Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/709A163E8A8B11ED942E6F74C4F9AE02.roa
File:                     709A163E8A8B11ED942E6F74C4F9AE02.roa (raw, json)
Hash identifier:          4bsiqLLx6EQvtRpVWO09O4HjQiAGYXU1ntjJgts58bQ=
Subject key identifier:   54:30:24:5F:39:44:46:B0:F7:84:9A:AD:9C:35:7A:54:5B:CC:E3:B6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2F5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/709A163E8A8B11ED942E6F74C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:41:31 +0000
ROA not before:           Sun 31 May 2026 16:41:31 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134049
IP address blocks:        103.180.222.0/24 maxlen: 24
                          103.228.125.0/24 maxlen: 24
                          2001:df0:61c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58101 (0xe2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:41:31 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c64bb-ddb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:db:4a:df:f9:88:e6:5f:c2:2c:57:7d:e5:
                    91:00:ce:8f:7c:6b:f0:6f:62:96:b5:c1:ca:8e:6c:
                    a4:3f:c2:28:ac:7a:dc:7a:59:67:52:ba:4e:0d:c9:
                    ba:2a:db:5b:69:2a:21:4b:39:22:b2:6e:df:af:14:
                    d9:8c:25:a8:b6:fb:11:7a:eb:f8:c3:36:59:4e:b2:
                    00:28:f6:a4:df:64:67:1e:3c:49:38:19:61:5a:43:
                    c3:24:f8:3e:63:df:ba:cf:20:67:a4:83:fc:a5:be:
                    40:15:3f:56:2e:d1:cf:af:86:98:68:5e:1b:63:eb:
                    a0:0d:9b:f1:63:3b:90:cf:e9:ec:bf:e5:10:8e:62:
                    e3:0d:7f:fb:22:54:f2:f8:74:9f:e3:3a:e4:05:0a:
                    47:bb:d1:87:0c:10:b3:47:00:24:e3:8e:fb:bc:19:
                    bc:3b:9d:14:fd:5c:c6:5c:64:87:1f:77:08:21:ec:
                    2f:30:74:ca:63:2a:e3:7c:c5:3f:0e:e6:55:c5:27:
                    ef:ba:41:c9:b1:91:3a:62:19:28:ec:d1:bb:f9:c6:
                    b4:a7:e2:b7:69:f6:d1:4f:82:65:53:76:2f:1d:42:
                    87:60:a6:73:a0:26:22:13:4b:57:3e:79:21:a8:3a:
                    1d:90:5a:ce:bb:9c:fb:52:0a:00:78:22:81:2f:6f:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:30:24:5F:39:44:46:B0:F7:84:9A:AD:9C:35:7A:54:5B:CC:E3:B6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/709A163E8A8B11ED942E6F74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.222.0/24
                  103.228.125.0/24
                IPv6:
                  2001:df0:61c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:57:0b:f3:f6:3b:33:65:9c:a4:05:f4:70:91:82:a2:a7:96:
         79:e5:2c:52:d8:e2:23:9a:f7:6e:66:a8:5c:5d:64:0f:f0:6a:
         c8:c5:e0:18:6b:c0:13:9a:3f:da:72:6d:81:44:35:ad:75:d7:
         ae:cc:b6:69:e6:2a:7f:ee:be:ed:74:ee:b2:44:31:76:65:72:
         7f:93:48:89:d9:03:4a:64:ac:d3:0f:57:63:6d:b4:2b:00:f6:
         0c:30:e1:48:c5:37:29:f7:93:5b:b4:8d:f7:00:25:dc:da:4f:
         4e:3c:80:44:cb:d5:1c:71:5b:7e:b6:71:e3:c2:76:2d:a2:dc:
         3e:15:9c:eb:bf:d2:56:d9:26:ee:ac:52:44:f4:1b:dd:68:ea:
         28:c0:46:ca:f2:47:4a:a0:01:90:62:1c:75:8e:31:17:cd:d9:
         15:76:25:7c:53:e2:02:93:ab:c3:2b:0f:de:5a:e8:7b:0e:64:
         5f:f5:1c:ab:97:62:a1:e2:41:4a:00:74:c8:d4:e3:dc:d7:91:
         a3:f5:d4:7e:aa:fd:bd:3c:1a:3d:7f:dc:6c:cf:ae:b3:f7:fb:
         94:b1:06:09:33:c8:44:a4:4a:84:7a:23:33:86:79:ef:27:4d:
         44:b5:fa:e4:7b:b8:1d:5c:e0:ba:e8:0e:a5:3f:ba:71:d3:8b:
         af:0a:ef:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:03 2026 by rpki-client