Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53DEF29C283211ECBE887F3BC4F9AE02.roa
File:                     53DEF29C283211ECBE887F3BC4F9AE02.roa (raw, json)
Hash identifier:          caw7z1xmNQiXJS5/HhyI5Hy/XFYl7ASpqu+gEz9EObA=
Subject key identifier:   6E:79:F6:6E:A7:EA:57:03:B0:E3:6C:F2:1F:8E:E8:BA:BF:76:9E:E8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53DEF29C283211ECBE887F3BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:22:33 +0000
ROA not before:           Sun 31 May 2026 17:22:33 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     146869
IP address blocks:        103.173.118.0/23 maxlen: 24
                          2001:df7:9a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59364 (0xe7e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:22:33 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e59-b4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:e2:a4:b7:4b:76:87:41:8e:b5:10:1e:37:
                    65:1e:a3:a0:15:44:e9:0f:27:d6:d1:11:a2:fc:aa:
                    56:64:39:53:cb:db:d1:4d:51:29:3b:56:d4:07:7b:
                    89:1c:94:2a:17:66:28:15:90:5f:24:0c:10:cb:f1:
                    cc:d8:81:cd:b6:ad:6a:a5:f5:bc:63:f7:0f:01:16:
                    f0:ce:cb:1f:21:31:a4:ae:74:4f:f8:cf:31:d5:3c:
                    a3:44:ba:11:1c:fa:6d:7a:6c:a1:20:12:31:75:5a:
                    84:8d:5e:2b:b6:6b:e4:8e:6e:b5:f2:69:57:b0:db:
                    c0:b6:c2:af:8f:11:79:0d:31:7c:30:c4:02:05:bd:
                    91:45:65:fd:20:67:2e:1c:4b:66:b6:f2:fe:1e:5b:
                    29:84:f5:01:e3:4e:51:3e:ad:9a:fb:db:7c:d6:34:
                    3d:39:b4:8a:e1:75:f3:10:a8:5d:ee:7b:c7:ef:05:
                    fe:74:e3:f3:c4:76:21:2b:ba:68:50:df:ef:d2:8e:
                    4a:89:91:6d:a8:05:e7:33:37:e1:cb:19:0f:70:31:
                    45:cc:33:99:8b:37:c3:f1:7c:3f:1b:af:71:9f:f4:
                    e6:d9:18:06:33:e6:6b:9a:35:29:d6:82:c6:b4:7b:
                    d1:7a:2a:b1:bc:d9:28:51:00:4e:cd:26:b1:f2:f6:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:79:F6:6E:A7:EA:57:03:B0:E3:6C:F2:1F:8E:E8:BA:BF:76:9E:E8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53DEF29C283211ECBE887F3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.118.0/23
                IPv6:
                  2001:df7:9a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:8b:c8:b2:4c:ac:9e:14:c9:f4:fd:70:22:de:98:c3:38:3e:
         b5:ae:23:67:f2:9f:dc:3f:67:d2:78:91:07:93:be:0d:26:d9:
         d5:fe:1b:13:be:9a:c1:28:bc:8e:a7:a3:35:cb:83:91:7e:fa:
         c6:e9:e8:38:ac:c1:ad:9d:d7:7e:70:11:c9:9e:38:a5:59:83:
         f7:6a:20:f6:bc:c6:80:0b:19:66:54:ed:c5:fa:47:cd:84:c4:
         bf:b9:ac:39:83:bb:e7:a8:9f:25:3f:20:df:08:32:25:42:26:
         e2:aa:0e:fb:20:50:a7:2c:70:51:ee:56:2a:d2:16:22:0a:22:
         b9:9b:02:a0:d8:81:10:4b:65:74:db:57:ed:8d:55:bd:23:b7:
         36:21:f9:42:11:24:ad:d4:0f:81:5e:28:27:20:23:14:b6:c2:
         3b:0b:9d:7b:21:d4:1b:26:db:f4:b4:92:b5:94:af:ca:d1:dd:
         5c:6d:35:64:b2:b7:64:b4:d5:32:6b:12:fc:d5:59:22:6b:0d:
         05:d0:8d:7a:3c:0f:42:d7:61:7e:de:7d:94:19:ba:86:52:e6:
         c0:43:27:36:d6:99:eb:91:87:e0:fd:a2:c6:3e:af:e9:1c:02:
         ee:9e:ac:0b:27:e9:61:32:03:ae:eb:b4:9c:82:4e:be:cb:19:
         1c:e1:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:50 2026 by rpki-client