Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BB2F358DE3E11EBB8C6B96CC4F9AE02.roa
File:                     5BB2F358DE3E11EBB8C6B96CC4F9AE02.roa (raw, json)
Hash identifier:          Dlpx2oF5lmvr+rvMfDA6Ig2DDhgqUOjdWD+g8YNiwtE=
Subject key identifier:   B3:45:71:B0:7C:26:52:C9:9C:D4:3E:14:CD:47:33:DE:8C:D9:2A:68
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E66F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BB2F358DE3E11EBB8C6B96CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:10:27 +0000
ROA not before:           Sun 31 May 2026 17:10:27 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140119
IP address blocks:        103.151.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58991 (0xe66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:10:27 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b83-e5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:b8:89:d2:9a:3c:a0:12:77:77:bb:7b:90:
                    a0:59:4a:02:65:7e:66:cd:1d:34:0a:31:12:f5:02:
                    e2:e7:71:9b:43:97:30:e1:7b:27:1e:41:75:c3:a2:
                    a7:6c:89:25:e9:40:a3:01:a2:1c:a1:e9:90:f3:b9:
                    38:86:82:94:73:3a:89:8b:ca:8d:27:ec:2a:fa:87:
                    a7:f6:bd:cf:07:19:24:28:1b:2f:42:85:7e:e0:ed:
                    d5:0e:25:61:dd:4b:f3:26:b5:d5:74:93:1f:c4:f3:
                    d0:4c:73:c0:ff:77:ef:37:5a:c6:02:8f:c8:85:b8:
                    d7:8a:39:ca:27:45:db:58:54:8e:fa:73:48:9b:08:
                    35:73:c1:32:97:01:30:0c:c3:57:80:40:98:8d:62:
                    79:29:0a:a2:1b:fd:95:b8:95:8c:93:f2:47:6f:ba:
                    0d:7a:32:8c:15:cc:65:3f:70:35:43:08:08:23:2e:
                    45:30:12:84:8b:7e:30:fb:48:05:76:52:96:47:0d:
                    e8:f6:44:38:5a:77:c5:32:ee:6c:b2:85:00:88:dc:
                    66:ee:2b:44:e6:03:7a:8c:ae:68:15:98:7a:6f:f1:
                    91:94:f3:7f:6d:d8:8e:d0:09:48:f1:8c:c5:e4:56:
                    16:25:f7:56:63:bf:5b:3f:8d:11:c3:ae:19:08:f1:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:45:71:B0:7C:26:52:C9:9C:D4:3E:14:CD:47:33:DE:8C:D9:2A:68
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BB2F358DE3E11EBB8C6B96CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:d5:4c:a3:98:e0:ae:a1:01:d5:8f:68:7f:32:f8:53:10:e0:
         eb:49:b0:94:83:63:a4:2c:1f:e9:8d:20:92:d7:9c:8f:59:03:
         ab:f3:fe:a4:17:73:74:ab:98:47:e4:27:0f:87:3a:8a:ab:87:
         96:8a:6b:4d:37:a5:73:e6:ea:c0:e9:c8:77:dc:b9:ab:af:0d:
         b6:9d:d0:f5:d7:f6:b5:27:e2:b8:4d:1d:a8:19:ef:d5:b8:fd:
         4c:21:92:ab:95:d2:24:1a:11:9b:4c:a7:10:67:36:ce:2a:61:
         3e:7b:29:52:25:b4:da:b3:27:5f:ba:1e:c1:16:bd:84:b1:69:
         2f:25:e8:33:6d:46:23:5f:92:42:a2:29:07:59:cd:e0:ac:cf:
         3a:6a:bb:35:15:18:4b:28:99:bd:12:c5:52:a4:3f:ae:15:b3:
         b4:68:f3:3b:39:10:6f:a4:83:77:c4:f4:ed:2d:a3:80:40:0a:
         7d:84:14:21:26:8a:b4:9f:b5:23:59:d3:31:3f:c7:73:20:82:
         c0:19:d7:d3:d3:10:59:c2:f8:82:98:fb:ac:9c:1d:86:92:cb:
         4b:f4:df:ad:ce:e1:36:c0:4c:c1:86:17:7d:1e:17:67:46:57:
         30:3d:01:43:49:6c:18:bc:09:f4:3b:34:10:ee:43:e5:d6:8e:
         4d:3f:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:58 2026 by rpki-client