Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67C19492744811ECA946E13EC4F9AE02.roa
File:                     67C19492744811ECA946E13EC4F9AE02.roa (raw, json)
Hash identifier:          DaYMDAAt6xUy51/hEWZMooBPaB2gp8RKVpJitZ2tb8E=
Subject key identifier:   5C:40:AC:DE:B0:58:43:C8:33:2E:AC:46:28:CB:85:94:8E:AE:38:DE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E44D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67C19492744811ECA946E13EC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:52:44 +0000
ROA not before:           Sun 31 May 2026 16:52:44 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135843
IP address blocks:        103.129.155.0/24 maxlen: 24
                          2001:df6:7900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58445 (0xe44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:52:44 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c675c-0cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:cd:93:97:f3:e1:af:6c:15:51:3c:52:25:
                    f2:9d:8d:58:11:be:22:de:af:ed:1c:a5:ab:fd:2e:
                    7e:b1:0e:90:b7:cc:a3:e0:10:ca:cc:81:fa:c2:37:
                    da:6a:b8:d8:f7:d9:32:9f:52:0a:3b:9a:41:c0:52:
                    03:f9:9c:44:6e:6a:87:6d:8b:0c:7d:14:45:db:77:
                    54:9c:fd:d4:e2:43:8c:2c:df:99:6f:24:f7:d7:a7:
                    e3:49:c0:8e:94:57:5c:8b:d6:1f:51:8c:86:ec:9e:
                    0c:82:d6:fd:89:92:2a:f8:dc:d8:ad:72:ff:f1:20:
                    8d:7a:34:06:9f:fc:dd:5c:8b:d2:53:37:9c:48:8a:
                    6a:0f:24:e6:55:3b:1d:17:62:6b:63:9c:e2:1e:73:
                    55:ac:6b:bc:45:30:4b:a9:85:49:10:ce:75:91:57:
                    af:85:87:fc:ad:1e:e1:cb:32:16:ce:1c:d2:97:36:
                    d1:2d:97:f6:10:6c:13:fb:53:5e:3a:89:d5:9a:e1:
                    46:85:fd:dc:a0:f3:4b:ee:6a:8c:2a:41:6a:99:4c:
                    32:5a:ab:91:bf:ef:17:a4:a5:0b:5d:a0:8a:8e:2a:
                    cc:ef:e7:16:9b:be:cb:7b:8f:86:36:6e:c4:69:50:
                    62:82:65:13:cb:ac:67:2e:76:7c:93:a6:30:57:b8:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:40:AC:DE:B0:58:43:C8:33:2E:AC:46:28:CB:85:94:8E:AE:38:DE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67C19492744811ECA946E13EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.155.0/24
                IPv6:
                  2001:df6:7900::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:4c:74:18:bb:cb:12:dc:13:e0:82:d7:43:96:bb:c3:3e:bf:
         45:6a:ee:49:f1:87:8b:82:12:d1:f1:de:d8:dd:34:17:2c:36:
         7d:60:1b:b9:f4:2f:a4:4b:41:02:6a:2b:ab:ce:de:f5:fd:4e:
         08:c0:08:63:22:c1:7c:a9:3e:57:f5:08:2d:4a:86:b3:b5:15:
         e4:a9:07:09:92:bc:34:d3:b9:92:f5:ea:3a:40:89:36:58:1e:
         b5:64:3a:8c:2c:07:7e:8d:c3:51:27:af:ca:f5:90:c0:90:82:
         b8:26:4c:fc:cc:fc:06:2c:99:cd:b4:ad:67:ba:e3:01:93:88:
         30:68:15:f8:39:ac:b0:08:98:d1:d5:80:13:ae:cc:4a:1a:7f:
         17:ab:b1:cf:e4:51:e5:d8:4b:d7:ee:4c:48:20:f7:95:e7:f8:
         6d:cf:68:6f:fd:66:4a:15:e7:a9:17:6c:c2:13:7f:be:1c:d2:
         6b:d0:2b:f1:ff:8e:63:b5:c1:c4:61:aa:0d:a8:c5:5f:16:3e:
         7e:9b:ae:ed:f0:de:40:92:67:3b:6b:dc:ca:4f:dc:18:b0:6d:
         9b:f7:3a:a1:05:3f:87:e4:58:bd:0f:9c:cd:78:b0:c8:00:a9:
         ed:97:bc:73:d1:6b:e5:3a:01:67:d2:86:72:74:a4:a3:c3:eb:
         71:09:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:05 2026 by rpki-client