Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62141A7634E411ED8621260AC4F9AE02.roa
File:                     62141A7634E411ED8621260AC4F9AE02.roa (raw, json)
Hash identifier:          V6DI7OS/Q+CAqRtD1sn2TdVRqoeiRpSzs+rCbdw+7DQ=
Subject key identifier:   39:69:B0:F6:AB:E0:19:90:70:A6:67:ED:00:48:CF:4C:1C:9A:9E:95
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E838
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62141A7634E411ED8621260AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:25:31 +0000
ROA not before:           Sun 31 May 2026 17:25:31 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     147233
IP address blocks:        103.175.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59448 (0xe838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:25:31 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6f0a-1c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:f3:3d:77:61:4c:10:c1:d7:9b:f0:d2:8a:
                    75:67:11:85:16:f6:73:3d:f0:c1:b4:3c:21:24:73:
                    3b:7b:4f:e9:5d:fe:27:06:4f:b7:76:5a:d0:72:43:
                    81:61:fa:75:45:61:ec:75:84:cc:44:dc:a0:4d:51:
                    58:f6:d9:e4:da:0e:58:44:5b:cf:e6:68:70:f3:bc:
                    d7:56:78:a6:1f:6a:ad:5b:7f:a0:6e:f5:d9:9d:ed:
                    e8:29:6e:91:6b:17:ef:e2:9a:99:3b:30:ba:3b:1c:
                    e6:42:7d:29:fb:c6:9e:a1:0f:8f:c3:6e:12:d5:13:
                    9f:47:33:0e:85:99:87:5c:ca:60:1d:fb:82:22:65:
                    f4:77:7f:6d:d8:13:72:58:0d:7c:b3:73:c0:ad:ea:
                    3e:6d:69:f1:f8:35:51:50:46:ba:14:d4:64:75:ef:
                    bb:37:f6:86:cb:80:f0:7a:e3:1c:22:e2:4b:96:a2:
                    5a:4a:ff:94:9b:ba:18:41:b3:af:47:5a:8d:0a:1b:
                    6a:2e:da:cd:37:01:19:5d:0a:7b:5f:06:d5:1a:49:
                    08:9e:83:0b:5e:1f:43:40:c7:d0:5c:d9:ba:23:70:
                    45:06:dc:b4:af:8a:3e:93:45:20:d0:cd:85:8e:c1:
                    8e:2c:05:a3:df:cc:d6:49:33:d3:1c:51:cb:94:4e:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:69:B0:F6:AB:E0:19:90:70:A6:67:ED:00:48:CF:4C:1C:9A:9E:95
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62141A7634E411ED8621260AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:a9:f6:fc:96:57:57:b5:70:98:82:3c:7b:63:62:be:e3:
         af:b0:21:15:26:f4:ae:3b:65:10:dc:05:2d:4a:38:a3:1b:58:
         6f:c7:80:7d:92:da:e6:be:fa:95:b1:d5:1e:72:bb:14:f6:6e:
         90:ce:f7:61:bd:25:ee:11:9e:b8:86:4d:0e:3b:78:c0:1a:39:
         c9:16:77:1c:9b:d0:e4:39:4e:e4:13:98:ac:3f:55:46:0c:69:
         2b:4a:29:5d:9c:67:a0:8b:59:1a:61:06:32:ad:bc:7e:98:e2:
         3b:cd:80:7e:4b:46:d4:76:9a:54:fc:4e:11:24:63:5a:59:f5:
         51:17:6e:87:d0:0f:39:db:a2:2a:3c:31:23:06:37:e4:2a:86:
         df:c7:06:30:be:e3:46:ea:19:ea:92:c1:18:42:1a:50:c1:ca:
         e8:74:89:07:ff:0b:91:3b:fb:e5:f1:49:45:8e:24:67:14:a2:
         d5:01:aa:43:4d:d7:90:d8:86:4d:64:a2:75:fa:bb:4a:06:13:
         8d:e1:c9:a9:d3:e1:38:55:f1:b1:3d:34:18:bb:23:6b:7e:e7:
         7c:1d:53:98:19:ee:06:a4:86:4d:31:0d:39:f5:d7:25:6e:13:
         f2:ae:36:16:d3:db:0c:d1:47:ee:d4:c9:ff:6b:df:35:52:b8:
         34:d8:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:06 2026 by rpki-client