Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/81532730BEC811F08A93DC0EC4F9AE02.roa
File:                     81532730BEC811F08A93DC0EC4F9AE02.roa (raw, json)
Hash identifier:          tZ54NvfI4XmWxSm8lFroXfGNBRTw1V9+XlaJPrxxDPs=
Subject key identifier:   99:09:02:6D:63:57:B5:52:2E:32:E1:08:F6:B3:39:01:FF:57:3B:C9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7AD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/81532730BEC811F08A93DC0EC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:20:50 +0000
ROA not before:           Sun 31 May 2026 17:20:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142486
IP address blocks:        103.168.160.0/24 maxlen: 24
                          103.168.161.0/24 maxlen: 24
                          2407:9340::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59309 (0xe7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:20:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6df2-be10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:51:83:5d:1d:b7:4e:fc:3c:4a:f2:df:9f:
                    e9:19:98:7f:b3:2d:53:00:57:35:81:b0:7d:39:56:
                    be:a7:e0:18:f1:bc:57:2a:94:19:9f:b3:1d:57:40:
                    7a:3d:c6:48:ca:80:0f:e0:a5:16:f6:91:9b:da:fa:
                    15:47:3f:6f:14:ea:34:2a:fb:7e:77:43:8b:3c:ef:
                    e1:74:9d:6e:d8:70:d8:9f:55:f2:76:3f:84:1a:d8:
                    01:79:a2:67:28:c5:7c:35:8b:94:61:1e:15:36:8e:
                    77:dc:bd:c0:9f:f0:9c:bf:ee:56:b0:01:32:92:3f:
                    cd:52:ee:07:8f:4a:9d:c6:e2:bd:99:f0:c6:34:e9:
                    5e:49:e1:f2:9e:cd:d3:3e:cd:7b:1c:1e:d3:51:f6:
                    6e:76:f1:97:22:e9:68:36:90:d5:8e:37:8f:7d:97:
                    dd:ad:5d:96:6c:17:5f:d7:92:cb:6a:48:cb:dc:ea:
                    d2:ad:ae:47:04:ca:97:0f:17:e8:b1:5c:91:63:d0:
                    e1:0b:3e:42:90:e2:f1:05:d2:a8:9a:1f:e5:fd:9f:
                    cf:92:f0:f7:d6:84:51:39:aa:d9:4a:dc:d0:bc:44:
                    d2:d4:f8:55:de:b7:90:49:46:19:8b:d4:47:15:f3:
                    3b:80:30:14:27:c3:8e:8c:db:b7:7a:67:ca:ef:9f:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:02:6D:63:57:B5:52:2E:32:E1:08:F6:B3:39:01:FF:57:3B:C9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/81532730BEC811F08A93DC0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.160.0/23
                IPv6:
                  2407:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:e2:09:f2:ef:da:af:0e:7d:c7:17:da:1b:83:fa:f5:c9:
         86:65:f5:9f:2d:04:81:41:a6:2d:ec:6d:f8:c5:3f:70:f4:f1:
         a2:cf:d6:fc:64:5a:98:f2:54:87:99:87:c0:c5:1d:c4:82:91:
         6e:34:b5:a8:d3:96:af:3d:b2:db:a9:68:2d:43:a1:fb:47:19:
         ad:6c:49:0e:a6:ae:eb:1c:76:17:ef:c3:65:e9:98:c1:f5:fa:
         ad:d4:e7:08:b2:2b:1b:9d:75:9d:6d:20:23:20:25:77:43:41:
         03:fc:13:97:5c:31:03:18:cc:1a:30:28:ea:31:21:2f:6d:69:
         c1:d5:15:d3:d5:90:5d:18:2d:b1:51:0e:91:02:96:84:1d:49:
         01:af:3b:20:de:0c:1a:b9:59:fb:e4:bd:55:2b:64:50:98:3d:
         b9:73:0d:e9:06:5f:d8:65:e7:16:3d:fd:ce:16:84:aa:67:8b:
         cb:ac:99:03:3e:51:96:56:38:29:59:80:70:e0:1a:2a:c7:b1:
         0b:a6:8c:6f:09:84:cf:3d:5f:a2:9b:6d:0a:25:f4:b8:39:63:
         3b:d4:d2:46:dc:77:31:56:07:ba:2d:67:b3:c3:18:37:10:80:
         c2:95:b2:6f:3a:32:8b:c2:13:9b:39:d8:ba:98:71:72:2f:1b:
         bf:ec:7c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:22 2026 by rpki-client