Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84364D36407111F09CD82719C4F9AE02.roa
File:                     84364D36407111F09CD82719C4F9AE02.roa (raw, json)
Hash identifier:          BZJAgERzfnQaF9f0/38h6qJGoGdhLITIH1g2fl4jCkw=
Subject key identifier:   A7:30:9F:4F:7D:12:9D:DA:99:03:25:AE:0A:1C:40:ED:DB:F4:0F:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E720
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84364D36407111F09CD82719C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:16:16 +0000
ROA not before:           Sun 31 May 2026 17:16:16 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141532
IP address blocks:        103.162.188.0/23 maxlen: 24
                          2001:df6:7480::/48 maxlen: 48
                          2407:2140::/32 maxlen: 32
                          2407:2140::/33 maxlen: 33
                          2407:2140:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59168 (0xe720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:16:16 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ce0-77c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:fe:35:ed:87:bd:4f:93:1d:23:83:df:6a:
                    e6:d2:5a:d3:70:f7:5a:cd:13:51:f5:15:3d:c9:1c:
                    27:5a:b5:84:c4:a6:6f:f5:21:b0:90:ab:1d:11:b0:
                    8b:7c:da:17:93:c1:b6:6f:3b:c5:f6:b9:da:cc:69:
                    d8:10:ae:0c:a6:b7:2d:49:55:21:48:c7:30:48:50:
                    b4:47:75:76:0b:8b:6a:a3:4b:b7:29:e2:75:1e:36:
                    d3:ef:dd:ef:2e:b1:46:ed:e6:c9:9a:59:1c:ad:c2:
                    b9:cf:a6:5d:51:88:64:9b:ef:65:2f:1b:3f:79:68:
                    44:2e:4a:69:62:ca:50:b5:7c:dc:f2:78:cb:72:ec:
                    f3:84:4d:f3:38:48:f0:1f:8c:9d:4a:04:ec:3d:4e:
                    73:60:31:19:7d:88:39:5c:04:f5:db:27:f8:3f:c5:
                    a6:ef:a4:5b:df:28:b1:65:3f:21:1e:b4:fb:77:e6:
                    43:c8:c8:2f:83:85:39:46:ad:c2:93:a4:5b:07:1c:
                    bb:bd:36:db:22:67:e4:73:79:0f:06:d1:13:d6:82:
                    94:43:c1:0a:ef:a7:f7:7d:83:28:52:63:08:cc:bf:
                    a6:de:40:26:06:09:99:56:bb:de:b4:57:92:95:a4:
                    6b:c0:47:5d:37:32:67:50:ed:5e:d8:5b:35:e1:22:
                    60:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:30:9F:4F:7D:12:9D:DA:99:03:25:AE:0A:1C:40:ED:DB:F4:0F:BD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84364D36407111F09CD82719C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.188.0/23
                IPv6:
                  2001:df6:7480::/48
                  2407:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:d3:b3:52:23:69:63:ab:b2:52:ba:3a:ba:e4:72:da:d9:
         6e:36:50:ba:02:f1:07:c0:81:ca:ce:1e:ee:88:2a:19:8f:16:
         4d:48:31:17:eb:ab:49:d1:d9:2b:cd:56:b5:22:33:42:fc:0a:
         58:0c:7a:b9:64:c8:fe:d1:19:1b:af:c3:14:24:1f:27:6d:1f:
         b8:f1:62:28:d7:9b:7b:c7:0c:f7:25:23:79:24:c9:5f:3c:8e:
         ac:07:b1:43:fc:26:73:07:13:83:0e:ea:2d:4f:d1:05:57:2f:
         f4:20:28:75:ef:01:c4:bf:6b:a7:60:3b:25:e8:e3:93:e4:dc:
         b8:8f:cd:2d:f0:2e:85:15:cb:21:6a:87:46:a6:31:0c:e4:28:
         b5:96:01:e0:0a:2c:9a:a5:74:13:99:7e:90:2c:a1:53:d0:be:
         df:54:d5:73:cb:05:3d:41:42:e0:db:31:ed:c9:db:ad:bb:27:
         5f:e9:b6:a8:e7:2d:8c:65:b0:bb:03:4a:77:e1:4b:00:01:20:
         aa:3e:98:e8:fe:a5:0f:8b:1a:fd:ce:40:1f:75:5b:1e:a1:32:
         c0:f2:d0:b6:f6:b8:64:59:b4:74:73:c9:48:41:a8:5c:cc:4e:
         f9:78:80:7d:35:60:b0:6c:2b:cb:79:1a:cb:07:ce:b5:74:63:
         2d:8d:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:43 2026 by rpki-client