Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AC32AA2E27111EC80ADDB74C4F9AE02.roa
File:                     5AC32AA2E27111EC80ADDB74C4F9AE02.roa (raw, json)
Hash identifier:          3+yAuFp2Kp78CiPg10iYQ4WtCE4sB9xRFnx2zOY0mQ0=
Subject key identifier:   3D:7C:60:BD:30:97:C7:71:2B:EC:94:88:63:D8:9F:CE:EF:4C:30:61
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E873
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AC32AA2E27111EC80ADDB74C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:27:24 +0000
ROA not before:           Sun 31 May 2026 17:27:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149193
IP address blocks:        103.178.62.0/24 maxlen: 24
                          103.178.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59507 (0xe873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:27:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6f7c-fd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:93:46:92:de:cd:f2:d0:ad:55:90:43:5e:
                    98:b8:16:07:86:6f:d4:e5:aa:4a:8c:7b:23:ad:a5:
                    46:92:15:de:36:52:7e:72:99:f5:ce:76:f5:7e:b3:
                    bc:99:bd:52:af:00:fe:b8:be:20:e4:eb:f2:56:04:
                    4a:5d:53:20:26:50:04:e8:41:41:5a:39:62:9c:21:
                    8d:b1:c8:7f:54:e3:10:be:47:9f:6f:e3:bc:3c:17:
                    ce:8a:cf:ae:0a:bb:5c:f5:f6:93:3f:58:dc:9a:44:
                    c7:4a:ca:5c:1b:72:22:db:aa:ae:0a:c0:db:0d:6c:
                    ae:f7:ea:f1:6e:33:e0:2a:96:f0:32:76:0a:0b:ff:
                    1f:2c:15:25:dc:63:81:de:a6:5a:72:d4:e2:9d:ba:
                    09:b8:c4:ee:2e:61:41:be:d9:be:78:73:87:ff:c2:
                    03:f4:79:61:19:65:66:c9:97:c4:f7:bc:a2:fd:85:
                    27:cc:36:f2:c1:c6:af:ae:bb:a4:61:49:95:2b:1a:
                    83:d9:c4:39:86:b4:1c:5e:b5:ff:88:d9:f6:e1:35:
                    3e:b0:09:e8:b6:cf:42:98:cb:47:bc:18:40:bb:b9:
                    66:ca:29:f1:ca:5d:10:1d:c1:03:e6:2f:2c:d1:cd:
                    ac:e4:b4:2b:71:3b:bc:1e:fd:47:0a:e0:97:56:0f:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7C:60:BD:30:97:C7:71:2B:EC:94:88:63:D8:9F:CE:EF:4C:30:61
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AC32AA2E27111EC80ADDB74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:95:27:aa:32:43:e0:be:f2:35:fc:37:f0:74:67:08:99:a8:
         15:e2:02:f4:66:07:6f:21:c6:22:a1:0f:a6:46:22:34:b1:f0:
         f9:8d:23:f1:46:88:bc:f1:9f:5c:df:b8:96:fb:63:bb:41:61:
         6a:84:c6:ea:0e:36:30:dd:7f:55:28:ca:aa:d3:5e:40:d6:6a:
         be:64:6f:be:f9:bc:be:25:ef:76:7b:1b:7e:4d:7d:6a:a1:cd:
         db:e5:d8:a4:12:20:e1:20:89:a0:bd:25:05:67:63:96:30:4a:
         1f:a5:4a:71:4e:c7:dd:1a:3a:df:35:b3:6b:89:68:75:e6:f1:
         5a:c8:e0:78:0f:ec:f3:b7:d3:14:d9:d8:4c:e6:64:c4:89:67:
         70:be:ec:d2:ac:57:0f:3e:18:15:3c:3e:ed:a1:54:e8:1e:48:
         7f:d8:52:81:b4:63:96:f0:cb:b0:b6:5e:99:27:0f:46:eb:8b:
         2b:46:82:52:b7:37:aa:04:29:9c:fd:1b:8e:ce:6f:2c:09:9d:
         e9:a0:6e:ec:5c:ec:a6:50:48:08:21:e8:01:b4:a8:d0:61:be:
         85:07:a1:c5:4e:50:55:f1:e3:71:ce:03:5a:8b:ed:89:59:2a:
         4a:f6:16:15:ad:23:d0:c7:d5:6c:5c:10:66:9a:21:a4:b8:b9:
         bc:1f:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:05:31 2026 by rpki-client