Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa
File:                     55751B541A2B11EDBA2C6D18C4F9AE02.roa (raw, json)
Hash identifier:          V2vfbd56x21Nu2+KFg7IPIYJGjWJ0/QHkkD+TX1oYKI=
Subject key identifier:   7C:51:E0:D1:4A:C7:CD:87:0C:41:B8:C6:4F:92:AD:EF:FB:CB:C2:5C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E3FB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:50:04 +0000
ROA not before:           Sun 31 May 2026 16:50:04 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135726
IP address blocks:        103.132.56.0/22 maxlen: 24
                          2001:df0:1d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58363 (0xe3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:50:04 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c66bc-56ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:82:3c:31:37:6f:98:85:7d:0e:b2:d8:5c:
                    17:3c:df:94:d8:09:71:f0:5c:46:ed:20:92:b2:f8:
                    af:85:ae:c5:be:c5:e1:4b:23:d2:ac:d1:dd:32:ad:
                    c8:94:88:60:6a:b4:b3:6b:a7:26:b1:06:67:83:ba:
                    aa:37:b8:ea:1c:d3:d1:cc:61:c6:17:45:6c:6f:7a:
                    c4:eb:0d:38:f4:f3:a5:9f:a4:46:19:42:0f:4a:15:
                    59:5f:c4:35:01:7b:28:12:78:48:41:1b:2a:04:6b:
                    9c:de:05:20:85:17:81:db:5a:9c:fd:23:a7:94:05:
                    2d:0f:6a:f9:f9:ef:b8:1b:a2:e6:74:1d:65:e8:6d:
                    d9:93:2a:cd:9e:73:13:58:8e:c3:c9:80:dd:6d:3b:
                    be:7a:b1:81:5d:52:e3:41:62:f0:7b:ad:55:7f:23:
                    72:f8:52:87:bb:27:e8:48:e6:e2:29:99:62:fe:3d:
                    7f:6c:e5:b3:21:50:37:e1:da:6d:8d:e3:6d:df:f0:
                    c9:74:9f:a2:ec:45:56:ee:10:54:21:d7:b5:33:0f:
                    dc:6c:e5:5f:4a:d5:6f:12:4b:93:e9:2b:45:c2:34:
                    e4:b8:ca:41:fc:67:7d:e1:f5:ce:67:26:13:aa:4b:
                    f9:80:af:6d:97:2d:0f:f1:2a:20:f3:13:e3:01:52:
                    51:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:51:E0:D1:4A:C7:CD:87:0C:41:B8:C6:4F:92:AD:EF:FB:CB:C2:5C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.56.0/22
                IPv6:
                  2001:df0:1d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:24:e8:ce:a2:80:61:32:ae:10:0e:bc:49:83:d7:e3:86:
         b6:4c:d7:fb:db:aa:c5:9b:43:ff:ba:b6:41:8a:2d:51:36:8a:
         b4:c2:11:66:39:9e:da:62:63:15:1f:46:89:77:38:c1:9c:94:
         24:69:42:f2:1c:2f:23:72:24:a3:c5:40:4f:07:a5:96:be:4f:
         4c:c0:e0:b0:51:17:a0:ee:72:36:75:ba:4b:c7:51:3a:d7:3d:
         c3:14:c0:59:37:5f:2e:6d:a6:bd:39:3d:e9:e0:83:d2:1d:23:
         8d:1a:26:1a:10:53:12:36:f3:19:57:8b:b5:15:2d:21:25:0b:
         63:31:1f:66:26:e6:33:20:1e:e4:c7:3c:32:f7:6c:71:c9:88:
         4e:ce:80:e9:60:b1:d2:93:6d:58:7c:8e:00:85:da:63:da:aa:
         1a:a4:dc:45:d6:07:d3:8c:df:98:93:1d:91:f7:50:a5:f2:fc:
         e7:d1:80:0c:a6:b0:e7:c4:49:a6:a5:31:2f:21:07:55:84:c8:
         16:35:8d:da:3b:52:58:58:d2:45:c1:05:1d:62:e0:0b:4a:de:
         20:31:9c:60:97:f3:40:91:76:88:1a:d0:31:cc:6c:35:b0:69:
         bb:71:49:35:d3:b2:62:6f:1a:d7:1b:b3:7e:e9:81:67:9d:7f:
         f3:80:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:27 2026 by rpki-client