Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78CF2F460D8D11F1BC603332293D8C67.roa
File:                     78CF2F460D8D11F1BC603332293D8C67.roa (raw, json)
Hash identifier:          khPUOGp5/Z9ogtVfm9qwEAP8Y6E5TA5fUMi/6dvyGuE=
Subject key identifier:   C6:C1:58:DF:5B:49:31:57:63:35:BD:59:A8:04:CA:39:52:A5:BC:B0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E207
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78CF2F460D8D11F1BC603332293D8C67.roa
Signing time:             Sun 31 May 2026 16:33:50 +0000
ROA not before:           Sun 31 May 2026 16:33:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132931
IP address blocks:        45.65.36.0/22 maxlen: 24
                          45.119.128.0/22 maxlen: 24
                          103.52.52.0/22 maxlen: 24
                          103.59.185.0/24 maxlen: 24
                          2403:7b40:1::/48 maxlen: 48
                          2403:7b40:2::/48 maxlen: 48
                          2403:7b40:3::/48 maxlen: 48
                          2403:7b40:4::/48 maxlen: 48
                          2403:7b40:5::/48 maxlen: 48
                          2403:7b40:6::/48 maxlen: 48
                          2403:7b40:7::/48 maxlen: 48
                          2403:7b40:8::/48 maxlen: 48
                          2403:7b40:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57863 (0xe207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:33:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c62ee-4ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:ee:11:c2:ab:cf:e0:01:10:a5:96:59:d2:
                    8c:ed:7b:37:7f:03:7e:bb:99:e3:57:bc:d3:30:b6:
                    27:c9:5c:51:12:7c:5d:90:ee:9f:13:bd:fe:5e:36:
                    7d:1f:40:ed:d3:d9:56:75:64:c4:62:1a:c3:21:3e:
                    b9:68:b3:79:c1:ed:27:dd:54:c0:88:9d:ea:db:fe:
                    3f:4e:96:7e:5a:95:06:95:b5:69:26:23:b2:53:46:
                    b1:f0:0b:86:dd:da:89:2c:b9:94:95:e7:01:12:48:
                    04:e3:f6:19:5c:89:b5:56:49:6e:49:60:62:ca:78:
                    c3:f8:5a:96:0c:dc:8d:d2:ab:dd:f8:b6:1d:b3:97:
                    65:33:d6:5b:10:e2:7f:90:86:a3:14:18:06:0a:eb:
                    10:72:0a:b1:17:a5:e0:78:4a:e4:e1:8b:7c:9e:60:
                    a7:38:4f:dc:6f:39:fd:d4:03:a1:68:3c:95:63:c7:
                    24:50:d0:15:5f:58:e4:e8:2a:68:4b:ef:82:3f:7e:
                    c6:f2:54:fd:2f:d6:66:e7:9f:7a:e2:c1:a6:46:ec:
                    b5:94:ab:28:f3:e2:93:8c:40:d1:d8:34:d2:5b:3d:
                    35:0e:23:4a:51:1c:eb:ae:7f:8b:7a:9a:63:cb:3f:
                    d8:70:d5:ae:40:e8:b1:33:a3:8e:e6:ac:55:be:b3:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C1:58:DF:5B:49:31:57:63:35:BD:59:A8:04:CA:39:52:A5:BC:B0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78CF2F460D8D11F1BC603332293D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.36.0/22
                  45.119.128.0/22
                  103.52.52.0/22
                  103.59.185.0/24
                IPv6:
                  2403:7b40:1::-2403:7b40:9:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         52:f0:ab:68:f0:cc:e2:46:84:2c:4e:bd:d3:ec:d6:82:aa:56:
         60:81:7e:2d:47:3b:a4:27:df:c8:2e:05:ed:88:01:a0:bd:40:
         8b:15:9b:1b:af:18:da:93:6f:71:80:75:d7:ea:41:eb:24:a2:
         4d:91:aa:6f:ac:d5:f4:da:be:52:33:58:52:03:49:9b:99:3e:
         60:5a:af:b2:de:61:66:af:90:f2:dc:45:a8:7d:c7:76:23:80:
         2a:c2:5e:0f:18:de:f5:b7:bc:88:68:c5:d2:a7:34:18:1b:1a:
         cf:77:82:3c:f9:89:cf:28:b1:75:ed:c7:b5:ff:da:b8:95:e8:
         e2:e7:44:21:9f:23:2d:3e:ea:3a:73:67:b8:b2:52:4c:be:2a:
         73:21:8b:4a:39:3d:72:3c:61:7e:ce:65:a5:b4:bb:c7:ea:d6:
         0f:38:4b:f6:f8:48:63:72:d4:9b:fe:69:1f:95:8c:23:0e:5d:
         ba:b6:4a:31:80:06:af:ed:0b:c9:0e:15:ab:3a:90:f2:8f:c6:
         44:69:a1:cf:6f:9f:de:a6:d8:d2:2f:24:4f:eb:b1:35:fb:77:
         2f:60:0c:c1:99:87:b1:18:91:10:76:15:bc:d7:af:a9:53:d3:
         69:de:38:27:d2:54:b5:66:3e:17:fa:9b:76:bd:69:45:e4:a1:
         1e:2f:45:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:35 2026 by rpki-client