Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58C68D2AA71311EF89133531C4F9AE02.roa
File:                     58C68D2AA71311EF89133531C4F9AE02.roa (raw, json)
Hash identifier:          WlmwVey1vh53ZiO/IVkNxuMdnxZY3k4+CMJ2qpmMSDo=
Subject key identifier:   09:82:D0:5B:09:B5:54:47:11:65:4C:A6:8F:7E:C9:5F:79:24:67:A1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E1E0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58C68D2AA71311EF89133531C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:32:34 +0000
ROA not before:           Sun 31 May 2026 16:32:34 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132563
IP address blocks:        103.168.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57824 (0xe1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:32:34 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c62a2-131b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:95:8c:19:d2:79:b8:ac:7d:f4:1e:b7:cd:
                    bc:b2:13:cc:6f:fb:5e:db:83:bf:f3:fc:c3:f6:42:
                    24:82:d8:db:de:e6:9e:5d:bb:c0:41:bc:da:26:ac:
                    f4:98:fe:25:5e:68:9b:78:60:82:1b:14:1a:68:93:
                    f1:15:34:3f:d6:06:59:eb:0f:9a:47:b9:10:4e:02:
                    9f:83:8a:ad:46:b9:51:a3:f6:8e:a9:f9:4d:03:27:
                    b0:a0:3c:79:6d:58:be:e8:ab:ee:47:54:ab:aa:20:
                    02:f6:ee:29:6b:04:49:80:ad:90:bf:2c:e3:d8:25:
                    be:0b:4b:60:26:20:b8:97:7f:15:82:db:ce:8b:78:
                    22:19:dd:1d:12:c1:35:29:dc:3e:b7:8a:10:32:08:
                    c1:3b:ca:36:c1:7a:e5:aa:d3:9a:cd:4c:91:6a:84:
                    b1:fc:93:e5:26:0d:50:af:cd:7d:d5:04:33:62:e1:
                    db:28:7b:8d:bb:8b:3d:37:d1:a6:8d:5d:4f:8d:15:
                    53:13:b2:60:1b:8b:52:5a:72:41:39:1f:fe:95:aa:
                    76:f7:18:8c:c6:aa:38:b3:8b:cd:36:4a:99:48:8e:
                    57:29:b9:9a:98:82:a3:54:84:c8:91:f9:37:ee:7e:
                    ea:f7:0c:e3:35:75:17:48:ef:c8:17:16:9b:20:5d:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:D0:5B:09:B5:54:47:11:65:4C:A6:8F:7E:C9:5F:79:24:67:A1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58C68D2AA71311EF89133531C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:80:f3:97:12:fc:72:06:91:03:d2:9b:06:b4:a4:09:44:
         bb:91:2b:b1:5d:7b:bb:7c:b7:d4:e6:82:b6:c9:59:5b:72:25:
         0c:a5:97:f1:7f:d9:2a:5b:aa:52:42:bb:17:a2:65:be:f7:89:
         6b:e2:3d:22:49:69:cc:ed:ee:94:ce:47:4e:2d:21:9a:f9:1f:
         82:1b:8f:a0:92:ce:39:0c:c1:45:6b:5f:69:86:ae:07:7d:eb:
         5c:09:c9:b3:81:5c:bf:73:fb:47:80:14:51:8b:45:c8:0c:67:
         40:ac:80:70:15:f9:a0:9f:4d:ed:08:47:c3:ec:65:fa:05:ed:
         d3:9e:b8:98:a3:84:96:5f:02:16:c9:02:f1:0c:8c:7a:f8:4a:
         c3:64:14:86:c6:74:a0:5f:47:ef:41:77:0a:8b:b3:b4:1e:fa:
         fe:1b:f4:9a:82:de:aa:09:bf:d8:4c:19:16:d3:03:10:f5:f5:
         2b:76:4c:8f:5f:89:bb:ca:28:ca:50:76:a5:63:31:05:67:0e:
         e8:37:81:9e:5e:a8:b0:df:50:24:fb:b1:9a:c5:97:19:b7:08:
         e0:c8:47:21:c2:09:f4:37:ec:6d:e2:08:8f:95:99:06:74:60:
         f4:95:13:bc:2e:40:d3:31:c5:4b:7b:a6:a7:12:86:e4:65:42:
         e6:4b:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:54 2026 by rpki-client