Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B16287A43A711EDB443F97DC4F9AE02.roa
File:                     3B16287A43A711EDB443F97DC4F9AE02.roa (raw, json)
Hash identifier:          qUPFtNyWmulYXdryiy6R8kSvvSjelMsrLNuJZFk6mTI=
Subject key identifier:   8F:BB:C4:74:4A:2F:45:4E:87:3B:88:48:13:A7:99:1C:72:8F:A4:44
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E93E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B16287A43A711EDB443F97DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:34:28 +0000
ROA not before:           Sun 31 May 2026 17:34:27 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150097
IP address blocks:        103.13.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59710 (0xe93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:34:27 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7123-8556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:7a:e7:5e:9e:6e:f7:6b:ee:be:ee:78:8e:
                    52:c9:1c:d8:aa:99:25:3e:0c:e5:48:f9:8e:9a:d2:
                    00:11:04:2f:52:9b:41:e9:66:c1:df:5c:0a:59:95:
                    b6:6c:45:9a:47:cc:44:34:64:c4:49:53:a6:06:5d:
                    90:fd:5e:ee:ea:38:dc:2e:95:2a:96:87:73:76:df:
                    bd:39:99:6f:7d:e0:d2:e9:39:24:b3:d3:d3:62:68:
                    7f:e3:42:46:ec:4a:f3:44:bb:9b:35:eb:03:87:58:
                    d5:c7:3c:2e:02:ac:d5:1e:b8:b1:15:d4:0b:67:36:
                    ed:9e:78:14:46:49:a3:9f:f0:72:40:a6:11:08:7d:
                    ec:be:3f:a5:cb:aa:e5:db:93:16:6c:08:c2:75:59:
                    08:fe:dd:38:a3:29:0c:48:88:be:d1:62:c9:46:b0:
                    da:d1:21:c3:ff:be:5e:94:85:c1:91:8f:fd:5c:a7:
                    cf:34:be:41:74:ea:37:a7:29:4f:2d:3e:ab:0b:7d:
                    d9:23:5e:b8:a6:fa:f2:cc:e9:59:21:73:91:6e:e6:
                    6d:69:8d:a5:2f:de:e4:cd:e4:8a:fb:a3:d4:60:ff:
                    3f:3d:5c:9c:2b:e3:9a:25:4f:bf:4b:9b:05:a7:d2:
                    32:83:49:8b:95:f9:64:cc:89:d2:d8:53:f4:02:be:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BB:C4:74:4A:2F:45:4E:87:3B:88:48:13:A7:99:1C:72:8F:A4:44
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B16287A43A711EDB443F97DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:29:f9:f7:c1:e8:e9:a9:9e:0b:6a:4c:39:29:11:ad:e9:23:
         93:5d:55:bb:5e:af:da:ad:5c:27:ac:94:18:eb:a3:b2:bf:30:
         28:c5:53:c0:4e:7b:29:86:3e:ed:b9:e1:4f:05:2c:db:fe:eb:
         4f:f4:4c:a7:31:0d:65:f6:0d:9a:4d:59:ad:73:df:50:ea:17:
         62:21:ab:35:61:10:3d:c8:25:69:02:78:40:d6:d8:62:4b:b1:
         d2:05:ca:80:d6:77:8c:1a:3c:d1:20:50:fd:d1:86:a5:7a:dc:
         93:e2:c3:1e:31:ae:fb:67:9d:87:da:97:e7:69:90:d1:3d:3a:
         ec:e9:7c:e7:24:09:a7:e1:06:fc:70:02:f9:f9:2b:68:6d:3f:
         b1:c5:57:65:36:6c:6b:08:a8:06:6c:c1:50:a1:3b:ab:a2:91:
         c4:f3:a4:9b:fa:45:30:b2:b0:14:d6:5c:c2:b9:df:dd:59:07:
         d3:5e:2e:18:75:27:cb:36:70:d7:bd:f1:e5:95:3c:1a:30:c0:
         93:17:d8:d4:c3:47:74:91:49:cc:c6:1e:56:19:a7:14:12:45:
         33:7d:4c:60:14:19:c9:88:12:d4:c9:08:92:27:4e:ca:1b:0d:
         50:7e:1e:2a:f5:f3:67:7c:40:63:1b:8d:9b:1d:44:24:1b:25:
         be:d4:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:34 2026 by rpki-client