Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa
File:                     5FD48BEE089311EB9277E86CC4F9AE02.roa (raw, json)
Hash identifier:          dHAF0+/xwaMmVuiWoAp5Q9akU1XQEmUYgJyt1UMJbwQ=
Subject key identifier:   2E:1A:52:35:BD:A8:81:F0:97:EB:D0:80:26:94:B1:25:DB:66:3C:2D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E487
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:54:35 +0000
ROA not before:           Sun 31 May 2026 16:54:35 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136325
IP address blocks:        103.93.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58503 (0xe487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:54:35 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c67cb-5659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:5f:59:45:5a:e6:18:42:d7:0d:99:05:57:
                    0a:e1:20:b6:11:26:b9:98:37:fc:36:27:51:a8:fb:
                    ea:6b:54:9f:a5:42:ca:6e:87:ed:ca:78:04:62:ac:
                    2a:ba:75:94:a1:b6:38:f8:af:54:8e:c2:f8:02:4f:
                    7e:2c:84:5a:69:22:e3:f9:f7:b7:b1:09:8f:82:37:
                    c9:29:5c:26:2d:a3:0f:3f:99:0d:b3:4e:a0:9a:ab:
                    8e:3b:f0:54:4f:4e:76:4d:78:ca:73:8c:be:00:cb:
                    c2:de:2a:fd:d2:00:ce:a2:d1:4b:e3:e1:16:3c:6a:
                    a1:8f:c9:23:26:01:98:ae:7c:8c:cc:f2:65:fb:7e:
                    c2:56:86:cf:25:7d:f3:1d:6d:99:32:49:02:3c:d3:
                    e7:f1:95:ad:4a:33:2b:b3:ef:73:e9:6e:5a:55:62:
                    ba:ae:a6:ac:84:e1:1b:dc:81:10:45:45:34:88:c4:
                    e6:28:d0:c4:af:3f:d6:4b:54:23:1e:ad:79:3b:ff:
                    ec:f3:c6:4d:cb:8f:25:d4:02:0e:b1:7f:e5:6e:13:
                    e1:9c:ea:59:c0:18:4c:a1:96:f2:29:25:d4:db:94:
                    c5:ee:fb:07:99:1e:38:63:6a:ba:fb:b4:17:ac:c6:
                    11:b8:be:49:03:1b:b9:d9:58:4e:9e:3f:ba:e8:18:
                    fb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1A:52:35:BD:A8:81:F0:97:EB:D0:80:26:94:B1:25:DB:66:3C:2D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:62:43:93:f3:60:e2:c0:30:30:e1:c6:3e:db:f3:f1:53:8a:
         75:9f:3d:c9:ab:c3:a6:c8:9b:6d:d4:4e:9d:76:cb:8d:14:3b:
         5f:54:53:bd:d0:a2:27:4d:df:7e:db:e7:15:5d:e6:59:e3:66:
         a1:db:95:17:c6:32:39:0a:1e:27:67:8f:47:bf:85:aa:f4:cc:
         71:14:c5:87:1a:2c:0b:ec:d4:2a:e7:dc:02:03:3c:f5:e0:be:
         9a:37:1b:cb:a6:37:f9:37:7e:a1:82:4e:f3:80:bf:8c:ea:e4:
         71:30:c4:0d:e6:3b:0a:d5:0f:e5:79:bb:32:59:5e:3f:89:50:
         da:1a:2c:56:b2:a3:6e:91:a1:14:12:f2:65:b3:fc:55:5d:61:
         09:db:3d:5f:23:37:85:99:37:fa:f1:53:cc:7b:23:e4:37:a3:
         44:5a:c1:e7:40:05:f4:c3:07:18:fd:a4:3d:14:4e:79:0f:31:
         c5:cf:4f:14:e0:5b:15:f2:af:3d:86:56:7b:0c:a4:fe:9a:0e:
         9e:70:17:a5:46:bf:84:82:44:a0:2e:b7:e4:26:b7:53:8f:40:
         f7:76:c3:e9:d8:be:50:d2:ab:b4:ec:74:fa:ab:66:7f:77:f6:
         ac:7a:99:b7:3b:53:ee:00:f2:44:4f:42:e3:6b:29:3d:9a:b2:
         b0:ba:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:02 2026 by rpki-client