Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa
File:                     322150E0541611EC80009E4EC4F9AE02.roa (raw, json)
Hash identifier:          24lziy17O49+4UBa7R86D36kALqY/JwMb6OZ3NeDHVk=
Subject key identifier:   4F:42:08:DD:E9:A4:B5:E7:64:0E:96:C6:66:1C:09:27:5F:8D:BE:10
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E588
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:02:54 +0000
ROA not before:           Sun 31 May 2026 17:02:54 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137662
IP address blocks:        103.122.56.0/22 maxlen: 24
                          2001:df1:640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58760 (0xe588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:02:54 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c69be-3409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:e7:22:ea:19:cd:00:87:6d:79:3f:e6:d5:
                    cb:ce:86:83:80:68:83:27:9e:84:87:3d:ef:76:9b:
                    b5:3d:66:e5:4c:69:b9:16:44:22:96:8b:74:a8:e9:
                    2e:f1:31:fc:7f:45:bf:87:b6:3a:6b:b6:9a:5d:44:
                    b7:5f:79:50:45:0a:18:f0:de:ee:17:c1:06:02:30:
                    c8:c3:7a:cd:16:87:b0:5a:b0:8e:ff:c1:a7:61:d7:
                    bd:ac:22:be:a1:02:bd:73:94:77:7e:48:96:73:4d:
                    56:6e:e8:1b:21:5a:88:29:0e:6e:d4:21:b5:ac:d3:
                    29:e7:0f:e9:78:0c:4d:48:e6:27:ef:d9:ff:e1:73:
                    b5:4e:53:af:37:b9:f8:a2:c4:57:78:f1:48:73:df:
                    bf:d8:32:e1:9f:b6:89:fb:87:54:ed:70:a3:0b:2f:
                    19:76:a0:e6:ea:61:3b:37:93:37:c7:2c:b6:33:b0:
                    2d:61:f4:d0:a8:1f:55:83:e1:70:d1:3a:b5:cb:18:
                    b6:3c:12:b2:d7:c9:2f:9f:3f:5d:47:6e:fb:54:1a:
                    f2:5b:54:3e:83:92:ea:cb:4c:a2:6c:66:56:94:e6:
                    a1:20:63:e8:93:5e:c6:55:24:19:39:34:00:65:56:
                    a2:1b:1c:2f:ce:6d:ba:da:f8:43:76:7d:64:90:d8:
                    8f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:08:DD:E9:A4:B5:E7:64:0E:96:C6:66:1C:09:27:5F:8D:BE:10
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.56.0/22
                IPv6:
                  2001:df1:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:74:38:54:51:2d:9e:42:d6:b5:54:6e:5a:bd:c4:c2:a6:ad:
         7d:f7:94:3c:35:53:f9:42:f0:bd:33:0f:45:e5:e6:d0:65:9e:
         8e:86:be:84:e8:f6:7e:3d:c0:29:a0:44:b6:f8:aa:3a:41:f5:
         8f:02:d7:3f:c7:40:54:9b:d5:20:11:45:ff:9a:ea:b9:c2:7b:
         9f:46:51:23:fc:65:11:a0:2e:9b:08:e7:ad:8d:ca:fe:da:b7:
         72:3f:a1:e1:74:51:ac:52:a1:15:3f:f9:c1:d9:ff:03:63:cf:
         fa:01:e0:7b:0f:58:fa:84:ac:89:31:94:29:30:99:2d:64:4d:
         8b:83:68:ec:d0:eb:06:d6:5d:01:70:63:a4:20:82:d0:d0:fd:
         b7:d5:c0:d2:b7:31:a0:99:53:31:31:88:41:12:89:2c:14:2a:
         22:13:c6:38:56:19:5b:87:75:86:51:ea:93:01:12:ff:3f:d6:
         34:00:82:6c:57:7a:f4:75:18:c6:97:d4:1e:6b:f7:90:29:47:
         a1:91:d0:5d:d6:7f:70:b0:06:1d:74:78:e5:d0:1c:4a:62:45:
         5a:21:e0:10:88:7d:e3:ff:71:67:56:39:29:5d:fe:2c:7d:d0:
         9e:c7:ca:b8:d8:68:b1:80:bd:d7:4d:26:54:9a:73:37:15:ed:
         00:d9:86:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:43 2026 by rpki-client