Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80E69F16FA0D11EDBB9FB780C4F9AE02.roa
File:                     80E69F16FA0D11EDBB9FB780C4F9AE02.roa (raw, json)
Hash identifier:          1lA7dYioF3gMRgdDf/P6IVgPZhY16fZFTh35r+mCcMU=
Subject key identifier:   D3:77:55:C7:C9:BC:45:68:B7:21:31:93:50:03:24:61:6E:F5:B1:47
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80E69F16FA0D11EDBB9FB780C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:39:28 +0000
ROA not before:           Sun 31 May 2026 17:39:28 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151178
IP address blocks:        103.133.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59868 (0xe9dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:39:28 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7250-7df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:5b:9c:2d:46:39:29:1f:ec:0f:58:7d:11:
                    9f:5f:83:27:b7:33:6a:76:ac:2e:2f:5d:68:d3:7e:
                    72:a4:52:68:cf:23:89:92:58:7b:0c:a5:e1:8d:62:
                    71:26:af:13:70:36:a0:c4:e3:4b:08:98:0d:b7:53:
                    ef:ea:46:0f:d4:dc:a6:c6:b3:b4:f0:0f:ab:74:97:
                    b9:9f:d9:2d:97:9a:8d:81:5e:dc:c7:8b:c8:90:8a:
                    36:b2:e0:6a:1e:d0:95:4a:db:20:68:6a:7c:37:6a:
                    b8:c6:e2:b6:de:7f:25:60:3c:25:72:bc:08:45:fc:
                    2c:8d:d4:c3:85:5d:8c:80:df:05:62:ce:19:9b:ce:
                    70:46:38:d9:81:a9:2d:8e:09:66:51:c2:53:bc:a1:
                    c3:7b:b1:01:20:d9:2a:12:1e:55:d7:06:ad:5a:4b:
                    9f:f5:a4:79:15:09:d3:39:91:8a:62:6a:bc:3d:35:
                    31:cc:6d:85:33:1a:45:99:82:de:61:b9:be:ca:2a:
                    0f:0d:a7:54:a7:f3:cb:63:6c:75:db:78:e6:9a:86:
                    a0:6d:a8:74:ee:40:d4:9d:b5:95:cd:45:3f:03:ca:
                    d4:e0:b3:79:60:6a:46:bf:f6:8b:f5:f2:b7:07:9c:
                    86:0b:de:1e:a9:d9:3c:c8:21:ee:06:f7:99:cd:9e:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:77:55:C7:C9:BC:45:68:B7:21:31:93:50:03:24:61:6E:F5:B1:47
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80E69F16FA0D11EDBB9FB780C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:0a:72:51:f0:3c:ec:a9:d2:6f:74:ef:77:a6:de:9a:7c:e4:
         fb:12:83:fc:97:da:4c:1d:c4:7a:fb:61:a6:b6:7f:6d:37:c3:
         d1:15:d3:41:8d:cf:de:58:ab:28:18:9b:23:27:15:55:fc:36:
         eb:5d:f8:a6:fa:68:c6:ff:9c:6d:04:8e:6e:f2:35:8b:52:43:
         78:8b:39:80:f2:8b:28:c3:5b:de:a5:bc:19:7b:f4:a6:f8:89:
         0a:13:a3:d4:fa:4c:cb:db:d5:da:b8:da:bc:5e:34:d8:cb:41:
         54:e8:bd:43:37:66:c0:9b:15:7c:24:9e:c1:89:e5:3b:ba:d8:
         09:d5:21:ed:5e:2d:5c:91:8e:04:7f:33:75:9b:7e:b6:41:ef:
         f2:b2:17:a1:08:71:87:b5:9b:c8:1e:0f:5f:f3:fe:86:8d:c7:
         43:9b:54:f1:02:d4:64:0a:33:71:34:ed:07:64:dd:9c:2d:8e:
         4c:56:39:cd:68:50:29:9f:b1:e1:93:78:29:1c:a5:f1:12:5c:
         20:14:ef:80:ef:fb:ad:9c:27:90:60:ca:7f:ea:9e:95:8b:07:
         5a:0f:04:30:50:ce:df:a9:b6:8f:ad:b2:88:ee:a9:59:7a:26:
         bc:53:22:04:8e:5e:cd:9c:98:f9:93:02:94:b7:6a:18:80:c8:
         f7:b6:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:39 2026 by rpki-client