Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F0EE35C3B1811F19BEB2E6D90EE528E.roa
File:                     2F0EE35C3B1811F19BEB2E6D90EE528E.roa (raw, json)
Hash identifier:          L1xMxJ4Za+rQluxNFp4VcaYoGczLTePNw3udMgyQpb4=
Subject key identifier:   D1:5A:96:08:C2:51:8C:F5:4F:45:CF:D3:CB:60:D4:75:1B:33:62:F6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E324
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F0EE35C3B1811F19BEB2E6D90EE528E.roa
Signing time:             Sun 31 May 2026 16:43:03 +0000
ROA not before:           Sun 31 May 2026 16:43:02 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134312
IP address blocks:        103.182.216.0/23 maxlen: 24
                          103.250.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58148 (0xe324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:43:02 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6516-bb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:e6:64:1c:47:b2:6d:9c:89:a4:77:0a:55:
                    f9:ea:26:33:db:6a:05:d5:1c:75:37:53:dd:c9:26:
                    74:37:41:27:78:e0:14:66:cb:4e:7d:45:ab:d2:d1:
                    a8:55:42:a8:b3:37:ad:fd:92:51:a4:d6:1b:81:21:
                    7f:a9:e1:be:62:59:05:35:6a:01:d7:08:6f:ca:29:
                    1c:cc:98:df:7f:ba:91:bd:d6:8b:9a:b4:4d:c1:17:
                    86:80:c2:b7:e4:6e:59:02:03:33:a3:c1:e2:ad:ec:
                    d1:9a:21:80:c6:7b:bd:ff:64:b5:e4:0f:f2:cf:80:
                    43:eb:0c:62:7e:fc:b8:0c:7c:ad:c1:22:5b:d1:e7:
                    57:6d:6f:f4:b1:9d:5a:f1:22:33:86:06:7f:60:4a:
                    08:5b:98:18:de:fd:2b:34:ac:fd:95:91:4d:33:ba:
                    a6:91:98:93:ca:5c:ba:03:20:92:d2:18:63:a7:0c:
                    ed:77:e6:de:d2:2c:75:eb:d9:58:f9:61:ac:67:bf:
                    15:f5:43:7d:1d:ff:52:a7:6f:56:10:a5:bd:b5:36:
                    e4:65:5f:93:78:17:bd:57:ee:31:e1:eb:92:47:48:
                    bf:59:eb:4b:ad:1a:44:e8:e1:d5:6a:d3:a6:97:1d:
                    00:4f:99:c9:dc:90:8e:9c:fa:c9:01:6a:f5:2c:bd:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5A:96:08:C2:51:8C:F5:4F:45:CF:D3:CB:60:D4:75:1B:33:62:F6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F0EE35C3B1811F19BEB2E6D90EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.216.0/23
                  103.250.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:0a:e8:a6:7b:01:72:e8:c8:29:4a:e9:e8:9d:84:37:e2:e8:
         b0:cd:d0:11:c9:d2:a0:fc:f6:37:8b:53:a1:1c:c3:98:f5:9a:
         94:08:37:d3:97:ef:14:68:79:85:73:c3:9d:1d:40:18:8f:b9:
         59:b4:d5:bc:94:94:12:5c:f6:80:e8:04:ca:c1:6e:86:02:92:
         cb:dd:1d:23:27:11:37:8c:18:70:10:d1:79:a9:1a:b7:3d:28:
         93:a9:3c:d9:1e:24:ca:07:a9:65:2f:5f:d7:ed:11:fe:13:36:
         ea:1a:f9:09:30:e4:12:8d:55:f7:5e:77:3e:5e:3d:25:34:88:
         7d:75:0c:8c:e3:4d:2e:02:d3:bd:9d:95:66:1b:a0:6c:da:43:
         78:0c:d0:c5:99:e8:0f:b0:95:61:76:97:62:3c:c9:f5:68:f6:
         94:f1:02:df:a7:4c:d2:ed:88:f5:2e:87:2e:6f:ce:5c:37:e7:
         59:9c:be:c0:10:85:d7:c6:37:73:36:9b:c9:3d:0a:96:41:89:
         15:6a:ce:a2:5a:a3:7e:ae:87:80:48:de:53:88:fc:71:cb:35:
         8e:26:70:07:28:c7:fb:38:e9:34:92:4c:03:31:27:5e:f5:f9:
         0c:70:89:5d:c4:a0:ef:83:a5:3c:2e:36:bc:55:e8:f8:8b:1d:
         e2:60:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:52 2026 by rpki-client