Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48F9C1240D0211EF88E2F77AC4F9AE02.roa
File:                     48F9C1240D0211EF88E2F77AC4F9AE02.roa (raw, json)
Hash identifier:          krhtBxnWJ21MBwSL89GQnKzyiKVq2O6SauCsvr9f9BA=
Subject key identifier:   BE:37:FC:DF:E1:12:90:16:75:96:69:77:07:20:EC:74:40:2E:38:18
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E702
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48F9C1240D0211EF88E2F77AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:15:18 +0000
ROA not before:           Sun 31 May 2026 17:15:18 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141493
IP address blocks:        103.161.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59138 (0xe702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:15:18 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ca6-c579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:eb:4e:71:5a:01:d1:7a:8c:c9:bd:90:3e:
                    85:c9:6a:0f:36:52:4b:c1:4c:5e:1e:46:cf:62:fa:
                    03:d9:9c:59:10:6f:ed:60:58:ae:db:04:9a:ab:6c:
                    c2:a2:4d:2b:d2:42:16:89:91:a5:bb:84:b2:3e:10:
                    36:6c:f0:2a:e9:6d:70:e0:5d:0f:e6:39:5a:9a:8e:
                    a3:f8:9e:04:0f:24:d7:b2:19:1f:e5:53:d5:66:66:
                    b9:92:e8:f9:85:b6:72:de:d3:68:3c:f6:fd:f3:50:
                    cd:f0:4d:d7:0d:a7:d3:da:41:3a:26:d1:05:d0:35:
                    e8:5d:c1:bd:ac:1f:7a:ee:10:55:e0:cb:1d:cd:5f:
                    fc:e6:3c:06:3d:a2:b5:fd:d9:25:f8:75:de:60:11:
                    17:dd:1b:04:e7:b0:25:95:fb:5f:7f:c2:6c:4b:c3:
                    2a:ac:b1:16:d2:f3:39:f1:ab:0c:f5:ed:05:5a:c9:
                    de:0e:12:6c:37:32:db:39:f7:9b:5a:0a:60:1e:76:
                    a9:2f:d8:1a:35:f0:45:96:44:9a:f8:74:db:b3:5b:
                    43:98:75:ee:e9:6c:1b:22:d1:7d:28:c9:22:62:1d:
                    a2:ac:6b:a1:13:73:0e:ca:d3:72:7a:a5:0f:3d:eb:
                    e1:9a:4e:2f:b9:d3:93:1c:de:f1:7d:c9:45:ec:d0:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:FC:DF:E1:12:90:16:75:96:69:77:07:20:EC:74:40:2E:38:18
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48F9C1240D0211EF88E2F77AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:37:96:0f:ef:a3:c1:c6:88:74:a2:92:37:bf:39:1b:20:82:
         74:2b:cc:41:58:d5:49:cc:3a:55:05:e4:28:5d:7b:08:06:fe:
         c5:15:4e:4b:d3:ad:75:d4:3f:5d:82:cf:fe:68:bb:b0:4d:1c:
         f7:87:1b:17:e5:60:ef:70:0d:e6:9e:9f:dd:15:9e:fb:41:c4:
         a9:8d:ac:dc:ff:b3:dc:63:c0:db:e5:7a:0d:5d:93:7e:41:3a:
         a7:7f:51:cf:a6:69:be:67:68:ce:46:df:f6:db:58:5e:b6:54:
         af:3b:c5:8c:00:3e:6e:09:7f:6e:93:6e:0a:97:55:d7:38:4a:
         3d:53:3b:0c:b9:d0:73:7a:44:20:14:23:8f:d9:32:ca:59:a5:
         00:5a:db:9b:29:ac:ca:9d:e9:d3:b5:00:dc:89:5e:9f:9e:8b:
         9a:64:9c:76:d2:99:f0:14:5a:9d:b6:85:9e:4a:ca:a7:a8:8b:
         5d:81:86:11:bb:9b:49:98:12:3e:71:ce:a7:f0:75:13:af:80:
         b2:38:d9:41:d6:5b:58:16:b2:d7:4d:3c:a3:f2:17:d7:6a:24:
         c6:d6:98:d7:aa:e6:e0:42:1f:5f:1c:62:b7:d0:61:2b:31:41:
         23:9d:0a:83:d9:06:d1:e8:76:c1:bc:e0:d3:2f:11:37:a9:1a:
         c6:99:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:39 2026 by rpki-client