Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C96D528062C11EC865AA71CC4F9AE02.roa
File:                     3C96D528062C11EC865AA71CC4F9AE02.roa (raw, json)
Hash identifier:          wVH4+aWZOnuMlHF3RDaJRJy+w11jetoceXe545VUgrg=
Subject key identifier:   93:DA:D7:22:BF:A4:DF:1C:4C:E0:12:3E:36:8F:CF:4A:D4:18:8A:87
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E801
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C96D528062C11EC865AA71CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:23:28 +0000
ROA not before:           Sun 31 May 2026 17:23:28 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     146917
IP address blocks:        103.172.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59393 (0xe801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:23:28 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e90-2dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:61:83:2e:9f:99:f3:47:3e:e5:5c:21:04:
                    03:3f:94:72:f9:5e:82:ee:3e:24:ef:99:09:ad:e8:
                    6d:14:87:b7:4b:2f:f8:45:72:ea:72:c8:38:51:29:
                    47:47:c7:08:fe:4d:72:94:8c:18:96:33:73:7c:22:
                    ef:1e:e4:40:a4:5e:a9:46:1d:de:cb:91:cc:03:ea:
                    1d:c2:96:e9:cb:4c:96:8a:e5:a8:25:9f:fe:7d:d4:
                    31:61:8a:39:bc:84:6b:35:8c:9f:cb:dd:1b:f1:c7:
                    fc:a5:06:4b:75:80:05:14:eb:f8:71:eb:86:49:8e:
                    6c:1a:94:2d:e0:82:d3:2c:37:1b:b1:a8:25:02:d0:
                    b6:3d:e8:89:0a:3d:89:23:5f:eb:cf:8e:49:05:44:
                    6b:15:38:b2:0e:f7:64:4d:df:e3:77:0e:51:a3:14:
                    10:c4:cb:e7:73:13:23:70:ce:1a:b8:07:66:26:f4:
                    24:8d:2a:38:0f:4e:33:26:2c:d8:64:dc:be:2b:53:
                    b0:97:db:1e:d2:21:ba:fc:13:9f:f5:6b:61:29:16:
                    ad:8f:fb:33:3f:0b:7c:47:b1:3e:f1:b4:2e:d7:cb:
                    cd:88:66:99:76:f3:4c:70:db:50:6a:d0:03:72:33:
                    b1:71:3b:79:b2:be:f9:66:7d:dd:80:6c:00:fb:f7:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:D7:22:BF:A4:DF:1C:4C:E0:12:3E:36:8F:CF:4A:D4:18:8A:87
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C96D528062C11EC865AA71CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:fc:3e:fc:99:64:31:4a:fb:88:61:82:72:78:8c:92:5b:
         38:fc:b7:39:49:48:b3:aa:dc:b6:ae:7d:e4:24:21:22:d1:4c:
         92:5a:ff:3d:8b:3c:d0:50:b5:13:b1:b4:dd:fa:04:05:1f:fe:
         8c:eb:8b:79:b3:bc:56:e2:ae:3a:28:5a:dd:9c:56:de:c1:c4:
         3d:5e:ec:dd:51:74:b2:16:4e:7d:85:93:71:22:4a:aa:cf:93:
         d2:66:f5:84:75:34:67:f4:4d:ec:23:3f:c1:a3:c2:17:7e:98:
         1a:21:03:1d:72:a0:b9:1b:51:72:20:f7:38:ce:76:f0:ea:7f:
         4e:cd:32:36:76:d6:0e:a5:ef:72:6a:50:9d:35:a9:0b:b4:64:
         46:20:cb:2d:73:6b:f0:4b:d4:6d:60:e4:1d:45:79:48:80:ab:
         03:7d:42:de:ba:a3:1e:62:6a:4e:a6:e3:03:4b:d6:8d:67:fa:
         c6:8a:a0:f4:56:04:d4:9e:0f:fa:9e:2e:3b:94:31:8d:b9:70:
         c1:3a:49:1a:17:8d:ae:0e:04:a5:68:29:29:5a:9c:86:14:9d:
         43:3b:68:80:22:69:c2:11:8f:f3:4e:92:b3:e6:5f:7e:a7:04:
         4f:54:ee:88:bb:c0:f2:56:c3:7b:1c:3a:0f:82:ed:da:ab:e5:
         66:c3:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:08 2026 by rpki-client