Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BD4F36AE52B11EF83275B4AC4F9AE02.roa
File:                     6BD4F36AE52B11EF83275B4AC4F9AE02.roa (raw, json)
Hash identifier:          bQUwIefMPGl1YBrTDNx5W4Ubdv/uX1JIAWM7EuR4vjA=
Subject key identifier:   C1:6E:CB:EC:C5:50:D6:94:2E:53:66:28:5F:60:5E:F0:77:5A:F3:58
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8D6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BD4F36AE52B11EF83275B4AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:30:46 +0000
ROA not before:           Sun 31 May 2026 17:30:46 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149575
IP address blocks:        103.187.78.0/24 maxlen: 24
                          103.187.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59606 (0xe8d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:30:46 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7046-1951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:b5:db:18:ff:2c:9b:d6:44:44:4f:b8:5b:
                    a2:fe:b9:f2:71:0d:84:de:ae:b0:97:be:69:58:2c:
                    6a:d4:61:06:14:3b:34:2d:c3:bc:26:cd:26:59:86:
                    ba:f5:ff:19:6a:ed:d3:26:00:f6:77:07:f8:a0:29:
                    b5:ea:1e:a8:c4:95:6b:ca:df:11:0d:e2:a0:3b:47:
                    ac:78:2b:3c:a8:43:73:94:3b:81:1d:ee:11:73:62:
                    f7:04:f5:71:40:0e:99:e1:ec:80:1f:23:5e:d2:2a:
                    d8:be:d4:b8:ed:34:0d:bd:e3:0c:f1:9c:9e:d5:32:
                    b2:c8:83:40:8a:8b:61:c0:b4:f8:be:52:8f:b0:31:
                    8e:60:e3:78:2a:bd:25:d2:ac:74:7d:6d:ef:35:ee:
                    32:00:a0:11:80:c6:ff:46:f7:ee:39:01:aa:01:f1:
                    34:3b:d7:e2:47:dc:05:dc:3e:39:e6:bb:8c:eb:fa:
                    ba:92:d3:e7:46:d0:2a:30:22:d8:57:d2:53:30:9e:
                    d2:2b:a8:a6:4d:a9:24:f7:43:b1:1d:f5:4f:27:ac:
                    63:c8:93:75:a0:6f:10:72:9d:e5:3a:46:73:12:ee:
                    ee:d1:4b:97:40:9a:34:5e:9f:7a:ad:a8:e0:f3:a3:
                    a9:79:d5:0c:8e:c4:60:04:c7:a6:69:ce:f4:9b:d7:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6E:CB:EC:C5:50:D6:94:2E:53:66:28:5F:60:5E:F0:77:5A:F3:58
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BD4F36AE52B11EF83275B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:57:da:c2:49:72:52:06:a2:bb:bf:43:eb:1a:63:e4:01:
         2f:82:5f:92:d7:40:36:e6:27:e0:95:51:62:23:5f:d2:ab:1b:
         18:e3:ac:f3:b7:0a:05:21:ec:58:45:11:42:94:7a:b9:45:4b:
         a1:a8:43:b5:4e:08:d7:5d:e2:82:a8:29:b6:f3:91:aa:0a:67:
         76:c2:58:8e:20:d8:fb:fc:60:c1:a3:92:57:07:2c:a3:e5:2a:
         af:61:5a:f1:0f:ec:cf:69:5f:b8:62:33:57:df:85:1a:e2:0b:
         1a:a1:e2:b6:2a:83:0c:14:65:d2:51:cc:90:5c:32:cd:19:5d:
         f5:d9:98:3a:4d:f6:aa:d4:ec:9b:da:88:2a:55:58:1f:6f:71:
         c2:30:7f:88:2e:5a:59:82:ae:c2:16:88:da:1d:64:09:ef:cb:
         00:fa:62:f4:6e:0f:5f:01:fc:64:ed:d9:56:11:ce:35:b6:57:
         f9:c3:e3:e5:83:04:02:4d:49:06:8c:f5:bb:04:fd:b0:62:a6:
         58:e5:69:a3:b9:72:8a:27:7f:1e:5c:59:e5:01:e7:a5:df:f5:
         4a:9f:65:f3:7a:cf:8b:45:5e:bc:f2:a0:25:ac:a0:06:30:05:
         d2:95:fc:41:d1:20:84:1d:50:22:6d:b0:a2:7a:d5:97:e8:2d:
         34:33:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:46 2026 by rpki-client