Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B3D23485D7311ECB1D03353C4F9AE02.roa
File:                     6B3D23485D7311ECB1D03353C4F9AE02.roa (raw, json)
Hash identifier:          VPljtg/H4/Qd96V0vnWmVi+3bIVX4k+WKSat8OwXU+s=
Subject key identifier:   EC:92:2C:2E:DC:84:AD:47:A8:DA:AC:6E:B7:FA:15:54:92:21:34:3E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E52F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B3D23485D7311ECB1D03353C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:59:55 +0000
ROA not before:           Sun 31 May 2026 16:59:55 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137139
IP address blocks:        103.75.164.0/22 maxlen: 24
                          103.112.252.0/22 maxlen: 24
                          2400:f9e0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58671 (0xe52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:59:55 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c690b-23c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:19:dd:e2:3a:aa:6e:61:0a:ab:40:8a:fa:
                    60:ed:04:8e:bc:fd:82:60:0b:80:77:fb:a6:a5:95:
                    4e:32:48:b2:46:1b:4c:0e:3e:b9:bc:ad:62:c3:cc:
                    1e:93:6b:88:d4:a9:24:d5:40:3f:cf:91:ac:b2:19:
                    16:17:e1:18:81:47:d4:69:80:13:4e:85:ea:03:3c:
                    ca:1b:c7:74:92:90:ed:8a:3b:50:28:76:df:00:c2:
                    9f:2c:97:3f:8c:0b:af:85:cb:f0:d0:c1:be:d1:a3:
                    11:a2:f0:66:0a:52:50:6b:90:dc:00:89:68:6a:e6:
                    72:4f:e8:4d:70:29:31:d0:77:17:d4:f3:1a:b2:69:
                    37:92:61:c7:f9:62:de:b5:4a:95:af:70:2a:c8:b1:
                    d9:6d:46:4d:eb:3f:c7:5e:1d:3f:39:fb:a5:fd:9b:
                    6f:7c:39:0d:95:b5:32:3a:71:11:da:c5:6a:30:c8:
                    ce:0b:2f:c3:79:eb:35:c5:67:cf:79:6b:4d:e4:58:
                    d8:d9:cf:90:42:ee:2d:bb:d5:1c:8b:ac:a8:f6:0f:
                    e8:56:a0:8b:92:44:40:fe:a1:f3:59:bb:95:a7:87:
                    3d:b9:98:f5:75:c7:2a:c0:61:20:1f:67:a9:26:ab:
                    92:6e:14:99:40:11:ca:1a:2a:63:19:d1:af:78:86:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:2C:2E:DC:84:AD:47:A8:DA:AC:6E:B7:FA:15:54:92:21:34:3E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B3D23485D7311ECB1D03353C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.164.0/22
                  103.112.252.0/22
                IPv6:
                  2400:f9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:e9:34:41:03:91:1c:df:7d:d1:6a:32:dc:d8:93:4c:68:ba:
         c8:16:4c:e6:e3:1d:99:fa:9a:50:19:56:6b:a5:56:a6:94:7c:
         2f:4d:39:20:f9:2c:24:78:71:e6:29:01:4b:71:eb:9a:14:16:
         cf:bb:7e:00:7c:d9:85:ed:ee:e9:3a:89:e7:65:78:32:fd:a4:
         0f:03:2d:03:58:25:3d:77:63:2a:06:15:f4:16:9f:6d:04:d1:
         34:ab:dc:75:ef:15:f4:fb:f3:c7:6a:61:f0:8b:40:1f:69:be:
         25:46:64:5f:77:2d:43:90:c3:8e:8e:57:34:83:b9:31:5d:10:
         4d:97:5d:74:ea:6d:8d:7f:fe:a9:08:b7:42:42:81:12:5c:2b:
         50:18:71:7e:3a:1c:07:64:4c:74:94:43:70:6f:00:d3:f9:ed:
         ad:5a:a3:c7:70:2d:8b:c9:4d:bf:4e:70:9e:28:03:88:5f:fe:
         ae:bd:71:4c:5f:8f:77:30:1a:9d:51:14:57:3e:dc:78:d8:38:
         0e:8c:be:1a:ce:69:6c:c5:38:a4:74:93:b4:4e:19:76:03:1d:
         ed:c8:80:d0:08:01:14:e1:92:45:e8:aa:2d:53:bd:48:cc:cf:
         b1:31:cb:5e:bd:f0:36:6c:e5:d2:67:15:52:3c:a0:de:5f:4f:
         40:20:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:29 2026 by rpki-client