Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28562EF62FE411EC82076515C4F9AE02.roa
File:                     28562EF62FE411EC82076515C4F9AE02.roa (raw, json)
Hash identifier:          7GSyLmkFowbtSv9eu8Vkiqi7Hgi/2fUVBi6zRKg7SPs=
Subject key identifier:   53:90:9D:D9:CD:06:3E:AA:AD:13:73:FA:2E:75:E3:70:DF:F5:69:F2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7FE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28562EF62FE411EC82076515C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:23:23 +0000
ROA not before:           Sun 31 May 2026 17:23:23 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     146911
IP address blocks:        103.173.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59390 (0xe7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:23:23 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e8b-63a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6d:e2:eb:ea:ac:66:9c:4f:38:7c:37:ab:48:
                    e4:dc:81:9c:e8:94:97:09:f6:fe:fd:73:37:aa:53:
                    7c:fe:c6:8f:b4:a0:c8:6b:ad:f6:cc:0b:0d:49:1a:
                    cb:8f:f8:3f:20:50:4d:cb:64:1f:7b:83:fe:71:a1:
                    07:63:3b:9b:e9:92:99:be:47:aa:cc:e8:39:e5:e9:
                    7e:77:b9:7d:c1:df:9a:5a:12:d2:3e:25:84:e3:8a:
                    1b:19:d7:98:50:e1:92:bd:1a:7b:61:be:a2:9d:6d:
                    98:7f:26:8b:7f:b1:c8:44:69:b2:ca:49:a0:ef:0a:
                    8c:6c:3a:20:db:b2:2f:a3:e5:a6:18:44:8f:19:e0:
                    92:e0:0d:7e:ea:2a:64:04:ac:f3:90:05:95:7a:14:
                    f5:da:61:87:61:14:4e:48:27:2d:53:e8:9b:68:22:
                    0d:79:b4:dd:66:94:13:37:71:b3:eb:a0:ff:75:11:
                    88:ec:20:61:ab:3a:5d:ff:0f:f1:e6:d3:1f:49:c9:
                    e1:4f:80:f5:c9:0f:c6:0c:33:46:3e:7e:6d:ef:17:
                    aa:2e:f6:75:7e:1d:c1:b4:cd:0d:cd:bb:0f:70:08:
                    67:f2:4d:d6:79:0e:e0:07:b2:38:9e:1b:79:97:d4:
                    f1:6a:61:89:b0:19:21:e4:6f:80:8f:b9:fb:b9:f4:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:90:9D:D9:CD:06:3E:AA:AD:13:73:FA:2E:75:E3:70:DF:F5:69:F2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28562EF62FE411EC82076515C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:5f:7d:94:a1:37:e1:5c:be:c0:cf:6f:56:a7:7e:7d:14:
         f6:0f:51:98:fd:88:9d:3b:c3:6d:68:17:10:a5:bf:1d:b3:46:
         bf:95:95:c9:e2:db:b0:bf:52:c4:45:b3:1f:1d:25:83:6a:0c:
         50:dd:79:09:15:3e:28:c7:01:fa:7a:41:07:26:cd:fc:f6:48:
         aa:8e:4e:16:15:cb:27:51:32:72:d2:fc:ca:24:57:d3:00:db:
         0f:22:d9:2e:65:e4:bc:c1:f2:c2:1c:89:87:08:89:f8:97:77:
         b8:72:0d:9d:68:ae:42:bf:25:1d:5c:62:79:e7:6a:72:c5:f1:
         28:93:3a:6d:8c:a9:81:af:57:4d:83:c4:2a:99:c5:cc:74:1a:
         fc:72:a5:a8:44:cb:c0:fb:46:16:95:a5:43:96:95:de:9d:f8:
         e2:1a:88:67:1e:13:21:2f:4c:bc:a9:96:17:20:7b:e8:f3:ed:
         f9:9d:47:76:4d:e9:b0:1d:d2:1a:8a:ec:fe:d7:9b:4a:78:41:
         48:59:f9:ea:db:cb:1b:dc:57:2e:22:04:05:6b:85:a9:bb:c4:
         5a:4e:a5:0c:ce:b3:f5:85:b4:cc:47:67:75:74:3f:9e:b1:7c:
         ef:df:91:78:7e:65:c2:99:ea:0c:63:dd:1b:0a:e2:57:a2:58:
         88:46:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:55 2026 by rpki-client