Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/585E79C2048A11F096A42611C4F9AE02.roa
File:                     585E79C2048A11F096A42611C4F9AE02.roa (raw, json)
Hash identifier:          UzjLtpWI9VWrrlY2BLx/0aK12MY0kf1MBz6rqiR8YGs=
Subject key identifier:   90:E6:42:E5:76:20:84:FD:2B:C5:C1:A7:F2:0B:A3:87:88:3E:9B:95
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E31D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/585E79C2048A11F096A42611C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:42:48 +0000
ROA not before:           Sun 31 May 2026 16:42:48 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134300
IP address blocks:        103.192.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58141 (0xe31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:42:48 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6508-d702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:30:09:5e:b0:04:55:40:08:49:ec:09:24:
                    e1:91:2d:33:1d:5d:59:fa:1a:ec:bc:29:33:65:82:
                    6f:14:7c:31:14:c4:52:f5:15:e3:e2:29:2f:a7:2c:
                    9b:03:c5:b4:42:f8:ca:6c:b2:3a:c7:9a:fb:7c:6f:
                    bf:a6:42:1d:36:76:39:5f:2a:77:6a:b0:c8:39:a3:
                    24:96:bc:bc:0a:34:6b:69:8a:bd:f0:18:6e:72:a9:
                    93:d5:7d:4f:90:1b:e8:4b:2c:23:8d:c1:28:42:85:
                    98:dd:96:2c:42:5a:f9:b8:fe:8e:1b:b2:58:36:ca:
                    95:75:40:c8:f2:6a:e7:85:94:8c:37:f7:10:31:ff:
                    b8:5d:14:86:37:79:d1:a5:52:94:7a:ab:65:30:f4:
                    fa:67:d1:47:31:05:46:2a:07:fd:0b:54:70:d6:c8:
                    de:46:9d:d4:ae:51:83:22:65:95:ac:b4:28:8a:c3:
                    8b:97:75:13:7f:9a:d3:7d:ae:68:63:43:23:7c:b3:
                    c4:6d:11:57:aa:fd:7c:af:ae:51:cc:71:20:cc:de:
                    84:35:22:36:5e:18:f3:0c:7a:f3:e5:e7:6f:ed:55:
                    2d:12:34:cf:06:23:dd:3d:3d:55:46:7f:2c:11:03:
                    3b:5c:37:b5:12:c6:98:f9:1b:2f:36:cf:5e:e8:0d:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E6:42:E5:76:20:84:FD:2B:C5:C1:A7:F2:0B:A3:87:88:3E:9B:95
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/585E79C2048A11F096A42611C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:74:f8:fb:c9:4a:58:f0:03:92:f8:83:8f:67:2a:1c:20:45:
         75:a7:44:ea:e7:93:95:5e:d9:13:0e:02:12:d3:d5:6e:15:ee:
         cc:11:7f:22:84:f3:06:a9:13:fa:26:65:92:ba:b5:9b:1d:64:
         c3:0d:58:58:ab:57:03:89:7a:de:65:85:83:c5:5f:39:79:91:
         33:bd:4b:fb:43:c3:7b:05:2e:16:80:45:18:ff:bb:fb:75:74:
         e3:54:d1:1a:09:ec:a2:30:16:3b:ec:c0:0f:30:55:07:38:40:
         0d:0c:99:79:f8:c7:82:e2:16:96:61:26:ec:fb:78:c7:c4:88:
         6a:36:1d:a5:4b:ee:f1:5a:24:c7:65:5c:77:7b:63:ab:35:6b:
         d8:6b:12:45:40:1e:7b:f3:6d:65:00:72:f0:73:90:d7:c6:b0:
         25:6f:c5:0c:cd:71:8d:e5:01:93:0c:b7:da:cf:8d:c3:dc:86:
         2b:e9:d1:2a:a8:38:8f:29:f7:84:b8:51:14:d9:c0:1a:62:2e:
         2d:8c:8f:ec:8b:61:41:8e:cd:c1:90:aa:d0:8c:aa:78:7e:63:
         0b:d8:cf:92:d8:ae:4e:1a:07:ae:cb:8c:e0:2e:43:0b:c3:bb:
         8c:2d:b0:1c:b4:05:a0:73:06:93:2b:a1:ba:c1:ee:3a:bd:bb:
         4c:7f:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:06 2026 by rpki-client