Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa
File:                     55F5D8044DAB11ECA32B1C1EC4F9AE02.roa (raw, json)
Hash identifier:          Mn8YzwPhej7MtVNe2641dvY7Ugzbj4Gyn0v65tNgdto=
Subject key identifier:   F7:7B:57:2A:49:4E:5D:5F:08:EA:51:0B:7C:C8:14:0A:25:A4:C1:CA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E523
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:59:32 +0000
ROA not before:           Sun 31 May 2026 16:59:32 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137122
IP address blocks:        103.110.240.0/22 maxlen: 24
                          2400:a820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58659 (0xe523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:59:32 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c68f4-0b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:9a:7e:32:7d:5d:14:19:77:1d:b4:6b:b2:
                    49:16:ff:d3:bd:24:f7:df:82:14:b6:c1:e8:b3:b1:
                    be:88:54:d8:a2:18:47:5e:43:99:d3:db:a1:3b:02:
                    2d:e2:d8:b8:64:ce:28:7d:58:57:86:7a:32:c8:71:
                    42:df:ff:8e:e2:70:13:d2:fd:5e:1f:2e:e9:0f:8a:
                    d4:76:06:c6:d3:54:8e:61:93:a4:3e:72:3d:54:03:
                    17:bc:68:bc:04:8a:c0:6d:02:76:d8:3d:9d:f9:de:
                    d8:5b:26:37:16:b3:d9:bc:18:76:99:6b:08:48:c7:
                    83:a1:13:ac:2f:ad:c5:e1:99:99:a4:08:b5:ef:32:
                    20:92:df:fa:2d:8e:0e:2c:c2:43:4b:21:c4:55:29:
                    7a:d6:0b:c4:5a:33:7b:25:44:87:74:99:3d:82:29:
                    d3:20:d1:2c:b1:0e:84:0e:d9:6a:a6:f3:84:4c:37:
                    19:68:b7:71:71:f4:56:6c:96:67:07:8e:b8:ba:a4:
                    d2:e8:7d:bf:0f:19:14:21:69:d6:ac:e1:fb:ae:7e:
                    c3:d1:f3:f7:f6:a1:f1:c1:22:30:3c:b6:07:93:f2:
                    1f:93:b7:b7:69:20:df:43:da:59:76:bc:52:20:f6:
                    3f:fa:b5:6a:6f:75:20:df:d1:a0:e9:53:7c:89:ee:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7B:57:2A:49:4E:5D:5F:08:EA:51:0B:7C:C8:14:0A:25:A4:C1:CA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.240.0/22
                IPv6:
                  2400:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:f5:4e:95:71:01:d3:c3:35:6c:e8:38:4d:3a:33:f0:78:77:
         7f:cb:ec:da:ea:67:41:02:29:e7:00:6d:73:f2:60:be:03:99:
         60:5a:7f:b0:e0:27:28:d9:66:f4:99:f3:cb:64:ee:56:e2:ef:
         b0:1f:ff:2f:75:b4:dc:3c:8a:ad:14:43:d9:62:e6:10:6d:ce:
         9a:b9:0f:cf:b2:f0:37:92:b6:09:3a:f7:11:56:aa:0f:b1:ab:
         55:b5:c1:6d:cf:65:6c:76:24:d5:cc:e2:7f:ba:0e:a0:2c:06:
         53:e9:2d:d1:31:34:65:d0:63:ef:19:ae:df:6d:be:51:bf:bd:
         79:9a:86:b4:d4:8b:15:57:aa:4c:ec:92:93:3e:fb:fd:89:23:
         c9:b7:b1:76:3d:2e:a3:bb:dd:f0:24:6e:de:5e:81:46:29:a0:
         0d:0c:82:ee:d5:9c:4c:5a:8b:d1:83:89:3a:23:09:17:16:1d:
         88:83:af:0d:4a:61:b1:04:92:6c:c9:7d:eb:67:30:bd:a4:43:
         76:e3:87:92:59:38:36:d3:3e:ad:06:88:42:af:1c:82:84:86:
         e2:1d:8b:aa:0d:78:a0:1e:f2:39:27:59:31:93:7d:5f:81:6b:
         de:97:8a:9e:6d:f0:a6:d4:ec:d2:f1:e5:6f:a6:35:ca:e0:b1:
         6a:d1:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:14 2026 by rpki-client