:ba:50:b4:37:49:
                    79:d8:e2:ce:08:2a:97:01:a3:e3:37:17:20:59:4e:
                    a7:e6:0c:5a:b4:b3:5b:b1:6d:06:6f:bf:8d:51:0b:
                    36:66:1a:a3:87:74:84:b1:51:75:73:8a:9e:2b:54:
                    c3:10:f3:3e:d5:42:70:b8:aa:c0:5f:a8:82:84:31:
                    ed:d8:85:44:da:6e:97:c3:33:cd:32:0d:7f:85:b1:
                    23:6c:68:b0:47:58:eb:e0:4b:c8:b3:37:28:18:12:
                    bc:b2:41:ca:a2:d2:84:ca:2c:5c:1e:c9:3b:ae:58:
                    2d:bc:c6:02:89:c1:77:f6:e1:a3:92:8b:fa:87:d8:
                    ea:b5:18:b1:af:e1:60:27:62:40:47:ad:5c:f1:92:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:43:15:D1:E3:1B:03:41:AD:C0:14:D9:D6:A5:12:F9:74:A2:54:C5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A1FD605BBF11EFAAF09614C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:b7:fd:2a:ac:6a:e2:98:6e:29:db:64:ca:f3:40:9d:c3:
         80:12:62:78:9f:df:b1:9f:03:d7:0a:f0:bb:3e:df:d1:39:4d:
         35:ec:ae:cd:5e:4e:30:4c:7e:9b:94:87:bc:98:77:21:4e:59:
         51:1a:1d:b6:b3:fb:cf:a8:73:92:cc:0f:15:bd:e4:55:4c:56:
         85:d4:6a:98:4b:2c:f2:2d:de:5b:df:1a:d5:9b:18:d4:71:9d:
         ff:b9:7e:a9:b1:74:01:cc:a3:13:02:3d:5e:a5:21:8f:db:10:
         28:09:01:da:e0:6c:54:f3:95:15:6d:7f:2b:b3:69:5b:58:05:
         37:80:0d:9b:19:90:19:ba:a4:c5:be:02:19:18:51:52:9d:92:
         63:f2:c9:44:9e:bb:22:76:9f:8e:a4:82:49:fb:3c:a7:c3:43:
         6e:29:b2:08:17:a3:e8:7a:37:9b:35:c2:33:a3:1b:e8:d2:fc:
         41:0b:97:b0:e0:12:77:4c:96:27:21:1a:1e:2f:2f:7c:ba:f8:
         5f:08:fe:81:1b:79:ee:c6:76:12:3b:67:52:f3:79:2f:40:38:
         a6:88:b3:54:37:48:5c:e2:2d:62:c4:3b:b5:70:52:5f:69:8b:
         25:1a:a2:59:da:52:00:34:b4:e8:79:f1:49:a8:84:08:86:0b:
         93:a7:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:07 2026 by rpki-client