Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/444F0E48BFED11EE984DE054C4F9AE02.roa
File:                     444F0E48BFED11EE984DE054C4F9AE02.roa (raw, json)
Hash identifier:          sXy+7F9HVBFgRw3jsXnNZS+mFvRG28hZ247BLTA7x60=
Subject key identifier:   BB:47:86:2C:5B:92:27:38:54:A6:AF:0E:A3:C0:E6:55:BB:08:EF:03
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EB1B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/444F0E48BFED11EE984DE054C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:49:31 +0000
ROA not before:           Sun 31 May 2026 17:49:31 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.187.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60187 (0xeb1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:49:31 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c74ab-5523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:81:3c:ee:e5:63:33:82:ab:2b:d7:c8:d3:
                    b5:7b:54:c8:dc:a7:d4:69:52:fb:62:f3:7c:ca:53:
                    17:46:df:c9:7c:f1:da:29:01:08:1a:2c:e4:21:b1:
                    f6:3d:3f:f4:93:e7:e7:5e:29:f1:33:7f:46:fe:d1:
                    27:8c:da:d4:b6:c9:46:94:17:a2:88:f2:9c:03:a5:
                    b2:7f:dc:5f:87:ed:be:62:de:94:6f:4d:5f:c8:2f:
                    5b:e7:6c:b5:8d:7a:20:c6:73:3a:0d:c1:b4:eb:28:
                    7c:82:b5:cd:30:b7:f6:7b:ee:72:df:eb:51:a4:ea:
                    b0:1d:11:c3:06:84:d9:a2:46:6b:40:9c:bd:76:84:
                    3b:47:4e:41:ad:da:86:5e:44:71:1b:5e:89:a1:9b:
                    1f:7c:e4:59:ec:cd:14:95:43:06:eb:0d:fd:62:19:
                    3a:e5:e5:a2:39:3a:75:ba:8c:95:1b:dc:a6:55:9d:
                    2a:8c:b8:66:14:b1:f4:8a:9c:e2:d1:30:17:cc:a6:
                    e4:f5:f3:f8:de:94:fd:22:2d:5a:7e:81:e3:a4:1a:
                    68:4f:49:6d:ed:08:f4:dc:86:2c:04:7f:34:b8:b9:
                    1e:1e:e0:0d:bc:31:10:b5:25:59:29:99:74:79:36:
                    d2:1f:7a:6c:c5:ca:68:02:3a:38:fc:c2:47:c1:85:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:47:86:2C:5B:92:27:38:54:A6:AF:0E:A3:C0:E6:55:BB:08:EF:03
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/444F0E48BFED11EE984DE054C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:ab:f1:48:16:d8:84:ab:d9:f6:50:16:b4:e4:b4:e6:c3:
         e9:99:42:1d:39:6b:19:b3:f8:3f:eb:43:09:37:32:d0:cc:53:
         e4:3d:5a:a5:74:7d:cb:af:45:8b:8b:4a:3e:71:ab:10:5e:f6:
         1a:10:ef:85:3f:aa:c9:ac:cb:5e:24:ef:2e:84:28:fb:56:10:
         fd:63:66:27:d4:0e:dc:9e:66:7f:7d:c1:a7:9f:b8:fc:49:95:
         a5:e3:b2:91:e1:0c:e2:cc:43:da:9d:8c:34:b4:5c:32:25:ad:
         4f:d2:b3:05:4e:c3:bf:85:55:c1:59:f5:98:a7:84:fd:70:05:
         db:e6:63:18:6d:46:31:1a:7e:d0:25:91:e2:25:77:36:88:a3:
         8b:ef:d3:ee:eb:06:ac:44:3d:dd:94:04:3d:bf:09:34:33:e5:
         64:3a:1a:f3:2b:ab:54:5c:da:36:ac:ef:7f:39:8d:bb:ea:2d:
         fe:a3:99:c3:55:d9:ed:d4:f5:70:fc:87:ca:e5:88:fc:ff:82:
         47:16:74:0d:3e:41:63:8f:c6:0d:03:bf:e4:f1:2c:1c:45:e5:
         e5:cc:27:ba:55:9d:e1:db:9c:1c:b0:ed:14:79:22:8e:da:61:
         e9:29:0b:23:e7:8a:d3:0c:18:b5:a7:6f:c8:cd:86:c8:b7:49:
         de:f9:53:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:12 2026 by rpki-client