Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCA4E4AB1B811ED8DC4D42EC4F9AE02.roa
File:                     6BCA4E4AB1B811ED8DC4D42EC4F9AE02.roa (raw, json)
Hash identifier:          cjSqXv4hMZP6M7qWO8WlChD2ogD0W9PgY1MDWloTNr4=
Subject key identifier:   A1:FF:90:80:01:AE:4B:70:C4:C8:BC:F7:85:EF:81:0A:4E:E6:3D:A4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E58E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCA4E4AB1B811ED8DC4D42EC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:03:06 +0000
ROA not before:           Sun 31 May 2026 17:03:06 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137672
IP address blocks:        103.116.144.0/24 maxlen: 24
                          103.116.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58766 (0xe58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:03:06 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c69ca-fc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:88:d3:72:6f:6b:f5:aa:21:29:fc:d8:bb:
                    e6:5a:dd:0c:be:64:cc:dd:a6:a1:d1:79:13:fd:3d:
                    01:04:92:26:6e:81:e2:05:30:83:2f:e4:8e:87:91:
                    62:03:ee:92:c0:83:07:1f:5a:e0:05:e3:58:f1:88:
                    8c:da:3c:77:36:cf:e2:c3:0e:a7:c3:d0:68:4a:5f:
                    19:1f:17:a3:9a:36:83:dc:c4:c7:c9:1a:1a:a6:d6:
                    2d:b3:72:5a:90:f1:10:40:b9:3c:3c:78:b8:a1:71:
                    29:21:5a:e7:d5:30:bc:c0:6a:7b:4f:68:ca:1d:42:
                    4d:a3:a2:d9:f7:20:b1:74:2d:74:fb:5b:8d:93:97:
                    bd:65:4f:78:72:46:00:1e:ea:92:cb:cd:7c:aa:a3:
                    bd:4d:7c:25:19:da:f5:e5:2d:3f:ec:43:fc:41:41:
                    03:4a:fe:12:95:79:79:84:b6:61:09:35:ee:50:d0:
                    ff:a0:d0:c8:f1:ce:62:d8:d2:72:0f:70:08:23:1a:
                    c2:b1:33:1e:40:9b:88:dc:bd:de:02:a6:7c:12:5a:
                    8b:39:22:82:f0:7a:95:bb:f5:91:b4:2a:b5:3a:f4:
                    54:7a:5f:4e:22:39:69:0f:43:ea:9b:25:7d:cc:f2:
                    b7:9d:0f:d2:c7:05:43:89:d5:99:71:16:17:63:09:
                    f6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FF:90:80:01:AE:4B:70:C4:C8:BC:F7:85:EF:81:0A:4E:E6:3D:A4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCA4E4AB1B811ED8DC4D42EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:4d:84:8d:bb:e6:ca:9f:2c:42:37:8d:63:cc:c8:8d:1d:75:
         30:25:a1:56:42:13:0f:82:09:6e:a1:63:dc:ed:05:95:df:e0:
         eb:d0:80:22:3c:23:c5:33:90:f0:b6:ae:69:5e:c6:ba:b8:a7:
         7d:8e:fc:ee:cc:5c:61:89:95:ac:7f:ca:68:84:bf:19:39:5a:
         cd:38:12:83:0a:0b:8e:40:f1:8d:a7:69:58:25:7c:9a:f5:87:
         a8:e8:95:46:e0:b7:77:29:5b:b1:2c:64:88:75:d8:eb:41:30:
         5c:db:d3:79:c8:42:80:8a:89:9f:a8:e9:1e:0f:32:f7:cd:bc:
         96:e1:8f:8a:0a:d4:1b:0a:de:fc:b4:16:9d:c5:d6:d3:11:62:
         5f:62:06:24:c4:af:b8:40:19:db:f4:90:68:d1:43:11:b5:54:
         87:9e:43:3a:9d:02:8d:9b:d1:20:49:db:97:99:30:ed:1f:69:
         69:d5:4b:4c:35:28:c9:54:db:a9:2b:3a:1d:11:31:c6:b2:f2:
         15:c6:21:cb:c8:54:aa:1d:97:25:d1:40:fe:46:3a:50:dd:04:
         59:a5:0c:69:0e:67:31:58:50:26:84:3f:3b:81:9a:ba:90:89:
         c9:7e:c2:fa:42:68:a2:ae:66:dd:d2:5e:51:1d:e6:5c:49:16:
         d3:92:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:23 2026 by rpki-client