Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D763ADE36D511F0BB3A8613C4F9AE02.roa
File:                     6D763ADE36D511F0BB3A8613C4F9AE02.roa (raw, json)
Hash identifier:          K5oTIxaj2M+cUDJXKxjhwfFERqMiws6yvtsVwi4FKsI=
Subject key identifier:   30:C3:CD:AF:66:9B:98:FF:4C:1A:CA:F0:73:BD:58:9F:11:93:3D:A0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E730
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D763ADE36D511F0BB3A8613C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:16:48 +0000
ROA not before:           Sun 31 May 2026 17:16:48 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141555
IP address blocks:        103.163.148.0/23 maxlen: 24
                          2001:df1:3bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59184 (0xe730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:16:48 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6d00-d054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bb:2a:34:f3:20:8c:41:55:d2:3e:1c:6f:ef:
                    14:4d:9d:f9:07:bb:b5:7e:15:9c:3e:ed:d1:6e:65:
                    c9:5b:cc:5b:13:92:c3:a9:20:0a:1c:bf:e2:5f:fc:
                    05:3b:39:df:72:08:d8:9b:76:58:d2:95:eb:8a:35:
                    6f:1b:fc:8b:ce:59:87:b7:34:09:3a:cf:d2:bc:46:
                    92:6b:d8:5f:e1:6c:d1:94:18:67:ca:64:df:67:d1:
                    1b:e5:33:66:76:4b:d6:59:3c:bf:ec:51:8a:6f:44:
                    07:88:3c:77:dc:82:d4:06:76:e8:5c:91:15:e8:e2:
                    1c:d3:fb:e7:42:c5:69:77:9b:fb:b1:cf:63:1c:83:
                    77:7f:be:a7:0c:4c:d1:ee:17:d2:6c:66:57:c6:14:
                    05:e8:86:a8:c0:a3:d2:a6:d3:46:cd:94:eb:23:c1:
                    73:b3:37:c3:ac:84:ee:05:47:39:0f:b6:3e:a9:35:
                    22:25:cc:fb:f4:29:fe:90:29:23:6a:db:53:98:b2:
                    e3:f2:a9:3d:a4:29:b7:11:e8:cc:1f:5f:94:60:ff:
                    db:90:78:60:fb:1f:db:2f:35:1e:cc:ec:b3:9d:e9:
                    7e:38:3b:e2:52:cf:6b:dd:25:47:9b:30:4a:fc:d6:
                    c8:47:af:40:3e:c4:9b:cf:3c:ba:28:a7:41:f1:f8:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:CD:AF:66:9B:98:FF:4C:1A:CA:F0:73:BD:58:9F:11:93:3D:A0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D763ADE36D511F0BB3A8613C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.148.0/23
                IPv6:
                  2001:df1:3bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:5f:aa:62:47:32:48:7e:e8:01:c4:8c:92:26:36:06:00:03:
         37:07:95:75:e7:ec:25:22:61:38:f2:80:7f:87:df:be:cf:15:
         36:6e:45:5e:cd:79:d3:15:3e:8c:59:2a:64:a9:c2:c4:d6:38:
         43:30:5e:64:3d:0a:0f:c3:8e:98:c7:b5:10:31:83:fb:6e:44:
         d0:bf:a9:a6:9d:63:99:44:f5:c6:14:14:7a:4d:a7:72:6b:6b:
         c7:c9:f1:e1:f3:93:59:8f:c9:f2:c0:d0:40:d9:2f:76:a5:d0:
         84:31:16:4b:7d:27:ad:c3:c9:36:5a:ed:46:b7:31:74:31:40:
         69:e8:e5:92:40:7c:16:a7:a7:bd:ce:e0:2e:5d:4f:7f:da:27:
         35:42:59:39:6d:7a:e3:2f:49:47:9e:8d:eb:40:9d:d6:ef:64:
         0f:d1:c5:b6:c5:c0:a0:58:e9:bf:6e:7b:dd:39:78:cf:7b:88:
         98:a0:c7:22:1b:17:b9:a0:e1:fa:01:e4:1c:77:4b:9d:75:52:
         17:13:1d:f5:4a:3f:eb:f8:2d:ab:ab:01:96:2d:b7:12:82:0b:
         ca:19:61:b7:1f:e3:14:a3:63:3d:06:a4:1f:11:5c:c6:8a:f2:
         82:73:3b:e9:79:9f:49:8a:db:79:5c:6d:1d:14:6b:63:a1:fa:
         df:55:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:19 2026 by rpki-client