Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa
File:                     7CBF7E8E72B011EC964C6B3CC4F9AE02.roa (raw, json)
Hash identifier:          VFKfrWEOk+ML65q6W7VrgpiiL/QOkuoAY7U0QCZ9S04=
Subject key identifier:   0D:EA:59:4B:5A:CA:C1:BF:D1:CB:87:32:03:E1:DB:54:86:B5:71:F7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E57B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:02:29 +0000
ROA not before:           Sun 31 May 2026 17:02:29 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137646
IP address blocks:        103.118.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58747 (0xe57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:02:29 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c69a5-cece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:25:89:21:63:50:18:b6:9d:59:a8:de:2b:
                    f2:1b:65:9b:3f:a7:07:8f:7c:ef:0d:13:62:c5:f1:
                    85:35:69:9c:57:2e:8e:e3:2f:87:60:62:ff:be:04:
                    0c:f7:85:3e:1e:5d:7f:fd:e3:51:c8:89:9b:39:a0:
                    24:2c:01:7a:2a:7e:d0:db:3f:62:7f:1b:0b:0d:08:
                    da:79:06:8b:09:98:89:10:2c:4d:89:2e:16:28:2f:
                    c7:11:14:b8:fd:d8:00:42:bd:19:95:e9:32:ca:2a:
                    1d:7a:d8:20:a2:8f:28:ab:97:72:4c:13:45:fc:c9:
                    85:c3:22:e7:3a:20:d9:00:35:df:9c:f2:90:f5:8f:
                    ac:80:5a:af:73:ad:68:2f:ed:b7:47:6d:a2:2a:70:
                    5b:c5:85:a9:5f:86:c8:5c:4d:81:3d:dc:25:fe:86:
                    48:ac:e6:d2:50:e0:72:b6:14:bc:92:de:9f:fb:f8:
                    7c:23:91:11:73:8e:05:76:38:65:f0:be:6e:77:aa:
                    58:ef:72:5a:55:a3:bf:0f:93:90:66:cc:90:2b:45:
                    dc:aa:eb:a9:8f:a9:bf:fa:d4:ad:ae:f1:f7:2d:2a:
                    fa:7c:92:2a:83:3b:4e:b6:6c:e7:b8:fa:14:2e:28:
                    92:25:3a:fb:2d:d0:cd:30:a6:1d:e8:fe:fe:6f:60:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EA:59:4B:5A:CA:C1:BF:D1:CB:87:32:03:E1:DB:54:86:B5:71:F7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:cb:b4:a5:78:0e:74:c0:82:26:b1:ab:18:6a:49:d1:40:07:
         f8:3e:0f:2f:13:9a:30:21:16:5b:cb:a0:50:50:6e:dc:a8:37:
         5f:65:fb:81:18:79:c3:8f:96:17:d1:e8:0c:49:11:e2:a2:30:
         47:d9:53:ed:e2:80:f9:90:d2:fb:0c:80:7c:cc:a6:cd:e3:0d:
         93:24:53:b8:6c:d0:65:30:49:bc:d8:ad:dc:3f:a7:fd:1d:9e:
         92:36:45:5a:c6:3d:ab:9a:ab:d5:ca:ce:d0:45:80:0e:d5:89:
         dc:1f:a0:b0:a7:78:97:0f:e4:7a:16:b8:cb:54:0a:2e:d9:a5:
         1b:31:25:50:01:20:46:c3:a8:a5:be:d5:6d:0f:92:45:cb:d1:
         82:63:9c:a0:1e:84:71:ff:22:2b:f7:4f:f6:ca:52:93:6f:e5:
         54:43:92:71:bf:c8:2f:60:a3:d5:07:ea:9a:15:b2:26:a2:55:
         cc:12:e1:41:37:0b:4a:15:c7:0e:3e:ec:bc:d4:31:96:ca:1d:
         0b:3a:f4:89:51:d0:89:e4:35:0d:6c:b5:01:06:ea:d7:f9:9c:
         7c:45:6a:7f:35:05:38:13:1e:fd:5d:dd:21:bb:dd:8d:a1:0c:
         73:66:3b:ca:0a:cb:7b:15:2b:1e:8a:45:c8:bf:69:bf:b0:43:
         fc:35:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:44 2026 by rpki-client