Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa
File:                     5845933C7CD311EB98250761C4F9AE02.roa (raw, json)
Hash identifier:          tIiuYWHeaujsm1622nXbr2RZnGecm6Xh59lL5UI6T58=
Subject key identifier:   89:EE:C3:C3:32:F3:B5:79:5A:6C:17:26:ED:0D:D3:5F:9E:2C:E3:B9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E72B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:16:39 +0000
ROA not before:           Sun 31 May 2026 17:16:38 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141547
IP address blocks:        103.163.58.0/24 maxlen: 24
                          103.164.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59179 (0xe72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:16:38 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6cf6-b6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:04:a0:e4:10:59:21:62:3d:a1:92:37:cc:
                    65:1a:65:b7:40:8b:a1:62:71:3c:39:0b:b7:24:d1:
                    15:c5:25:8f:c5:86:3c:96:e7:8c:9a:06:b6:87:23:
                    93:bc:0c:2d:f0:7c:2b:24:e3:29:f5:bd:ca:b5:70:
                    2d:57:2a:13:42:8f:94:56:61:d1:ca:44:1e:b9:2e:
                    96:a8:1a:08:98:92:98:5b:20:c1:e1:3c:ae:18:56:
                    85:4d:86:3a:9d:32:f4:6f:3d:43:ce:b1:09:57:a5:
                    be:66:7f:e2:c3:dc:4e:b8:7d:2b:b7:f3:0f:1d:33:
                    4a:38:e0:c0:09:03:01:69:b5:25:a5:f0:50:f9:e6:
                    45:4e:75:06:0f:2e:9f:58:3e:49:66:03:76:99:d3:
                    7c:08:e3:80:ed:34:ea:07:3b:8e:4b:76:65:9a:91:
                    3b:5c:7a:d4:a6:ab:78:5a:d0:d1:9f:42:a1:b0:de:
                    33:a6:78:eb:cf:ec:28:76:0c:59:06:9b:ff:81:34:
                    83:fb:f5:b1:05:29:ed:10:81:53:12:70:66:a7:73:
                    f1:83:86:03:c4:34:fa:d3:b0:8f:ac:92:27:e2:bc:
                    36:41:f6:57:e6:ca:fe:86:7a:7e:c5:db:14:67:8f:
                    2e:3b:c7:34:2a:14:ab:d2:9f:21:82:12:28:ab:61:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EE:C3:C3:32:F3:B5:79:5A:6C:17:26:ED:0D:D3:5F:9E:2C:E3:B9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.58.0/24
                  103.164.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:56:c2:15:e8:f1:08:00:3d:58:a8:b8:c7:b1:fe:ec:82:75:
         61:f5:63:e6:3f:79:01:48:df:79:f8:0f:40:c0:dd:19:e1:96:
         54:1c:7a:ea:c2:73:8d:8e:bc:1e:f0:1b:56:e1:f9:27:c3:df:
         02:e3:bd:04:de:60:88:10:b2:dd:b4:44:d9:03:25:41:b5:f2:
         5d:46:ed:89:b2:ed:b6:38:40:bc:a4:75:d9:d4:e5:d4:11:e4:
         4d:37:af:32:bc:68:8e:d5:0d:54:ec:04:9f:a6:ac:dd:8d:6c:
         a6:83:55:c6:46:97:2b:8a:13:1a:eb:97:e1:54:ea:47:a1:ec:
         78:c5:89:4e:64:6a:40:3a:12:10:8e:e6:56:69:9b:11:de:39:
         b9:9a:21:bb:1a:53:09:d6:57:8d:59:3d:c3:2f:76:53:e8:7e:
         25:a9:93:3d:00:a2:70:96:c7:a1:e6:e9:2b:5b:01:6b:eb:de:
         95:92:9e:dc:a0:f8:bf:ce:37:a1:2a:cd:ea:9a:36:a6:f7:17:
         18:07:22:c6:21:35:ed:aa:0d:9d:fb:87:d9:3d:e4:cf:79:62:
         a6:46:7e:f0:90:5b:a4:c2:87:b9:a4:d7:77:bf:78:1e:99:2e:
         8b:71:00:b3:ee:43:4d:7e:f4:5f:01:5f:bf:c9:31:6d:49:9b:
         75:cd:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:23 2026 by rpki-client