Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa
File:                     5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa (raw, json)
Hash identifier:          mQtkqPbRkSESLkDh+56G0ZOwltX6QIhsdhsp9q5TTDM=
Subject key identifier:   97:A4:60:2F:76:91:1C:A0:5B:81:E9:5E:10:22:80:D9:E3:7D:0D:EA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E4BC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:56:13 +0000
ROA not before:           Sun 31 May 2026 16:56:13 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136642
IP address blocks:        103.85.140.0/24 maxlen: 24
                          103.85.141.0/24 maxlen: 24
                          103.85.142.0/24 maxlen: 24
                          103.97.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58556 (0xe4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:56:13 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c682d-ce55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:c8:f9:c1:50:03:f7:bb:d2:40:47:58:ef:
                    23:2e:78:e5:45:19:1f:2f:5e:63:8e:ad:bc:70:37:
                    c5:20:4d:76:5b:84:87:85:67:b6:1c:95:07:45:c2:
                    cf:0f:90:06:00:68:36:3a:4a:6e:ab:0c:0b:83:0f:
                    79:db:96:dd:03:ef:0a:d3:b8:13:63:ba:01:ec:ad:
                    68:e9:5d:fd:84:86:ed:da:8e:31:38:39:54:09:ea:
                    8e:4c:88:bd:83:d2:33:6f:5c:41:73:d6:24:6d:46:
                    c4:ed:80:83:16:7e:01:0d:20:68:e6:97:1f:5d:6d:
                    79:25:b6:59:47:ff:07:cc:c7:3f:93:2e:07:00:52:
                    4f:35:82:80:36:0e:02:9c:68:fe:da:a0:fd:db:39:
                    b1:20:8d:a3:4c:6d:f1:2d:e4:55:d8:08:c8:fe:2c:
                    db:df:58:2e:a8:25:c3:03:d1:8d:54:1a:13:d4:7e:
                    44:68:bb:82:35:17:c6:f5:dc:e0:cd:cc:f2:11:63:
                    0e:2f:c1:ff:dd:77:35:cc:3e:c1:d2:9a:8f:67:ec:
                    4a:b9:95:0f:8b:84:00:31:bb:08:dd:19:3a:4d:43:
                    ea:63:69:6a:da:1e:cd:76:6f:d0:c9:bb:58:e6:58:
                    b3:13:34:97:53:d7:c5:e5:83:df:bc:fb:f9:8e:5e:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A4:60:2F:76:91:1C:A0:5B:81:E9:5E:10:22:80:D9:E3:7D:0D:EA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.140.0-103.85.142.255
                  103.97.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:6f:ea:69:47:75:f6:c1:77:47:e6:89:94:02:26:91:89:c4:
         68:2a:b2:11:0b:2b:f8:6e:94:cf:94:3a:ae:77:09:ca:60:8c:
         a6:bf:79:05:3a:81:d3:b2:0e:46:a2:28:1b:0c:fa:ef:35:e2:
         e3:a5:11:d5:18:2d:e6:a4:c1:a5:cf:54:8b:29:56:77:07:6e:
         5b:a5:fc:f6:f4:66:b2:d2:85:24:61:0d:00:bb:fa:ef:62:a0:
         85:f5:39:39:44:d0:8e:3c:8c:5f:fe:e4:25:d3:a4:ab:ca:36:
         10:63:11:9f:dc:d4:19:7c:63:f7:30:5d:2c:e8:89:5c:3c:6a:
         aa:78:f8:15:8e:b3:d0:3a:ac:3d:3c:cc:24:11:14:01:39:76:
         a7:7d:d4:be:91:01:d9:a0:35:57:c5:f0:86:78:e3:88:bb:02:
         7b:24:d9:a6:13:22:02:45:14:13:93:8a:06:53:4b:09:b3:60:
         7c:f7:86:8b:13:cf:99:bf:cc:dc:93:44:82:01:90:2c:9a:ab:
         11:30:e6:49:ec:d5:60:dd:b0:95:e1:4e:e9:f2:97:bf:9a:5a:
         55:d2:8a:9d:64:65:de:86:20:7a:78:e7:0a:8c:5d:07:d4:18:
         1b:aa:46:41:de:9a:0b:f8:8a:39:c2:d8:49:ae:6e:78:1a:ac:
         88:2f:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:16:47 2026 by rpki-client