Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49E2633C0B1D11F1BC8A8D6F3D3D8C67.roa
File:                     49E2633C0B1D11F1BC8A8D6F3D3D8C67.roa (raw, json)
Hash identifier:          LqWigHBZAdB9S5Q6tR8GO/q+BkoGrOGxPh0/fDvulgA=
Subject key identifier:   30:83:66:8D:09:29:D4:42:B2:90:4B:36:27:53:78:73:27:9E:C1:6D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E342
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49E2633C0B1D11F1BC8A8D6F3D3D8C67.roa
Signing time:             Sun 31 May 2026 16:44:01 +0000
ROA not before:           Sun 31 May 2026 16:44:01 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134674
IP address blocks:        103.168.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58178 (0xe342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:44:01 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6551-c945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:7e:80:7a:b7:4c:03:f4:43:5c:6f:f1:be:
                    cd:19:b8:ef:5e:43:63:f0:8a:52:b4:98:70:21:7a:
                    1a:b6:fd:76:3c:ed:35:ba:f8:03:ae:8d:10:16:20:
                    f0:e1:31:6d:29:eb:ec:83:bc:1f:41:0e:16:2f:6d:
                    01:ef:16:bd:cb:5f:0c:54:f4:f0:38:cb:6d:bf:ce:
                    d4:1a:eb:71:95:9d:fb:6c:92:a6:b2:9f:8f:0c:1f:
                    e3:6b:ae:fe:f9:0b:f2:e1:fc:92:ee:13:e4:ba:15:
                    9b:e2:69:aa:59:34:d2:3b:f6:a5:b8:d2:66:13:af:
                    8e:be:a8:5a:4e:70:ba:2a:e9:77:1d:92:67:fa:d4:
                    1b:6e:6b:64:4a:86:fb:37:7b:ed:0a:be:a4:eb:8c:
                    cc:a3:e0:43:8f:3e:01:51:59:2c:7a:d2:27:28:20:
                    cb:9a:e9:de:f4:10:0a:58:79:20:5d:42:a7:bd:d9:
                    41:7c:3b:a6:fb:dd:34:b2:5d:ee:27:32:41:91:51:
                    80:79:5d:75:aa:a6:37:ff:66:2c:d4:65:70:e5:7f:
                    2a:f2:07:c0:78:cd:5a:97:b7:76:df:dc:aa:ff:25:
                    11:40:84:ed:1d:da:56:45:5e:23:ae:65:5d:5f:02:
                    68:40:b6:d0:2a:3e:d4:e3:3f:d3:27:26:d9:8c:6a:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:66:8D:09:29:D4:42:B2:90:4B:36:27:53:78:73:27:9E:C1:6D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49E2633C0B1D11F1BC8A8D6F3D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:7e:60:c0:6d:02:b3:04:34:fa:01:c3:16:7a:2b:12:9f:
         9b:9d:43:03:dc:ad:64:8c:e0:32:70:7e:cd:fb:34:c9:69:29:
         67:16:e7:a1:47:be:d1:e5:9c:1f:93:aa:58:7f:63:ac:b1:77:
         d6:dd:3e:5b:f0:fb:fe:1b:c2:2e:6c:62:7c:af:55:24:21:ab:
         2c:df:55:fe:96:a8:cb:0b:06:94:b5:b2:7f:e8:3e:d9:ff:e3:
         a0:8c:4a:88:9b:ac:25:e2:a3:f8:41:c1:17:f1:75:e3:23:44:
         2c:ba:85:41:68:36:d1:2d:7a:a9:89:0a:ae:ed:cd:6d:bb:fc:
         be:24:a5:8d:7c:69:ce:d4:41:d1:e2:f6:f1:60:2d:cc:91:2d:
         c5:e4:67:c5:cf:aa:a9:b0:e3:27:2e:d3:33:66:62:8f:6c:22:
         dc:76:66:69:3b:21:80:1f:40:ac:8d:2c:b5:bb:3d:b4:bb:c9:
         df:cd:db:47:fe:e3:42:9e:37:40:d4:36:8f:4a:30:f6:d6:4b:
         dd:8d:66:41:84:ee:f7:e8:5a:bc:d4:c4:9b:11:6c:19:45:73:
         28:56:e3:32:43:39:60:1f:ad:59:bb:55:a9:38:f3:dd:9e:53:
         96:c9:72:18:e1:46:bd:b3:0b:64:f2:14:24:7a:36:e9:f8:13:
         e1:0f:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:02 2026 by rpki-client