Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31C892F80F2611EEAE77A36DC4F9AE02.roa
File:                     31C892F80F2611EEAE77A36DC4F9AE02.roa (raw, json)
Hash identifier:          MtYPf68I4soQ4Q1Zokvnuv3pgU0lefyP5uuy26q7Hzw=
Subject key identifier:   74:E4:B4:0A:CF:D2:0C:3E:B4:6F:0F:99:63:47:5F:B8:5E:60:D4:F6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31C892F80F2611EEAE77A36DC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:39:59 +0000
ROA not before:           Sun 31 May 2026 16:39:59 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133981
IP address blocks:        103.187.178.0/23 maxlen: 24
                          2001:df0:be40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58054 (0xe2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:39:59 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c645f-7c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:60:83:a5:46:e6:5c:28:f0:54:27:83:2e:
                    2b:d8:b9:82:91:f2:12:87:53:c9:6a:e1:94:e4:81:
                    a5:a1:1f:15:4f:80:ed:4f:62:a7:0d:bf:98:40:0d:
                    9f:31:a9:a9:d7:e1:e1:37:06:ab:f5:fa:12:86:ef:
                    27:16:c9:c4:3c:3d:19:77:4b:80:9e:d4:fa:c5:41:
                    2c:bb:10:b7:25:e7:b5:21:e0:1e:e6:7a:51:2e:17:
                    86:fd:fb:45:84:9f:c1:93:6f:45:86:42:45:f5:3a:
                    44:cb:d8:3e:9b:03:53:e1:76:32:eb:73:57:92:3b:
                    c4:cc:9b:72:05:ac:0f:21:d9:36:66:32:7c:76:e8:
                    b0:a2:48:bc:1d:12:7f:43:93:ba:7c:b8:99:27:68:
                    de:53:36:2e:f1:3f:19:a4:c1:a8:9a:50:79:e9:be:
                    ff:df:9d:3b:de:98:b6:b9:78:4f:ff:42:14:21:7d:
                    32:1d:91:0e:70:27:c0:95:79:a3:79:8e:00:30:ef:
                    f8:18:01:83:49:f2:4b:aa:9b:d7:c9:67:e2:3e:c3:
                    6f:eb:22:93:8b:01:24:0c:68:a6:9e:6d:f8:61:f9:
                    60:2c:fd:22:07:f7:6f:09:23:27:62:25:d7:8d:b9:
                    86:f1:8d:61:46:21:d5:73:3c:01:1d:ff:1c:60:4c:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E4:B4:0A:CF:D2:0C:3E:B4:6F:0F:99:63:47:5F:B8:5E:60:D4:F6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31C892F80F2611EEAE77A36DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.178.0/23
                IPv6:
                  2001:df0:be40::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:2b:00:08:17:ca:4b:e0:a1:d9:d0:b9:ae:de:37:4c:b0:
         96:42:32:3c:dd:7e:71:0e:28:41:81:a6:e5:04:78:22:d1:71:
         16:0d:7a:37:27:7b:76:49:37:f1:27:f5:8b:84:66:f2:d3:9e:
         e1:6b:66:9d:ab:d0:16:45:6b:35:26:e6:64:19:3d:4e:ab:ba:
         ad:44:6c:c8:c6:fa:49:a4:51:5d:fe:45:b6:3e:23:2c:64:b7:
         62:e6:3f:ec:d2:1b:26:2c:7d:b3:a0:a6:b5:8a:71:ac:77:e5:
         61:b2:f0:4d:9e:f8:43:dd:73:db:68:90:40:b6:a5:26:e0:bb:
         52:43:78:64:30:12:d6:cc:7e:99:67:1d:aa:d3:1d:64:e2:34:
         fe:7a:06:80:b3:e8:78:8e:e6:5b:45:91:b7:c6:f3:75:88:8c:
         be:4f:f4:b2:c1:73:ad:da:71:3a:57:c4:68:08:03:00:db:aa:
         ad:4a:af:a8:c9:02:4f:7a:7f:1f:34:76:61:47:9c:d3:9e:7e:
         f9:04:ae:27:24:24:49:24:2f:3a:82:dd:f5:4d:75:ad:50:48:
         a9:79:33:ac:f6:d1:0d:7a:72:ec:31:c3:06:ce:64:c6:a7:d2:
         09:5a:eb:dd:85:e4:ed:c8:8a:32:c6:a1:23:6a:89:b7:70:65:
         da:b0:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:19 2026 by rpki-client