Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5722369C493511ED928D106AC4F9AE02.roa
File:                     5722369C493511ED928D106AC4F9AE02.roa (raw, json)
Hash identifier:          oCaOGw/zy5JYf/hWD5d8evYyaHemm8ajsO+wtQe+cUg=
Subject key identifier:   26:6B:C8:E4:5A:38:48:F6:74:18:82:65:1D:D6:86:F8:46:6D:17:D1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E67F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5722369C493511ED928D106AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:11:07 +0000
ROA not before:           Sun 31 May 2026 17:11:07 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140141
IP address blocks:        103.43.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59007 (0xe67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:11:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6bab-bede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:37:92:df:60:88:c1:0c:c8:32:35:73:12:
                    a3:de:1e:f4:d3:0b:44:e7:33:3d:a7:2c:42:fe:a2:
                    e2:a5:00:7a:bc:ef:2b:4c:2e:2a:a0:b6:b4:b5:8f:
                    7e:83:87:12:05:a5:ed:87:32:d2:a2:21:cb:84:9f:
                    d3:95:51:98:87:21:95:f1:95:b4:e1:0f:3c:b9:47:
                    9d:cd:70:54:d4:f8:99:8f:d2:c4:6d:84:96:e3:6b:
                    7d:70:7d:54:39:1c:5c:9a:18:90:1e:b8:33:22:6a:
                    38:af:37:79:9c:d8:bd:94:50:44:f4:b9:7e:85:a9:
                    28:45:f0:0d:61:06:0d:67:f0:1e:1f:11:8c:e8:98:
                    e1:3a:03:ed:2c:03:55:f8:3a:fd:1e:da:da:78:7c:
                    8d:ff:40:de:c2:13:1a:d1:b1:08:f9:70:e1:62:6c:
                    0c:08:1c:21:48:d4:45:fc:be:78:2c:4b:80:e4:6c:
                    d7:c0:9f:47:80:81:a0:8d:0d:31:ac:a9:c4:ad:09:
                    18:66:26:64:49:c7:0d:e1:23:bc:e1:58:14:5d:3c:
                    67:61:0a:b1:02:31:07:2d:9f:8c:79:7a:0a:68:a0:
                    05:c3:83:28:33:82:7c:e1:57:82:c2:59:f8:23:86:
                    57:e2:d3:ee:77:73:72:1f:de:5a:17:d5:56:e1:40:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:C8:E4:5A:38:48:F6:74:18:82:65:1D:D6:86:F8:46:6D:17:D1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5722369C493511ED928D106AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:12:aa:a5:30:cc:a9:4b:e5:f8:23:6e:78:ff:cc:fc:27:96:
         66:97:b6:30:86:a3:09:12:de:a9:e8:db:d4:40:fe:b8:89:94:
         8e:3f:47:b3:1c:6c:21:ba:99:55:e0:e6:0f:45:29:55:12:e5:
         2a:46:eb:3b:18:a3:aa:33:b6:c3:81:9a:0b:3c:9f:96:3e:cc:
         13:57:d0:e4:b5:ec:a1:e3:95:66:98:63:46:1b:f7:79:1d:42:
         44:e2:ab:30:bc:43:e2:2d:48:8b:55:a3:7c:90:23:82:43:bd:
         23:09:f7:38:74:4a:3e:c2:5a:da:ad:b0:7d:4c:1c:d8:b8:22:
         6f:4a:5c:9b:c9:83:c6:4e:c2:f7:32:5b:f2:79:ef:9e:50:04:
         f0:b8:c0:a9:b8:81:b0:e1:90:38:0d:77:51:53:bc:66:19:03:
         ea:6e:81:da:fe:d9:09:53:ba:48:70:8e:9e:be:fb:0c:e9:0c:
         95:3c:8b:9f:6b:75:a4:dd:b6:0f:3f:dd:d8:c1:f7:0b:0e:f5:
         bd:7e:49:3e:47:eb:92:bd:ef:e1:56:bc:65:e0:cd:8c:c2:e6:
         b6:c3:33:4b:f3:16:5b:1e:62:5e:50:49:17:48:cd:42:de:53:
         30:31:1a:11:90:d1:f3:5a:5e:a3:0a:ed:02:4f:00:45:35:01:
         15:63:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:08 2026 by rpki-client