Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E8CD9D0CF4B11EFB61FC224C4F9AE02.roa
File:                     4E8CD9D0CF4B11EFB61FC224C4F9AE02.roa (raw, json)
Hash identifier:          5fpkldtBuD5X1Bxmh+EIQt6u3NrmI0hAffoiESTwNHc=
Subject key identifier:   17:AF:78:49:F4:C9:67:DE:4D:42:B6:4F:86:53:88:97:3C:FC:30:B6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9D0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E8CD9D0CF4B11EFB61FC224C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:39:06 +0000
ROA not before:           Sun 31 May 2026 17:39:06 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151158
IP address blocks:        103.120.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59856 (0xe9d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:39:06 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c723a-e853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e2:e6:ca:eb:bc:bf:bc:71:19:16:f2:d8:c3:
                    0a:fc:90:51:1c:e2:9b:ea:83:28:3f:d7:17:c8:4e:
                    f0:0c:0f:ed:92:68:ea:e7:01:10:d8:ae:0d:ca:c7:
                    b6:dc:17:a8:53:11:5f:3f:1a:c7:bb:48:5a:98:75:
                    dc:a8:80:4f:98:25:bb:ae:24:12:b2:a8:32:c0:a1:
                    f7:89:a7:b6:37:4b:c0:e8:32:25:61:81:d1:2d:f9:
                    e6:86:7f:50:18:3b:28:f9:b7:d1:0c:3f:8f:23:98:
                    f7:b7:30:4f:2b:3b:95:4c:f2:44:d9:1b:21:e2:e9:
                    b9:6c:44:d8:d9:0c:e8:4c:21:d2:a5:97:aa:cb:51:
                    11:4a:d1:f9:bb:07:7c:5c:c8:af:a4:c5:fa:8c:49:
                    fb:ac:67:45:5d:29:89:5d:ca:68:fd:31:4f:89:be:
                    81:04:e6:a2:1a:d5:9f:36:52:10:b2:d6:b9:d0:3e:
                    05:a4:9e:e8:e7:a7:92:b5:2b:24:bf:dc:32:3d:e9:
                    10:ff:09:6f:88:3d:5d:91:a8:a9:e7:08:33:5a:b6:
                    ea:b7:af:b5:66:43:18:fb:3b:cd:86:ea:de:87:58:
                    25:70:14:c2:99:a7:05:45:f7:e6:a6:a4:84:b1:1d:
                    47:4f:3d:13:42:65:58:f6:af:fe:4b:78:b0:c3:8c:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AF:78:49:F4:C9:67:DE:4D:42:B6:4F:86:53:88:97:3C:FC:30:B6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E8CD9D0CF4B11EFB61FC224C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:b3:9a:3e:ec:ec:0d:ea:44:af:45:b2:6c:62:a4:3c:1a:
         0b:9a:d2:5f:75:dd:8f:bb:ce:31:c9:57:f1:b4:4d:79:ed:fb:
         54:37:9c:11:e5:db:af:d6:d5:64:58:43:23:3d:7e:8b:34:3d:
         07:8a:87:ca:2e:0b:39:2f:8f:1c:72:7f:22:47:0d:f4:d6:b6:
         1a:ed:52:7d:53:a4:2e:2c:1f:6a:bc:21:a3:af:17:5f:53:88:
         ee:77:31:93:d6:33:7c:4d:ec:b0:94:51:83:c7:82:94:d1:15:
         b7:76:94:44:f6:c7:3e:62:ec:0e:b9:02:70:64:e3:2f:95:45:
         02:12:c0:88:a3:7d:c2:f5:fe:51:53:29:a6:35:73:97:51:e3:
         07:23:4c:8e:1e:be:42:b7:38:f0:41:fa:fa:9a:aa:6b:33:8c:
         5c:be:0a:62:ba:d9:af:3f:74:f4:9c:37:1e:b7:31:ba:8c:cc:
         cb:c7:fd:07:7b:11:23:b5:cb:52:fa:99:aa:b0:02:ba:b7:36:
         77:e0:51:9b:73:93:66:4d:5e:09:59:4e:91:fc:8d:97:15:78:
         13:60:6b:ec:d0:9a:94:86:8e:78:20:66:da:d1:89:b5:5c:fe:
         1b:9e:03:7d:02:c8:fe:97:60:74:94:a8:00:cb:53:80:bd:29:
         af:e7:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:42 2026 by rpki-client