Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50FEDA52BDCF11EA8755D90DC4F9AE02.roa
File:                     50FEDA52BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          1gR1Kg8BEOnnfvOOi7m9F2G6fzfQVUUFeE/6DBf5pIE=
Subject key identifier:   8A:2D:02:45:8F:62:B8:EB:65:10:79:A1:62:D7:80:C3:AE:F4:66:F1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E22D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50FEDA52BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:35:05 +0000
ROA not before:           Sun 31 May 2026 16:35:05 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132999
IP address blocks:        103.141.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57901 (0xe22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:35:05 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6339-1f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:4a:96:0d:e1:66:84:10:89:b4:26:ca:37:
                    90:62:ce:af:ac:22:9b:4a:eb:47:5d:c5:12:bf:11:
                    d9:5f:cf:4f:89:60:aa:72:5b:41:b2:48:7a:e3:fe:
                    26:e1:fc:21:e7:f3:05:25:b9:74:a2:63:b1:93:81:
                    cf:d2:c5:23:b0:85:96:2e:a3:63:ba:dd:ff:de:37:
                    fc:ec:51:ed:ad:94:d3:11:ff:ec:68:57:63:73:0d:
                    5d:76:73:91:e1:b2:a0:37:bf:bb:13:1b:4a:72:14:
                    c8:19:57:cb:18:4d:67:cf:2e:f5:1f:08:82:d7:53:
                    a9:ed:70:4b:50:22:07:05:cb:06:1b:cc:f4:b1:2f:
                    c0:c7:a7:93:73:e2:d9:99:39:6c:f7:e2:dc:5b:3d:
                    f6:e7:a1:58:59:10:b1:8f:b1:bd:27:99:50:6d:55:
                    23:45:1a:fa:5c:2c:e5:19:df:54:7d:1d:46:b2:70:
                    5f:99:ae:bb:3d:ad:d3:39:60:03:c4:ca:ff:aa:94:
                    3b:a6:98:63:8b:e7:27:17:16:4c:9a:03:75:7d:1f:
                    00:26:c7:57:2c:c5:f2:0a:50:77:9c:3f:81:2f:f0:
                    69:6f:cf:96:de:69:04:ec:ed:f5:10:10:0d:64:88:
                    f3:a1:05:1e:32:10:6a:41:af:e3:67:f4:36:e0:cf:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:02:45:8F:62:B8:EB:65:10:79:A1:62:D7:80:C3:AE:F4:66:F1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50FEDA52BDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:b6:d8:e7:1d:be:24:74:fd:2b:b6:d6:31:89:36:72:ed:a5:
         96:67:5b:9a:2c:b0:4d:0d:1d:45:ab:b4:f4:e9:9f:73:c3:f4:
         af:97:7c:50:6c:a2:19:0d:24:c6:f9:3d:c6:b1:d3:8a:17:31:
         7a:35:6b:a2:e4:03:b3:85:e4:39:88:6b:96:41:b9:d2:57:d0:
         27:a2:d1:71:6e:ac:20:c6:c0:02:57:f5:be:9f:5f:03:6c:da:
         f5:67:18:06:6b:79:94:3f:53:66:2b:37:a0:91:e7:f6:98:66:
         19:ff:8e:5f:ed:28:bd:1e:aa:ab:bb:c8:91:d6:94:ee:6d:7a:
         73:20:49:cf:27:0d:47:d7:41:f9:d4:4b:d3:7a:f9:33:30:d4:
         bc:c2:9e:bb:c5:df:ac:f0:ee:91:e5:ec:72:78:f0:67:5d:88:
         e8:b3:ef:60:36:e6:1c:8f:cc:4d:1d:c0:7a:fe:6c:83:1d:b2:
         7d:87:25:32:8a:b9:5e:ba:9e:e8:14:46:74:3f:72:2e:c6:90:
         02:5e:4c:35:8c:52:f0:1c:f3:48:c9:85:76:78:ab:89:b4:07:
         2d:01:dc:c8:75:cd:64:fc:05:99:92:ca:49:44:04:f1:4e:b3:
         a6:67:12:7f:b9:4c:b1:a4:19:23:62:24:32:21:93:b8:e4:90:
         5f:b6:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:51 2026 by rpki-client