Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50078490210C11EC8EB11648C4F9AE02.roa
File:                     50078490210C11EC8EB11648C4F9AE02.roa (raw, json)
Hash identifier:          Hth9sI4gTkLJMhuaHwTkguj4rXVre/5kAULjb8QUOJo=
Subject key identifier:   31:FC:29:AE:84:53:EA:E7:14:4F:54:62:15:22:0A:9A:6F:F9:C9:22
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E73C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50078490210C11EC8EB11648C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:17:11 +0000
ROA not before:           Sun 31 May 2026 17:17:11 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141571
IP address blocks:        103.163.104.0/24 maxlen: 24
                          103.163.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59196 (0xe73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:17:11 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6d17-095a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:9f:d2:bc:db:cf:b3:56:a7:c9:61:1a:5b:
                    36:3b:9c:62:71:f9:b6:58:bd:f8:e8:72:3a:5b:62:
                    88:a7:26:e4:22:b6:67:99:aa:ea:65:1a:37:44:42:
                    f0:c7:69:99:e9:58:a1:65:4e:14:88:a4:29:b5:30:
                    d5:4d:fd:87:2a:e2:af:7f:55:c8:c2:a3:e3:01:33:
                    58:57:26:ea:dd:a2:31:9d:b3:b0:c6:2a:72:cf:3d:
                    b0:52:f9:65:51:f5:f5:2c:61:09:80:66:d3:8f:fc:
                    f7:6a:20:14:48:d5:08:b2:09:74:ee:e9:4f:55:0a:
                    a2:04:81:3c:9f:12:56:d4:d1:09:ee:76:5d:1c:fd:
                    00:d5:01:0c:eb:a5:52:96:b7:f7:e8:d8:86:1b:de:
                    12:8a:93:e7:4e:ba:e9:8c:59:88:06:fe:1e:af:26:
                    8c:25:2e:95:0f:65:43:5e:83:e6:5a:9b:71:0c:94:
                    f6:cc:df:1c:d4:ea:36:ea:7c:ba:ab:69:9a:dd:b9:
                    62:26:68:13:5b:31:76:fa:3a:cc:dc:08:da:73:1f:
                    bf:48:73:e6:26:6b:7c:09:20:35:0c:76:9a:3a:a5:
                    7b:23:e7:9c:f2:15:0b:8c:0c:d8:07:14:ee:99:16:
                    eb:39:09:e3:a4:a1:fa:7d:14:d7:c4:42:f1:e3:98:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FC:29:AE:84:53:EA:E7:14:4F:54:62:15:22:0A:9A:6F:F9:C9:22
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50078490210C11EC8EB11648C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:5e:06:50:eb:57:42:92:60:34:e6:92:ac:31:e6:93:2c:
         1a:1f:2a:af:b4:cb:40:7f:c6:cc:9c:8c:77:dc:3f:3e:c8:73:
         30:74:1c:5e:c4:33:d2:63:bc:78:2a:ed:e1:f8:a3:3c:cb:b4:
         07:e1:0a:bd:23:1f:4b:72:d6:58:1b:d7:7c:7a:2b:34:c1:17:
         d8:ff:11:be:98:6f:cb:14:58:28:c7:d0:36:a8:4e:69:98:30:
         75:43:6b:3f:8e:dd:9e:20:29:a4:19:3c:d3:ba:a7:e7:93:06:
         a7:bb:1d:c8:53:d9:0d:b6:de:47:ce:48:cf:41:4e:b8:bf:db:
         e0:79:f0:22:20:c5:c9:77:08:97:8d:1a:e9:84:08:fd:ce:6e:
         80:a4:2a:07:e3:01:bd:d8:8e:73:7e:7a:37:02:3e:8f:f4:a6:
         84:5b:5f:b6:93:05:b7:62:41:72:a4:c0:9c:b7:d3:54:4e:04:
         4a:df:6c:87:53:94:fb:02:ce:33:2a:60:04:98:67:7a:0c:d8:
         be:70:82:15:73:92:7e:b9:08:00:60:fb:83:8f:27:9f:80:93:
         97:94:62:1a:7b:ca:79:e8:96:ca:f9:b1:6c:93:4f:db:a6:ec:
         56:d5:d4:67:b8:f2:3b:f3:b1:9d:8e:45:10:a2:5f:59:38:93:
         ad:b0:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:27 2026 by rpki-client