Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDA8A9E059211EC9D42C582C4F9AE02.roa
File:                     7BDA8A9E059211EC9D42C582C4F9AE02.roa (raw, json)
Hash identifier:          MbfGhRlPCnoLXzhFXmwmJ/3i9LR2923gJQGz1XsZHKo=
Subject key identifier:   C7:5B:4E:1A:3B:5C:00:5D:D4:CD:B6:F7:B8:FB:FF:C7:5F:BD:90:7E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E803
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDA8A9E059211EC9D42C582C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:23:32 +0000
ROA not before:           Sun 31 May 2026 17:23:32 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     146920
IP address blocks:        103.171.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59395 (0xe803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:23:32 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e94-7538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:de:d6:7e:81:0d:8b:9a:a7:93:b6:40:b7:
                    44:6b:7a:3a:8b:e9:87:db:8b:bd:7e:df:00:0b:b5:
                    00:d5:ab:86:79:45:fd:41:fe:8a:98:a4:8d:7e:12:
                    0f:e6:a5:15:a5:b1:c0:52:75:32:c0:4f:d6:0b:b5:
                    36:16:4e:06:0b:fc:3a:2a:6f:7c:91:3c:6e:ed:1b:
                    24:a1:35:f7:1f:ca:e5:ad:aa:3b:2d:13:e2:16:a9:
                    15:c2:13:23:60:fa:f7:a4:69:87:5c:42:69:45:62:
                    9c:cf:0d:b0:15:3d:dc:a1:2a:d4:80:43:28:3c:a8:
                    30:6a:ea:72:76:b2:12:8e:c0:ac:21:bc:a8:08:2f:
                    47:c0:c3:65:09:c0:8a:00:38:8e:78:ae:e8:c5:d5:
                    a7:6c:37:60:b8:83:b9:3c:97:ff:f9:47:a1:12:20:
                    03:2e:40:6c:37:fa:df:bd:63:7d:5a:19:cd:a2:9a:
                    54:5b:f3:3f:4b:db:bd:9f:1c:5a:f7:65:bb:97:e5:
                    0b:a6:c3:4e:0e:6b:2b:8c:d7:05:3d:6d:d8:a3:42:
                    ac:ae:57:bb:8d:bd:91:08:58:ef:2d:2a:89:44:9c:
                    01:a2:dc:9f:5c:a1:59:96:68:8d:bb:67:3e:14:0d:
                    8a:4e:c9:6a:9e:9f:08:1f:7b:b1:46:77:62:1e:33:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5B:4E:1A:3B:5C:00:5D:D4:CD:B6:F7:B8:FB:FF:C7:5F:BD:90:7E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDA8A9E059211EC9D42C582C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:d3:f4:7c:09:f9:05:df:de:1b:35:e4:c6:13:4a:c7:26:c6:
         8a:6f:16:7e:40:42:7a:f8:fc:cf:02:c8:6d:2e:e2:e3:29:72:
         52:c7:00:5a:88:f4:f9:b9:a7:6d:56:94:ec:56:b3:a9:ec:7c:
         6b:1f:b1:78:ba:d3:93:0d:84:5c:94:77:95:34:8a:7c:53:09:
         14:78:f3:4b:76:0e:9b:5e:63:1c:8d:9a:31:cb:e4:26:39:d6:
         aa:3f:3f:c3:f6:1d:01:20:0d:a0:08:fc:fd:bd:6e:92:4f:2f:
         36:05:bd:7d:0c:4d:bd:8a:e2:11:f7:ae:db:06:42:7b:69:14:
         af:f8:3d:71:b2:28:d2:c5:49:a2:ab:bc:ab:1b:5e:2e:d8:d0:
         91:37:dc:33:03:74:5f:35:53:a4:02:ce:a1:11:0a:1d:d8:48:
         9c:61:8f:6d:ca:2c:a4:47:73:03:0d:4c:7d:be:68:7d:62:7e:
         f8:a7:52:d1:8f:a3:09:bc:2d:ce:af:15:9b:b3:2f:46:3a:17:
         32:2e:37:dd:7a:50:53:84:1a:6e:5b:88:ea:5c:06:3a:24:9e:
         30:47:60:ce:ec:74:0d:69:55:14:36:2b:8a:7d:1f:b8:10:59:
         c8:1e:5f:93:02:d4:8f:e8:ae:ff:a0:1b:08:17:82:38:db:1e:
         52:62:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:47 2026 by rpki-client