Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D4884824D811EC9B5C1B6AC4F9AE02.roa
File:                     92D4884824D811EC9B5C1B6AC4F9AE02.roa (raw, json)
Hash identifier:          lEVMW0lQTniooMubgwEocE5mQROMWorkSg1tNC22GAg=
Subject key identifier:   D0:F5:AC:34:4F:EA:AA:D0:15:1C:63:1E:F6:44:7B:3C:E1:33:54:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E514
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D4884824D811EC9B5C1B6AC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:59:04 +0000
ROA not before:           Sun 31 May 2026 16:59:04 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137103
IP address blocks:        103.108.72.0/22 maxlen: 24
                          103.169.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58644 (0xe514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:59:04 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c68d8-bfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:3b:23:a0:e1:d5:62:c5:f1:9c:e7:3e:44:
                    99:d9:54:c1:e2:4e:03:e9:e7:15:41:9c:33:79:3b:
                    9a:c7:4c:5e:29:40:62:15:0f:3b:bd:5d:2c:ec:f3:
                    1d:ab:62:e3:6a:90:da:e5:84:f1:e1:b8:f1:84:d2:
                    a0:71:17:13:f3:c5:ba:2a:f9:2d:07:f7:50:e7:8b:
                    06:7d:31:f9:c3:71:52:e6:f8:64:88:c3:82:17:a3:
                    bd:09:ef:ca:41:77:57:d9:6f:22:9e:7b:36:ab:ba:
                    7a:f1:2d:57:04:6c:23:7a:4e:3f:ef:30:3f:f0:d9:
                    21:2b:b0:ee:59:e7:64:6d:97:d2:fe:9a:e0:41:9b:
                    b0:b7:a8:d3:1d:1f:26:78:c1:c3:5b:77:9d:e1:db:
                    e7:49:f5:00:aa:ea:cd:4e:37:a7:33:f6:71:1f:dc:
                    f1:9a:80:6b:b2:b4:6d:10:98:ab:11:4a:59:0a:e5:
                    ea:84:e3:1a:f3:35:ab:04:88:85:1a:e8:6b:76:e9:
                    1c:69:34:44:02:fa:63:ee:84:5a:81:be:2a:43:15:
                    17:5d:53:28:9d:21:35:9b:11:3a:5c:57:0a:e9:85:
                    cf:ab:8d:91:e8:3f:fd:de:9a:6c:fa:de:4d:3b:36:
                    47:13:ab:ee:43:53:78:1a:0c:53:87:97:a1:63:42:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F5:AC:34:4F:EA:AA:D0:15:1C:63:1E:F6:44:7B:3C:E1:33:54:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D4884824D811EC9B5C1B6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.72.0/22
                  103.169.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:cf:f6:bd:7b:39:e7:d7:30:89:42:f7:d1:65:49:0d:b7:
         6a:51:10:1d:01:58:90:f5:03:69:d5:03:83:a2:ea:6f:35:7d:
         df:76:e1:0b:5f:b3:25:d9:be:80:1b:c9:3e:1b:4c:b2:db:11:
         62:64:1c:fa:46:34:26:92:c6:d4:47:a1:80:d0:11:21:8b:d1:
         93:11:d9:7a:e7:91:6f:be:3d:31:c5:32:37:da:22:63:50:0e:
         bf:f6:5a:43:94:9e:10:15:e6:94:7c:60:69:bd:47:d7:af:83:
         f9:8d:e0:32:c0:7c:51:b8:a5:49:76:75:a1:14:c5:d5:5d:d4:
         03:f4:da:29:61:d5:fa:ad:9b:63:71:ff:2b:a5:32:1e:b4:31:
         40:c3:16:7f:fe:ec:9c:5c:22:cb:98:18:19:51:d2:c9:18:bb:
         1d:55:65:a1:81:77:1b:8c:8b:fd:98:61:ce:1e:cf:2f:c5:49:
         7e:76:e7:30:9a:24:b0:0c:b5:26:d4:0a:96:0b:0f:3c:bb:36:
         af:75:39:5f:ab:cb:cb:29:46:87:4f:73:b7:02:b9:9a:36:37:
         1e:b1:d9:79:64:7e:18:44:58:0f:5f:13:9b:fa:c5:b6:52:a9:
         ab:9f:82:e0:73:fe:f7:c2:08:1d:b5:77:e1:e0:0b:52:07:11:
         98:14:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:14 2026 by rpki-client