Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/907AFA3A0A0511EB95D99051C4F9AE02.roa
File:                     907AFA3A0A0511EB95D99051C4F9AE02.roa (raw, json)
Hash identifier:          STTpmIWARP1UTSUavO6F74j9j1B1bdCiGIBlfbaWZBY=
Subject key identifier:   57:B4:A1:9F:4E:D4:5C:44:85:00:5E:AE:43:73:77:25:3C:9A:F0:0E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E1EF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/907AFA3A0A0511EB95D99051C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:33:04 +0000
ROA not before:           Sun 31 May 2026 16:33:04 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132758
IP address blocks:        103.156.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57839 (0xe1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:33:04 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c62c0-deae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:a4:28:6b:6b:12:40:51:01:44:d5:5f:c6:
                    8f:03:7d:91:f9:88:69:d8:22:96:b4:26:5c:0b:cb:
                    5f:f3:5b:58:ea:36:c1:ae:58:89:e1:d6:2c:72:fd:
                    b7:bd:39:90:7c:35:22:fb:26:43:d2:39:e2:86:13:
                    49:01:54:e5:e1:36:8c:bf:8f:8a:47:13:75:df:4a:
                    d7:e8:19:e2:fb:83:5a:29:98:16:c4:17:6e:77:3d:
                    da:99:20:c3:5f:6a:20:e7:5e:8a:6e:c9:e1:87:6d:
                    ad:ae:8e:23:83:78:bd:d7:ec:21:2a:8f:96:44:50:
                    8f:6b:40:66:a1:76:76:47:ba:a0:8b:62:72:fc:72:
                    18:2c:d2:6e:7e:c5:fa:0f:fc:5a:39:03:e8:8d:f5:
                    f6:c2:d3:4a:4f:3d:c8:13:59:c1:d3:75:e4:44:4a:
                    6c:f4:fa:50:e5:d2:21:4c:bd:04:41:81:99:0e:20:
                    29:45:e9:e5:b6:fa:2a:a3:00:34:d6:ca:17:b2:a4:
                    b9:6d:43:41:dc:0e:0a:44:fa:07:8d:6c:37:1e:72:
                    19:db:7c:e6:b8:f1:66:f9:1f:ae:13:ee:01:85:88:
                    1a:01:eb:b4:b2:9b:8f:45:c2:f5:b4:76:e5:a5:59:
                    f6:36:50:5d:d4:6b:e6:3f:dd:5d:6c:1b:57:d3:cd:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B4:A1:9F:4E:D4:5C:44:85:00:5E:AE:43:73:77:25:3C:9A:F0:0E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/907AFA3A0A0511EB95D99051C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:13:e5:0f:9b:d8:69:e2:ff:8c:ee:47:ce:b5:c9:11:b1:
         48:dd:00:33:25:ac:36:bb:80:cd:ed:ad:57:25:54:f1:e2:67:
         3c:b8:c3:81:7c:d4:cf:4a:ba:5e:4e:e3:fc:cc:78:41:e0:da:
         0e:9e:10:d8:05:7f:25:a5:78:c3:da:20:46:2c:5a:d5:d3:7e:
         d2:95:2c:e6:ae:bb:77:50:d8:77:58:38:99:ca:4b:5e:26:8b:
         39:25:f9:9a:e7:7d:52:62:ba:f4:b6:53:ae:a7:90:ee:49:cc:
         b2:80:f1:77:83:32:26:b8:ca:70:9b:6d:98:9e:02:c4:a8:cc:
         99:de:e2:64:01:1c:8c:b6:6e:81:12:1a:82:b4:91:34:70:21:
         6e:9f:8d:34:7a:86:52:18:d6:4a:83:7d:5b:d5:fb:4a:55:a4:
         92:60:a9:33:53:44:d1:03:66:cb:f1:9f:b4:b2:7a:59:c8:c6:
         6a:e4:0d:61:fe:01:63:bd:6d:71:e5:ae:b1:76:ea:e0:f5:9a:
         9b:ec:83:d2:3b:4b:27:e5:05:56:5a:89:49:7b:14:15:49:e3:
         15:cf:2d:84:9d:d6:14:23:d4:ab:cb:d7:e3:7c:ea:2a:18:73:
         9f:bf:cc:ba:34:a3:48:c3:36:de:e9:6b:5d:90:db:df:61:ae:
         67:3a:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:08 2026 by rpki-client