Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
File:                     693EEC340FB711ECA0E62853C4F9AE02.roa (raw, json)
Hash identifier:          35Q5qtrSVl8emid53CPqO/YdBgWJmXdH9TbY18rXbh4=
Subject key identifier:   C3:5B:F4:B9:68:D1:0A:50:56:83:01:AF:64:2C:31:D6:5B:12:C8:80
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7CF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:21:54 +0000
ROA not before:           Sun 31 May 2026 17:21:54 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142533
IP address blocks:        103.169.250.0/24 maxlen: 24
                          103.169.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59343 (0xe7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:21:54 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e32-4b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:a5:22:11:a5:2d:f7:fe:33:97:c8:e7:c5:
                    98:46:99:ce:5e:6f:24:45:99:d2:2f:b0:0a:f7:8f:
                    e5:50:40:b1:76:c5:8d:f8:35:60:52:cd:67:47:f4:
                    d3:6b:b2:6e:b5:c8:a9:42:9e:c9:f0:3b:02:0e:79:
                    d1:3e:01:b2:e6:86:6f:f5:50:2b:5c:8a:7e:28:8d:
                    03:cb:3b:da:4c:e1:df:45:6b:d4:16:d8:9a:91:61:
                    31:b6:1e:ae:f7:52:06:fd:c6:14:63:8e:f5:03:91:
                    45:7b:c2:4e:3b:12:7e:98:d5:c1:63:9d:2f:10:b6:
                    a3:2d:63:3a:b8:1c:47:8a:37:bf:5d:5c:af:bd:f6:
                    29:bb:77:12:4d:21:c0:30:5c:9f:df:83:6d:86:19:
                    81:26:ee:76:24:31:45:d9:34:85:f6:a3:3a:2d:50:
                    81:77:90:f3:67:fc:0d:78:a9:68:da:8e:1a:c4:3f:
                    a2:0c:81:47:7b:e3:d2:67:72:f4:45:b3:aa:a5:cd:
                    3a:26:82:0a:2a:86:fd:e4:aa:bc:0c:34:ea:37:0a:
                    85:02:37:24:b5:a3:c2:56:6c:fb:fe:6e:e3:cc:b0:
                    e4:fd:83:0d:ec:0e:6b:aa:c2:0d:24:e3:1d:08:e9:
                    f0:b0:7c:fe:35:7a:85:2a:c8:eb:87:d3:38:f9:fd:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:F4:B9:68:D1:0A:50:56:83:01:AF:64:2C:31:D6:5B:12:C8:80
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:fc:66:d9:d0:6a:ac:b7:42:29:c1:6b:ed:28:e9:16:85:
         20:bf:e3:92:de:21:fc:48:01:ef:de:9d:7e:3a:e8:44:15:4f:
         ad:7d:de:4a:31:65:55:f8:89:f1:fd:6f:79:0a:a1:2e:24:24:
         0d:1d:76:94:13:1b:86:b2:be:fd:4d:66:a8:14:4f:97:19:db:
         a3:43:3c:25:90:9c:38:71:65:03:df:c5:56:4d:96:9f:c0:a1:
         6a:14:b9:54:e4:19:eb:bf:f8:1f:c1:4b:be:87:3c:12:cd:4a:
         55:39:6c:6a:e0:a7:73:03:52:28:17:3f:ad:42:8c:4c:9a:61:
         7e:8d:24:b0:38:16:82:a4:6f:61:9d:47:76:33:17:c6:be:9a:
         f3:d7:5e:77:a9:1d:2c:88:b0:3b:ed:b1:3f:6e:a8:66:47:11:
         6c:17:e7:10:7f:8f:ad:49:ab:78:01:b3:e6:65:95:0d:19:65:
         44:7e:2f:1c:18:4e:e2:bd:f3:44:25:c8:bf:06:a4:8d:0f:a7:
         33:db:24:89:2c:c2:b2:2d:c5:34:4a:be:6d:1b:e4:f9:2a:38:
         2f:1a:29:51:7c:63:f2:63:2e:3e:d1:16:65:7c:a1:44:9f:89:
         c1:bb:15:aa:d1:68:7b:94:7d:09:f7:fa:b6:34:ca:7f:d2:a5:
         9b:5e:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:43 2026 by rpki-client