Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91DBF96ABF5111EEA2E62651C4F9AE02.roa
File:                     91DBF96ABF5111EEA2E62651C4F9AE02.roa (raw, json)
Hash identifier:          61hs89GDfR5Ij/vVlGxDnaitKZEBJcPImyPAvi2oYUI=
Subject key identifier:   2B:84:A8:07:3B:25:BE:AB:FE:23:F6:16:FC:8A:E2:F3:6E:C4:02:74
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E67D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91DBF96ABF5111EEA2E62651C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:11:03 +0000
ROA not before:           Sun 31 May 2026 17:11:03 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140139
IP address blocks:        103.204.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59005 (0xe67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:11:03 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ba7-2479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:63:73:50:f1:ae:dd:e3:4d:37:79:fd:bd:
                    5e:59:da:8f:32:a8:18:ff:41:7b:59:8b:be:b9:ca:
                    89:1d:d8:0a:dc:ee:b4:12:89:76:f7:b3:67:58:00:
                    8f:b9:20:45:52:63:d2:9e:c8:42:80:4a:b9:ad:5a:
                    b8:e5:9b:45:49:09:bf:fe:3c:d4:43:35:4e:52:ee:
                    67:17:5d:ae:48:be:1a:68:81:e0:53:38:ce:9d:e6:
                    39:f9:0f:01:15:7d:35:48:02:db:4e:aa:99:65:cd:
                    19:4f:fb:4f:4d:2d:d4:73:7f:8f:f7:e7:2e:e5:11:
                    61:99:d4:ec:1a:0f:ac:c9:d6:6d:9e:6b:d6:c7:20:
                    50:66:25:47:e8:81:b9:bf:93:ed:02:3c:ee:9f:4c:
                    9d:96:aa:d3:36:41:7b:f4:f2:f1:c9:fb:0c:f8:d3:
                    76:49:d6:eb:70:86:41:28:a6:95:23:f2:b1:50:05:
                    a5:c5:12:60:38:24:74:b9:29:7b:4f:06:d2:2f:79:
                    d3:6e:ca:28:82:eb:4f:c9:f6:b2:19:e4:92:b0:98:
                    e6:64:78:eb:a0:ed:a8:d9:44:53:96:af:55:70:93:
                    a8:3f:c1:af:a1:2f:d7:9b:d4:41:6f:c6:f0:e1:35:
                    1d:bd:ec:25:22:b5:68:b6:f8:9f:6c:0e:e4:6a:d1:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:84:A8:07:3B:25:BE:AB:FE:23:F6:16:FC:8A:E2:F3:6E:C4:02:74
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91DBF96ABF5111EEA2E62651C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:a0:6e:b3:a1:ea:f8:37:85:26:0f:d6:e4:21:44:59:c4:59:
         3f:db:17:45:84:8d:36:13:09:83:dc:f2:8a:1b:58:8a:f2:2d:
         3b:ce:20:32:51:ee:38:80:3c:7d:b7:fb:79:cc:7f:d5:3a:3a:
         e1:36:a6:57:cf:83:3c:0b:3a:58:c7:2e:0a:00:d0:4e:3f:24:
         2a:ec:cc:92:a3:e4:74:36:14:b5:dd:bd:5a:f9:0f:fb:25:08:
         ea:88:67:d5:4f:1e:7a:fe:4c:49:7a:6e:8b:1e:c2:c8:4a:ca:
         ae:c5:e5:e3:54:69:cf:25:53:46:4f:62:e5:8c:d8:02:0e:30:
         58:8a:f1:a8:b9:e7:a0:05:73:a4:e3:77:f9:05:3b:1f:ea:99:
         74:2f:1e:30:08:93:98:19:f0:bc:e0:34:f6:89:5d:e9:6f:76:
         67:b2:3a:1a:58:5f:24:ee:8a:af:92:37:fb:19:07:0f:eb:08:
         c6:68:b4:29:38:44:1c:d5:67:6e:7e:e8:d1:89:b7:20:53:dc:
         b2:a7:a8:70:f8:db:97:f2:44:d8:b3:00:b8:41:80:56:b7:18:
         58:72:37:e8:95:07:33:f4:a6:ea:87:e5:fc:39:25:94:cb:3d:
         5d:d5:16:93:82:d3:e3:1b:74:58:cf:0d:b4:17:46:d7:e4:40:
         f8:87:48:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:16:49 2026 by rpki-client