Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D6BB442221611EDAA735E73C4F9AE02.roa
File:                     5D6BB442221611EDAA735E73C4F9AE02.roa (raw, json)
Hash identifier:          LPqJbTAhnEWiXhuln7b+LN2DBLZlU9x0htOk0xnvcKs=
Subject key identifier:   32:D5:D8:A9:16:92:4F:B6:76:78:28:57:8F:C7:74:0F:2F:B9:8E:E3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D6BB442221611EDAA735E73C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:30:17 +0000
ROA not before:           Sun 31 May 2026 17:30:17 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149555
IP address blocks:        103.184.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59592 (0xe8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:30:17 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7029-53bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:05:22:f2:d8:ac:d5:08:7b:28:1a:81:f9:
                    59:bc:5a:da:9b:05:07:f3:28:30:56:c2:23:0d:ad:
                    d1:a0:81:2e:91:79:59:e2:2b:9b:c2:37:32:48:a0:
                    61:a0:08:41:0f:5d:ed:5e:b1:8f:26:fe:e2:a9:3c:
                    5b:99:38:5b:30:50:bb:79:6a:f3:64:f2:01:3f:27:
                    31:0f:70:4f:cd:c0:17:46:83:54:fd:02:1f:d2:4f:
                    95:e0:eb:30:f0:c2:9a:2a:b3:95:92:f8:69:1f:4b:
                    c0:56:6b:a2:7c:6e:08:99:4d:cc:1f:c6:c4:75:31:
                    c6:7e:d4:54:3f:e9:4b:65:2d:23:b7:f4:8d:3a:47:
                    43:4b:10:ca:c8:d9:db:15:f3:2c:fc:cb:2d:ea:5b:
                    96:38:14:20:3f:bf:cb:a8:a3:f6:66:49:3b:c8:a8:
                    ba:9f:d8:82:62:8e:3e:52:67:56:0b:e7:79:ce:ea:
                    dd:06:32:bf:33:c7:c4:87:67:b3:99:30:37:f9:de:
                    f6:55:28:17:3d:73:21:e4:29:f1:57:1c:86:66:17:
                    94:86:21:5a:23:26:2d:0d:dd:47:58:51:c3:10:df:
                    1d:83:7a:09:52:dd:15:da:7f:00:8f:89:b3:54:7e:
                    a6:4a:df:7c:de:bd:9a:c6:44:5e:90:1e:e1:51:95:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D5:D8:A9:16:92:4F:B6:76:78:28:57:8F:C7:74:0F:2F:B9:8E:E3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D6BB442221611EDAA735E73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:a5:fe:b5:8b:2d:4d:8d:8c:18:b9:88:4a:f1:a9:aa:e7:
         3a:7d:a5:3d:5b:c4:35:5d:a3:cc:b8:a4:c2:e5:06:65:7b:d9:
         9c:74:82:9d:47:11:db:28:ed:18:ae:75:54:62:93:e5:0a:69:
         8a:0f:b1:c2:ef:e8:19:80:59:4a:ac:c7:04:4e:e2:22:54:4d:
         2f:88:27:70:58:5c:2f:6d:f2:cd:68:b4:92:47:e1:f6:7e:1b:
         3a:17:1d:1c:9f:c7:24:d1:72:27:5a:3c:f9:9b:40:e9:ba:35:
         b9:93:3a:50:44:7f:c4:5f:22:ba:9f:37:1d:1f:2c:81:fa:85:
         79:2c:1f:2e:a5:5e:83:80:71:66:4b:0a:ee:1a:86:87:97:1c:
         2b:3b:24:12:3d:84:a4:bc:d1:fc:33:a3:fd:31:9a:81:f2:e6:
         a2:22:f7:92:fc:aa:94:52:36:a7:5e:24:ec:a8:28:1a:f8:f0:
         38:6a:51:a1:d6:5c:ce:bb:75:06:06:8a:9a:3a:28:10:ed:fc:
         78:19:b6:d9:20:d1:68:00:ac:68:44:47:1f:d2:a1:8c:26:02:
         fe:fe:54:e4:38:d1:78:93:8a:b0:56:46:51:d5:28:93:c5:68:
         cc:b1:57:7b:9e:67:50:37:18:ec:ca:23:1e:7d:7b:a8:ad:d3:
         16:1f:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:07 2026 by rpki-client