Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B354A7C4CEB11F0B5E28354C4F9AE02.roa
File:                     6B354A7C4CEB11F0B5E28354C4F9AE02.roa (raw, json)
Hash identifier:          uQcwg5iaMRCif42B4oFTRrv/pfr5pKKBQwrtFxb26Do=
Subject key identifier:   AF:2C:1E:9C:ED:3F:43:B1:3A:E6:58:83:FC:3A:F6:7C:0D:A1:01:C5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B354A7C4CEB11F0B5E28354C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:21:37 +0000
ROA not before:           Sun 31 May 2026 17:21:37 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142519
IP address blocks:        103.170.58.0/24 maxlen: 24
                          103.170.59.0/24 maxlen: 24
                          2001:df2:3fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59334 (0xe7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:21:37 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e21-db33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:d2:76:43:5a:a2:4a:19:51:d9:92:f2:8d:
                    0a:8d:f3:ed:8d:10:78:da:aa:a2:71:77:58:14:ec:
                    98:32:14:65:7d:db:7b:5d:04:fe:2b:d2:9d:23:82:
                    39:2c:d9:c4:98:53:e2:ce:6b:42:b6:3a:71:70:87:
                    df:38:8b:de:aa:61:c3:fe:b6:57:0f:55:9f:45:bc:
                    4a:96:1a:0e:e4:23:02:a3:ed:10:fb:06:d8:d5:d1:
                    a1:79:6a:12:3d:fb:14:27:32:e1:c6:db:e2:14:f3:
                    c5:63:e9:be:fd:7c:25:8f:ee:6a:0b:5b:0a:3f:00:
                    5b:3e:68:70:58:d6:b2:8f:a6:e4:ee:ff:c1:50:90:
                    7e:9a:ac:33:a1:7d:ed:31:13:6a:eb:fc:9c:92:4d:
                    31:a2:3f:df:82:43:5d:75:c8:0d:b3:1b:66:60:33:
                    bb:5f:a5:cb:89:e2:bb:8e:a3:4b:50:c6:ff:9a:ce:
                    99:ae:19:cd:53:19:e6:e7:1b:0e:b4:31:cd:c5:c9:
                    2d:f0:46:34:3d:56:fb:69:a3:b7:9c:cb:85:c4:cd:
                    a2:82:18:2a:07:b9:69:46:ea:7f:4c:f0:6a:6a:db:
                    01:07:a9:e9:e3:fd:0f:fa:8d:52:d8:e9:56:3a:2f:
                    49:81:e8:71:e7:1d:20:9f:31:eb:99:ba:88:cb:9f:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:1E:9C:ED:3F:43:B1:3A:E6:58:83:FC:3A:F6:7C:0D:A1:01:C5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B354A7C4CEB11F0B5E28354C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.58.0/23
                IPv6:
                  2001:df2:3fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:06:3d:0e:fe:b0:89:e0:c6:5a:c7:32:1a:eb:7a:5b:e1:7a:
         b5:b1:98:ec:56:3f:a2:d0:92:36:91:34:a9:98:7e:ef:72:73:
         a9:53:5b:27:4d:fe:ef:8e:c9:8c:ec:5f:8a:14:2b:5b:da:c4:
         85:06:fd:8c:7c:1a:79:aa:fa:37:75:17:f1:9c:12:35:4c:de:
         49:ba:48:c0:5e:2f:c6:b2:55:82:d1:4f:36:8e:a0:7a:f1:d2:
         03:31:c5:77:a4:1c:23:99:ed:90:cd:aa:9f:79:96:f8:92:30:
         86:5d:77:1f:d0:7c:94:98:1c:ea:0a:4d:2a:10:70:94:b1:0a:
         6e:4f:37:58:14:70:ef:15:89:1f:e3:40:c2:ab:2c:a8:8c:69:
         89:82:60:72:d5:1e:f2:a9:e6:7e:a4:4e:d6:9e:f9:da:2f:f4:
         6c:8b:38:01:12:68:6d:25:0b:a3:60:86:55:43:2c:1c:71:20:
         dd:b9:8e:a6:ae:20:35:9b:52:8b:41:6e:a7:d2:2d:32:26:52:
         93:0e:20:7f:0d:ba:01:01:04:7e:af:25:e6:1c:cd:e4:8b:ad:
         87:0d:19:84:2e:73:0f:0f:d3:e1:e8:ab:5d:07:ed:55:1b:b3:
         08:5d:b1:e3:d1:45:52:bd:12:72:e2:ed:af:c1:3f:dd:c3:59:
         1d:e8:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:40 2026 by rpki-client