Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D097F14856311EB9499FC65C4F9AE02.roa
File:                     3D097F14856311EB9499FC65C4F9AE02.roa (raw, json)
Hash identifier:          p+ENB0tID3RyqoPJ+EbsRs6czoAmFnzZwQmXyWnvWc8=
Subject key identifier:   49:D1:9E:4C:73:6C:0A:54:E4:3D:2D:24:02:61:28:AF:81:4F:CB:47
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E268
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D097F14856311EB9499FC65C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:36:57 +0000
ROA not before:           Sun 31 May 2026 16:36:57 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133290
IP address blocks:        103.146.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57960 (0xe268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:36:57 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c63a9-6de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:8e:b3:bd:8c:79:18:f9:76:0e:6e:64:4a:
                    16:f5:d9:95:73:39:c5:cb:1c:4e:bb:85:35:59:52:
                    a7:63:b0:e5:f5:ff:66:ef:70:48:9c:97:a9:b3:16:
                    4d:27:29:11:07:3a:42:0c:58:08:7b:df:15:83:bb:
                    7f:bf:11:36:e6:bd:00:07:13:86:16:26:23:a6:b8:
                    cd:36:03:59:19:3f:7a:a1:6c:4f:e5:b7:28:ff:40:
                    77:06:27:8e:77:90:1d:ff:8e:7c:34:8b:bd:61:56:
                    af:8e:73:f0:22:ca:c2:49:2a:85:99:28:9b:3e:8b:
                    9d:68:06:d7:8e:1b:56:d4:3d:df:54:bd:1b:a0:df:
                    dc:da:2e:96:d7:0d:3a:77:7a:94:64:8e:38:c5:0b:
                    1e:b4:2f:ea:1e:09:6f:76:10:51:3f:08:f2:66:0a:
                    35:fc:fd:c3:0f:3f:02:2d:3c:09:08:cf:7d:59:d7:
                    9d:cd:c9:c2:01:92:d6:d5:0e:8b:e0:5a:96:2e:fa:
                    16:2d:ea:2e:ff:1e:41:60:63:d3:61:12:88:ab:d1:
                    32:ab:2f:a9:c8:fc:4f:82:df:34:91:15:c6:d9:74:
                    c1:3d:35:8e:cd:49:ff:f9:5f:0f:be:5a:1b:da:fc:
                    c4:b9:b9:bb:75:d8:3a:24:3e:35:00:f0:26:ba:f9:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D1:9E:4C:73:6C:0A:54:E4:3D:2D:24:02:61:28:AF:81:4F:CB:47
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D097F14856311EB9499FC65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:47:c0:ca:6c:86:fd:00:e4:6d:f9:c7:b1:5c:73:12:82:14:
         7f:ae:e8:47:0e:a6:68:bd:3d:cc:2e:55:10:ec:07:f9:ee:55:
         2c:85:10:39:0a:20:2a:b5:94:72:28:b0:a6:92:5f:3e:eb:67:
         21:56:c5:b7:ba:76:d7:30:19:c3:69:14:01:38:c4:e4:19:32:
         c7:05:31:62:36:7e:51:6d:4b:d5:27:69:71:97:87:23:46:c6:
         a6:de:0d:61:43:63:5e:b9:01:8f:16:29:76:a8:e3:62:16:38:
         71:3c:26:76:01:8f:67:99:fd:b6:84:1d:85:24:22:2d:61:ef:
         94:a6:31:10:37:a4:f8:ee:8f:50:e8:f6:98:39:cb:7b:cd:28:
         b3:84:c9:1c:9f:e6:85:68:62:a7:fc:61:e1:fe:38:e1:b5:84:
         14:0b:ce:b8:7f:b3:e7:89:7e:79:09:21:26:8c:41:f4:1b:e3:
         06:df:91:36:03:88:2c:bc:af:06:ec:48:6a:b6:1f:81:7e:b7:
         dc:8f:a4:01:e9:7f:6a:97:5a:da:7b:76:4f:bb:bd:a4:92:be:
         2f:96:c9:35:88:7a:58:cc:5e:da:c7:41:8a:17:26:60:47:5d:
         1f:db:a9:04:3c:71:0b:3b:23:34:ac:fa:eb:82:56:2d:fb:d7:
         15:0e:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:14 2026 by rpki-client