Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37572B20788611EEA009903AC4F9AE02.roa
File:                     37572B20788611EEA009903AC4F9AE02.roa (raw, json)
Hash identifier:          ivKnJnOacGBGe8RdJgyc+hnNI0uf0oBy4B+rS4m4G+A=
Subject key identifier:   18:2E:C0:97:7E:26:59:83:C5:7B:32:2E:18:25:A0:CF:11:D0:4E:CA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA18
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37572B20788611EEA009903AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:41:20 +0000
ROA not before:           Sun 31 May 2026 17:41:20 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151764
IP address blocks:        103.80.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59928 (0xea18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:41:20 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c72c0-3215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:f6:ba:38:a5:68:3a:a4:75:92:2c:d0:d1:
                    a1:a2:44:42:94:60:cf:ce:5e:8c:b7:85:8a:39:ed:
                    3c:c1:bd:5b:f6:57:a9:e2:0c:06:53:ce:18:f0:84:
                    f4:f5:9a:17:ab:e2:0f:7f:06:85:bb:6e:ae:27:db:
                    84:0c:95:8a:da:3a:be:f9:aa:38:69:5b:9e:db:d1:
                    3e:b2:01:09:93:72:c6:c5:69:84:bc:19:1d:5d:99:
                    2c:64:0f:20:ab:f0:7c:7f:4e:32:f8:fe:ca:5c:69:
                    7d:f3:bb:ff:54:5e:b0:7d:c5:42:bb:9f:ff:b2:7e:
                    5e:c6:56:f6:cc:33:43:99:9b:85:fc:e7:0b:37:b9:
                    05:fc:c2:ee:19:f0:65:70:88:a7:3d:87:08:dc:06:
                    dd:89:96:24:0d:91:9d:b8:45:39:66:20:45:49:c9:
                    66:35:73:ae:e4:46:15:e0:a6:55:47:35:1c:66:fc:
                    dd:c6:3c:3a:4e:e4:8e:68:71:6e:ea:da:73:76:ca:
                    85:1b:bd:cd:87:b2:37:41:84:ae:97:d6:10:61:56:
                    61:2e:93:cc:4f:a8:74:0c:61:ef:c4:8f:94:5c:0d:
                    bc:ac:c0:10:d5:a2:dc:85:94:94:d8:7f:ac:f8:86:
                    41:28:4f:d1:b7:62:2e:e9:69:e5:cb:80:f0:6d:92:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2E:C0:97:7E:26:59:83:C5:7B:32:2E:18:25:A0:CF:11:D0:4E:CA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37572B20788611EEA009903AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:f3:c9:62:ee:f4:32:83:9a:97:14:87:73:65:cc:ff:fd:ae:
         d3:98:c7:9b:93:9a:98:f2:31:c3:9e:f0:5a:4c:7a:e9:e7:c9:
         83:dd:8b:8c:e9:ba:ad:77:38:dc:bf:d6:33:d2:2c:66:99:95:
         01:4f:90:8e:eb:48:10:d5:cd:b9:73:5f:07:e1:b2:c3:ed:81:
         20:27:71:b9:cc:a4:55:f6:09:ab:70:1a:05:2c:77:db:04:43:
         d4:9f:b9:bb:31:99:c3:78:76:fc:7f:d4:19:ff:b4:6b:f1:28:
         f1:9e:76:13:fc:36:09:8e:43:7c:de:e0:58:6c:09:95:97:a2:
         e7:a2:78:9f:44:23:2e:9d:10:ee:da:79:05:83:e7:a5:52:ef:
         e1:04:04:79:5c:76:99:ca:21:9b:a1:04:01:1e:e9:e7:c7:7f:
         a4:ad:bd:38:a3:0d:55:a9:8a:ed:6c:6e:44:6c:ea:19:11:38:
         14:58:64:29:5c:cf:16:0e:0e:31:52:6d:22:94:0b:b4:65:52:
         07:85:13:65:ff:24:96:5f:4c:2a:7c:5f:58:a6:76:1e:c1:fd:
         64:fe:6d:ff:28:b4:b1:f5:11:2e:51:65:da:04:38:6e:1c:7e:
         07:6f:b1:4f:c1:e4:f0:e5:f9:df:c6:0b:59:b7:6b:44:6a:25:
         6b:aa:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:15 2026 by rpki-client