Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/392DB872478011F080126518C4F9AE02.roa
File:                     392DB872478011F080126518C4F9AE02.roa (raw, json)
Hash identifier:          NFK+K8jfJJkGzXZ+J/tRKuXacD1an47cfEE6pk9MRFg=
Subject key identifier:   6F:7F:D7:C4:7A:95:D8:22:7C:53:42:8F:25:BD:1C:34:A7:17:94:A9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E66C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/392DB872478011F080126518C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:10:18 +0000
ROA not before:           Sun 31 May 2026 17:10:18 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140114
IP address blocks:        103.146.120.0/24 maxlen: 24
                          103.154.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58988 (0xe66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:10:18 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b7a-5578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:b4:f2:72:7f:27:3d:ec:a3:d2:74:97:9d:
                    2f:5e:43:f7:2c:47:b4:11:38:b4:8a:a4:ac:a2:d8:
                    a5:9b:c2:28:c0:3f:e5:d2:19:05:97:35:aa:87:56:
                    4b:1a:65:04:b7:2b:c1:48:0c:90:78:aa:6d:9c:57:
                    76:2c:4a:af:b0:35:de:e9:89:9c:dc:32:8c:de:7c:
                    ae:e3:e2:dc:9a:b3:c9:2c:74:86:90:2a:ea:e1:16:
                    06:54:52:96:24:2d:41:02:9b:dc:dc:5f:b6:0d:70:
                    a7:29:e8:e3:70:11:11:b6:53:16:be:e1:cb:f5:e1:
                    01:1c:51:f0:08:15:25:d2:db:63:58:d8:cc:36:aa:
                    e8:e0:27:19:90:70:b7:17:fa:04:99:41:fd:11:36:
                    44:a9:8d:a2:06:4d:f6:ef:59:9e:fc:3c:34:b0:d5:
                    cd:10:21:4c:7e:bb:50:91:2a:b4:bc:38:7c:6e:71:
                    df:dd:bb:89:8f:19:cc:d4:2a:db:02:6d:b4:71:63:
                    95:2d:03:d1:57:ae:fb:ff:db:87:f7:d3:2c:eb:d3:
                    d7:12:47:20:86:65:b4:de:3a:d4:b2:a8:66:d1:5b:
                    75:fe:56:d2:55:31:b3:ad:a7:54:bc:23:ac:a8:3b:
                    e8:2f:d3:de:15:a0:46:df:9b:b6:e3:d4:2b:6a:fc:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7F:D7:C4:7A:95:D8:22:7C:53:42:8F:25:BD:1C:34:A7:17:94:A9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/392DB872478011F080126518C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.120.0/24
                  103.154.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:13:5b:10:9b:99:b7:f2:7e:65:54:8c:3a:b8:30:48:15:8c:
         ec:e3:78:a2:26:20:12:e5:d4:e0:77:41:44:36:9b:42:af:7c:
         e0:f6:1a:62:3f:95:45:98:c4:58:d5:55:67:28:a9:b3:bc:04:
         5c:6d:09:4a:91:47:d3:e2:92:ba:a6:83:a7:66:41:2a:a3:e7:
         f8:1e:4a:8e:cc:0a:3d:bc:52:37:63:e1:e3:6a:66:48:ee:68:
         93:cc:7c:ac:ff:5b:d9:91:d3:9a:af:89:c7:06:9b:58:76:8c:
         dc:26:95:2a:7d:60:a3:37:8e:28:08:8a:ed:46:00:81:cd:e4:
         4b:fe:e3:6a:00:2b:24:c4:be:79:0d:4e:49:b2:97:be:b9:74:
         3c:4b:15:84:11:8e:09:e5:e7:f9:12:51:25:f3:e3:01:03:fb:
         12:b3:f2:74:30:3f:98:21:51:8a:7f:18:47:67:82:a1:c3:e2:
         bf:40:b9:c1:b4:fc:3b:c6:80:6e:0f:51:e0:1b:42:2e:98:3a:
         6f:29:a4:c4:0f:fa:5e:41:76:57:04:c0:03:2b:48:5f:75:3d:
         c1:8b:4e:6f:e8:2b:e3:d1:52:e6:6b:fd:82:6f:a6:66:b0:85:
         7d:41:98:c9:70:d8:c5:4b:79:bb:4c:29:85:f5:11:42:90:74:
         32:53:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:52 2026 by rpki-client