Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38A5284AEC8011F08CA00C8B566F56BC.roa
File:                     38A5284AEC8011F08CA00C8B566F56BC.roa (raw, json)
Hash identifier:          DTv0BAGt8uz6Y2jlnT9+p7t1hawnah12bP+VSAmBBvo=
Subject key identifier:   8A:8A:13:B8:D1:A5:EF:4E:5E:DA:AC:D3:37:04:1C:D4:DA:70:1C:E6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2D9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38A5284AEC8011F08CA00C8B566F56BC.roa
Signing time:             Sun 31 May 2026 16:40:37 +0000
ROA not before:           Sun 31 May 2026 16:40:37 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134007
IP address blocks:        103.180.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58073 (0xe2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:40:37 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6485-70a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:b1:85:05:61:38:f7:63:7d:39:fe:8b:59:
                    e8:2b:8e:98:af:58:ce:13:fc:e5:60:bc:57:97:dc:
                    b0:24:7f:09:c4:b7:98:ee:a2:93:a6:4a:21:e3:ce:
                    bf:54:bb:5c:3a:02:6b:b3:ba:83:5f:32:88:d4:b4:
                    7d:6b:33:d7:9e:78:8b:76:5b:22:0d:22:ae:e9:c4:
                    f0:2c:41:60:0d:77:1b:f1:68:f5:fa:59:5d:d8:44:
                    eb:d8:59:44:41:ef:87:8e:be:b8:86:ff:23:c9:f8:
                    77:c2:f0:bf:16:0c:e0:5d:cb:fc:dd:bf:7e:45:e2:
                    1b:8c:ba:28:2d:21:f3:73:e8:40:e9:50:e0:31:23:
                    f6:d7:12:3a:8c:35:24:b2:24:b8:15:53:ae:38:dc:
                    cc:c0:e3:f7:c4:e6:1b:c1:40:f0:bc:8a:0f:93:d8:
                    b4:e4:a4:dc:4e:8d:52:6e:00:01:67:2b:38:f3:98:
                    af:4e:5d:88:de:7a:1c:36:0a:c0:3f:67:cd:9b:fb:
                    95:76:11:55:8d:bf:b0:71:66:d0:36:9b:a5:5d:b6:
                    de:fb:dc:d4:b7:30:ba:d2:14:cd:7c:50:33:ae:64:
                    05:e8:f9:f5:b8:22:f0:37:6e:2a:04:6c:91:14:89:
                    d4:c6:91:c7:ae:4f:2e:b7:74:fd:83:e7:53:6d:02:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:13:B8:D1:A5:EF:4E:5E:DA:AC:D3:37:04:1C:D4:DA:70:1C:E6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38A5284AEC8011F08CA00C8B566F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:df:27:a5:60:ee:d8:61:bb:f2:12:dd:30:11:f3:43:c6:2a:
         ac:bb:39:78:13:e1:5e:be:41:0e:fa:9b:24:de:b1:1d:fb:29:
         49:cc:13:02:cd:db:79:16:65:5c:99:b9:3b:af:a3:7a:71:c3:
         5f:3c:36:08:04:c3:98:af:53:e2:37:f3:aa:4d:94:d5:76:e7:
         dc:3b:81:58:e5:02:b7:c2:27:c7:50:f8:86:29:28:2c:1b:63:
         0d:91:3b:54:69:90:65:70:36:e7:1d:33:10:18:c4:9e:2a:c3:
         84:09:74:14:e1:fe:92:39:67:97:81:ce:e2:c8:ed:9d:22:4f:
         38:ef:11:7a:39:e2:ab:b3:36:0a:f1:67:d3:ae:26:02:17:55:
         a4:e2:ae:3f:70:09:04:fa:16:89:06:e5:c2:16:6e:65:19:78:
         1f:83:5e:03:dc:a8:16:86:c7:a6:0d:a2:3f:ba:2f:90:40:11:
         44:14:ce:be:93:17:75:67:5a:96:28:18:64:a0:4b:bf:93:5d:
         e7:c8:e6:c1:ea:b3:dc:44:83:56:0b:c3:68:d2:9f:b0:15:f9:
         7a:69:b7:c8:94:79:5f:fb:01:09:86:ea:aa:5c:b4:40:46:aa:
         e9:9c:45:9f:ef:ee:28:63:7d:18:cf:83:ee:26:eb:8b:20:05:
         28:29:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:37 2026 by rpki-client