Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa
File:                     7B451DC2871811EB84EC3663C4F9AE02.roa (raw, json)
Hash identifier:          zNb5ovrFpxvuYzjXpb645gj1b4ayDk29BxrNtrooPZU=
Subject key identifier:   32:6A:2A:19:0E:80:51:37:9D:13:D4:12:00:55:2E:52:25:8E:BA:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E6C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:13:26 +0000
ROA not before:           Sun 31 May 2026 17:13:26 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141273
IP address blocks:        103.160.30.0/23 maxlen: 24
                          2001:df5:9280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59080 (0xe6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:13:26 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6c36-bf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:cb:d4:1d:c8:c1:09:b4:db:90:2c:c4:43:
                    72:49:bf:58:ef:92:00:a8:66:a8:df:cd:88:4c:b5:
                    1f:7b:79:f6:a8:d1:6f:74:92:6e:f5:71:d0:1a:a2:
                    6c:04:84:d2:c3:6d:53:6b:54:5a:b2:0a:10:33:e3:
                    5b:5c:59:7d:47:ca:2a:58:4c:a6:b4:dc:9b:2f:c1:
                    79:01:0e:8c:f5:dd:0c:bd:3d:b6:f0:a1:f8:6d:1f:
                    74:c4:6c:92:60:72:2e:f1:ff:dd:48:ad:c3:04:1d:
                    37:88:93:16:ad:99:fb:02:71:f4:92:7d:df:7a:89:
                    23:78:ff:9d:46:13:e3:a5:c3:22:e1:39:7d:e9:80:
                    41:5b:66:13:e7:5e:5f:94:9d:20:0d:b0:57:b7:ab:
                    21:36:0c:05:76:27:61:74:ee:f4:f2:01:b8:82:34:
                    ae:09:cd:ec:3a:ee:41:fd:e2:1b:2a:26:a1:55:4b:
                    73:79:b4:93:fe:81:f3:a0:c7:59:f3:f7:92:c0:3a:
                    8b:f4:f7:33:72:e8:0d:6d:e3:9a:e2:98:6c:b2:64:
                    aa:4b:ae:9d:a6:53:1b:4e:af:15:71:ec:42:cc:da:
                    6b:cf:04:16:71:cb:b5:93:42:dc:80:50:5b:2c:98:
                    0c:6d:39:5f:be:84:82:be:93:04:5d:0a:a5:57:1d:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:2A:19:0E:80:51:37:9D:13:D4:12:00:55:2E:52:25:8E:BA:0C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.30.0/23
                IPv6:
                  2001:df5:9280::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:08:fc:7e:97:a7:d9:4c:b4:35:fb:4f:14:d0:ab:3c:e6:3e:
         58:4b:35:49:c3:a9:6a:8a:35:b7:a2:fb:cf:72:f1:d9:22:38:
         f4:90:9d:0b:8a:59:61:a3:cc:f3:84:5a:3e:4f:7d:28:76:a1:
         79:aa:8c:b5:82:07:9a:c6:10:0b:ea:4f:b2:4c:24:17:e3:3c:
         a0:b8:85:8f:cb:d1:d2:7c:16:fa:6b:4c:68:a2:e0:ab:ba:f8:
         0a:9e:a6:62:27:30:70:6c:a4:37:aa:3d:8f:8b:de:2a:11:72:
         59:49:e1:45:de:bc:27:ea:97:e9:8a:eb:ea:9f:e0:f0:00:18:
         84:a5:ee:ac:5a:b1:d1:4f:33:0b:dd:c3:59:aa:65:86:0b:03:
         99:28:4b:25:0f:cb:18:0b:c1:cb:d4:9c:e5:f0:42:4c:5f:88:
         c4:68:8e:9a:1b:98:f6:ca:a0:bd:d8:86:f1:41:34:3b:a7:f4:
         49:89:e4:d1:13:bb:55:a2:37:17:ba:af:e8:f8:e3:e5:f2:c4:
         79:5c:92:b0:a4:6b:ab:18:12:d2:12:79:37:f4:83:98:db:1b:
         dd:63:71:de:bc:34:3a:80:ec:82:82:ad:9b:f6:db:53:4b:c7:
         1c:bf:68:00:90:6e:8b:a7:d9:e0:67:01:15:7b:1b:1a:4d:25:
         20:97:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:37 2026 by rpki-client