Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DCF562E198B11EEA06C1429C4F9AE02.roa
File:                     5DCF562E198B11EEA06C1429C4F9AE02.roa (raw, json)
Hash identifier:          Fvle2HXNiA/Vupo7M5pyHi+qrAMePRpacBOUhtMriM0=
Subject key identifier:   24:80:92:6C:98:81:97:C5:26:D4:D7:D8:F3:14:08:5C:39:73:D6:2A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9B0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DCF562E198B11EEA06C1429C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:38:07 +0000
ROA not before:           Sun 31 May 2026 17:38:07 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151113
IP address blocks:        103.69.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59824 (0xe9b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:38:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c71ff-8974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:45:c0:eb:f7:ed:bf:cd:88:44:db:e7:9b:
                    92:1c:28:90:69:b3:bc:d4:7f:52:0a:e7:f0:fc:6f:
                    58:4e:3a:76:7e:4f:b7:63:02:56:c3:87:0b:03:36:
                    f2:6a:3d:17:a5:96:6b:88:b0:59:4a:48:71:da:bd:
                    88:ab:d0:ed:b1:49:5c:19:c9:b9:dd:62:a8:8a:02:
                    68:c8:88:d4:fd:32:10:bb:5a:ee:e2:dd:0b:2b:02:
                    81:e8:52:5f:7c:8a:f2:20:3a:85:75:1b:56:4b:45:
                    dc:1b:09:ec:8c:c9:79:c2:84:5a:1f:43:00:8e:2c:
                    2a:4b:83:38:60:62:fb:b0:65:a5:36:a1:2d:c4:99:
                    73:48:b2:88:62:11:10:4a:45:16:50:74:8a:85:a6:
                    af:98:ac:29:ad:d8:44:a7:04:f6:44:09:b2:ad:95:
                    25:f9:91:44:c3:3d:a2:b3:69:b4:87:9c:3b:7c:14:
                    dd:d4:b7:b0:35:69:c4:3b:09:ac:8d:7c:d7:af:72:
                    c2:ab:82:8a:d5:0c:97:75:72:f9:67:4c:88:29:46:
                    02:06:0f:34:d8:37:a3:7a:a9:6f:c9:76:4f:c5:81:
                    64:da:33:3e:86:b9:41:c8:dc:d6:47:14:60:07:c2:
                    07:44:cc:7e:0e:1d:c5:3c:6c:b1:16:f0:c9:4d:a4:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:80:92:6C:98:81:97:C5:26:D4:D7:D8:F3:14:08:5C:39:73:D6:2A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DCF562E198B11EEA06C1429C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:7a:6e:bd:37:d1:8b:8e:00:9e:c9:03:66:d6:6f:05:d3:
         7c:3a:59:0a:89:28:a3:e0:47:04:eb:83:29:55:fd:fe:a2:dc:
         3f:71:fb:18:16:2b:97:b0:56:90:e5:86:d8:28:32:dc:80:db:
         77:be:a8:0d:79:10:9e:63:b8:76:4e:7d:0c:6f:bb:8a:54:17:
         7a:c0:49:9f:b4:28:e4:64:ee:0d:8e:25:f9:78:70:52:c4:e5:
         f1:e5:34:01:0f:78:56:fd:4f:a5:2f:de:03:76:86:41:56:c1:
         b9:cd:4d:da:35:a8:c5:63:b8:d5:e5:a0:c2:ca:ee:e9:f7:a6:
         5b:aa:21:0e:b6:28:75:b6:55:ff:17:5b:ac:70:5e:21:43:f1:
         4f:95:41:23:7d:2e:15:46:91:8a:fc:91:ab:ad:ea:58:b5:8a:
         ca:3e:a1:96:36:fc:55:77:0b:7c:e2:f8:8d:2b:52:70:76:c6:
         f8:44:27:9e:33:0d:1a:3d:e7:3f:de:6a:72:9c:17:00:8b:24:
         56:a3:b7:bf:0b:ba:dc:21:a8:fa:8a:2e:7c:16:f9:13:7a:ae:
         4a:54:1f:9f:0e:ec:aa:74:eb:43:3e:f6:6c:21:53:2d:88:4a:
         8e:65:61:fd:9a:b2:76:cb:2a:85:54:5e:03:f3:d8:89:df:2f:
         57:83:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:08 2026 by rpki-client