Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/848CB864821011ED900D8D83C4F9AE02.roa
File:                     848CB864821011ED900D8D83C4F9AE02.roa (raw, json)
Hash identifier:          0Lh4aKPne58QZHpdCV84+55oP4/fAzJH5dgpeIN1oFs=
Subject key identifier:   49:AB:71:DC:25:4C:B0:18:35:46:AE:27:09:E7:87:0F:28:E9:DA:2B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2BF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/848CB864821011ED900D8D83C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:39:46 +0000
ROA not before:           Sun 31 May 2026 16:39:46 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133970
IP address blocks:        103.53.108.0/22 maxlen: 24
                          2001:df1:b6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58047 (0xe2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:39:46 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6452-5776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:21:51:6d:bb:56:ea:bc:b7:db:b6:44:1d:
                    c9:80:e6:fb:e3:9b:27:7a:71:ee:d7:b5:ef:a8:bd:
                    21:ed:6a:c3:35:1c:51:f2:22:2a:36:77:b8:04:a9:
                    3c:a3:75:c1:b9:7f:f9:5c:8c:b3:e1:3e:11:0e:d8:
                    ba:f7:77:c7:d4:7a:1f:f6:23:48:de:73:df:a9:26:
                    20:22:77:07:9c:b3:59:a2:ef:1c:cf:20:b9:34:98:
                    e5:5a:68:18:0e:77:28:3a:e7:b0:90:fa:23:e2:a2:
                    e4:1c:d1:d5:7d:78:c2:1c:12:31:c8:81:b1:4f:12:
                    41:7a:8a:9f:fd:1c:b0:89:3c:2b:ef:02:b2:99:bd:
                    87:06:c6:a4:f4:95:81:0f:f7:be:c7:f1:2a:be:75:
                    a8:84:f2:31:43:b8:96:dd:f6:07:99:aa:a4:70:0c:
                    a0:04:40:fc:cc:83:83:8f:ea:e2:b9:83:9e:2a:7c:
                    6c:a1:1c:36:de:cc:a9:ab:49:d7:6f:1a:96:ad:73:
                    27:d7:e6:95:cc:39:0e:fb:ae:6c:b7:c3:df:d2:4c:
                    b9:3f:9e:78:1a:a1:cd:89:a8:d2:a7:e8:d1:02:51:
                    73:c6:18:00:58:3a:43:7e:b1:a0:49:99:f3:9e:7d:
                    40:de:a7:77:6e:5f:74:40:59:7b:86:f6:08:05:eb:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AB:71:DC:25:4C:B0:18:35:46:AE:27:09:E7:87:0F:28:E9:DA:2B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/848CB864821011ED900D8D83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.108.0/22
                IPv6:
                  2001:df1:b6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:05:59:c9:a1:77:fc:ea:76:62:98:a0:01:30:6c:e1:b7:
         ef:1b:f2:75:03:ec:b6:4d:39:da:e5:db:36:8f:05:c7:59:1a:
         b6:cd:1d:4e:2f:b7:f9:4c:06:70:d6:f0:21:4f:6d:6e:5a:c9:
         af:1c:65:15:71:18:8b:0a:63:b2:11:ef:2f:7b:b2:ae:10:da:
         b8:49:a8:ad:d8:69:ac:f2:81:dc:3f:d7:1b:f4:c7:95:c3:76:
         00:53:b5:0e:59:a6:69:19:99:67:a4:2e:da:9d:ca:c1:c3:89:
         2b:63:5b:fd:ba:c6:88:8c:44:68:96:24:f1:36:e1:e8:fc:a5:
         c8:2e:a7:c6:3c:53:42:f4:3d:d7:7b:72:0f:45:c4:42:e5:ef:
         f8:35:82:d7:f3:f9:3c:2b:c1:c7:3b:44:fc:7e:db:cc:64:28:
         05:80:e9:2b:c3:27:15:75:8a:cf:7e:3b:5d:46:a9:89:7a:f6:
         ac:80:46:38:63:33:a3:94:91:29:9a:2e:ed:92:53:f3:83:b5:
         40:16:1a:c2:e9:54:be:58:f9:34:d4:d7:00:ab:e0:09:72:fb:
         6e:f2:4a:66:a3:77:49:ed:be:ce:35:2d:88:5f:2e:fb:74:5f:
         57:42:e1:37:14:60:be:01:d6:bd:b5:42:12:ec:90:f9:3f:83:
         15:5d:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:49 2026 by rpki-client