Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37FB40B604A211ECBB369A6EC4F9AE02.roa
File:                     37FB40B604A211ECBB369A6EC4F9AE02.roa (raw, json)
Hash identifier:          rajj+ifA4EjhfhZZhDM9BYbuDa3OCz88+zyAOUa977E=
Subject key identifier:   DF:9B:A8:57:5C:B4:12:35:21:F2:64:54:C4:7F:12:A7:E5:83:84:CF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E3CB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37FB40B604A211ECBB369A6EC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:48:28 +0000
ROA not before:           Sun 31 May 2026 16:48:28 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135255
IP address blocks:        103.211.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58315 (0xe3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:48:28 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c665c-6635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:03:ab:a3:69:31:07:fa:aa:e5:a6:81:68:
                    28:4d:ed:50:e1:0a:56:16:bf:78:c9:6d:54:cd:57:
                    5a:5e:03:00:a6:67:2a:48:ec:cd:12:f5:58:a2:7b:
                    a9:63:ce:5f:82:62:d6:0c:fb:ee:50:58:c7:64:ca:
                    da:68:d4:73:ce:a1:71:ba:c1:d0:25:24:05:5a:4e:
                    a8:0a:a3:0d:81:47:12:05:ac:8a:7d:b7:5d:10:f4:
                    c4:5b:e6:19:44:e9:35:da:3e:06:e4:7e:db:86:c6:
                    7d:d6:8d:fc:d2:2f:83:eb:95:30:de:0a:2a:cc:26:
                    45:83:59:86:f3:7f:6f:15:8b:b5:19:e3:18:ab:fc:
                    68:33:57:45:db:33:2a:5c:44:99:dd:3d:56:13:06:
                    5e:44:d5:ed:4f:b2:0a:d5:0b:1c:36:99:52:34:0e:
                    01:c8:df:5e:33:72:38:d9:5d:1f:d2:f6:fa:23:2b:
                    75:d2:8e:2a:a6:4f:b8:7d:99:89:66:bb:ae:43:a6:
                    f8:fa:ce:9b:75:80:89:d3:ef:74:99:4f:c2:5f:ae:
                    5e:fd:dc:3c:c6:08:82:2c:48:25:4a:da:27:82:f8:
                    c1:88:1e:3e:60:ab:33:c0:66:d1:86:20:cf:37:9b:
                    ff:c5:80:8d:7b:fe:48:16:bd:f0:49:2a:18:b5:2a:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9B:A8:57:5C:B4:12:35:21:F2:64:54:C4:7F:12:A7:E5:83:84:CF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37FB40B604A211ECBB369A6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:e8:6a:85:98:5d:a5:d6:69:e6:56:96:1a:66:f4:65:20:07:
         9a:ff:15:2c:9a:55:d8:7b:1b:d0:55:49:1d:30:8b:a1:0a:07:
         79:cc:81:58:ed:76:41:14:59:d6:78:6c:89:20:48:81:e2:17:
         b9:df:29:45:71:94:01:e3:c7:d5:1a:80:ca:dc:e7:ca:a1:c5:
         86:78:3e:51:0f:86:73:15:09:95:d6:e0:10:b8:f7:e4:c3:e8:
         0a:fb:48:76:78:cf:ac:14:e8:0c:05:2e:e3:69:66:52:4f:85:
         5d:52:fd:85:02:c4:61:a7:d9:65:5d:cc:9a:2d:9d:9b:ce:b9:
         e7:bc:2f:1a:ba:dd:be:4c:a0:38:4f:11:bf:e1:9f:18:c3:96:
         b9:40:0d:a4:06:6a:7e:c3:df:d0:fd:31:12:e4:50:68:61:2d:
         59:c8:a8:d8:ce:12:2f:ac:13:13:6d:62:6f:b1:1b:b0:96:02:
         2b:6e:d7:8d:c1:5d:11:41:10:ab:85:9a:6d:bf:6a:23:fd:62:
         04:3c:40:df:b7:9f:32:e9:a7:a3:3b:67:7b:9b:ef:18:11:d4:
         02:17:0a:51:e7:c9:b2:6c:12:2e:db:4a:8b:04:d2:39:e0:be:
         00:36:e5:7b:78:44:99:12:96:66:57:78:91:1f:c0:ec:e6:79:
         4a:7a:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:46 2026 by rpki-client