Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E8FDF00A7711EEA489D07BC4F9AE02.roa
File:                     93E8FDF00A7711EEA489D07BC4F9AE02.roa (raw, json)
Hash identifier:          ziPfecL195+myruoi7hLpunIs7+YlhyY6vBA4nBccYI=
Subject key identifier:   98:EF:11:AF:1B:35:D2:61:C6:E2:87:AB:43:74:CD:7B:1B:3A:72:D5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9B7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E8FDF00A7711EEA489D07BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:38:20 +0000
ROA not before:           Sun 31 May 2026 17:38:20 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151120
IP address blocks:        103.209.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59831 (0xe9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:38:20 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c720c-4bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:73:71:0a:2a:af:df:bb:7b:93:e8:17:f3:
                    6c:8c:b0:6a:61:b7:5d:9b:6d:9c:cd:28:22:a3:7f:
                    63:86:29:a1:4e:01:64:18:fe:a2:2c:4f:fa:50:2f:
                    1f:96:c1:d4:b1:5f:18:ba:62:61:7f:ce:bd:7c:11:
                    97:c2:f7:12:0b:d8:a8:4a:f2:49:68:de:7e:bd:40:
                    52:65:7c:32:fc:71:fd:df:6a:a7:cf:0a:13:10:77:
                    4a:2d:bf:24:ea:31:eb:0d:98:0d:a8:18:12:86:12:
                    1d:59:d2:bd:ca:f8:3e:a1:32:df:b0:6c:09:d9:41:
                    e5:2f:17:1e:9c:2a:b4:c2:57:fe:c3:ab:4c:06:6b:
                    3b:68:e0:8c:a7:d9:18:70:a7:17:2d:4e:93:4e:d3:
                    40:6f:91:c6:28:82:31:fe:37:14:63:3c:13:87:f3:
                    ab:73:8a:34:d4:2f:5f:00:63:72:66:5c:8d:dd:99:
                    29:d2:76:b7:af:3c:c5:d5:71:bb:40:4b:ab:40:1b:
                    04:3a:6b:9d:e6:e1:5e:4b:62:60:48:b2:5d:4f:ef:
                    f4:70:cb:d1:d4:85:6c:d1:19:53:ad:c1:f8:be:68:
                    2f:85:1c:b9:1a:a9:b3:ab:2c:ad:98:e8:72:cf:a4:
                    db:71:74:d9:c2:91:a3:50:4b:25:7c:76:c9:1b:73:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EF:11:AF:1B:35:D2:61:C6:E2:87:AB:43:74:CD:7B:1B:3A:72:D5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E8FDF00A7711EEA489D07BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:24:a8:39:58:fd:4d:12:4e:4a:ee:0a:9c:0d:ab:4f:f8:
         a0:a5:fb:c5:47:a6:4f:5c:2d:3d:20:19:7b:08:21:aa:1c:ab:
         b7:bd:e0:7c:a1:1d:37:fe:87:b3:e8:12:b6:60:96:44:7c:d9:
         c7:e8:f5:8c:fe:02:dd:81:bb:d0:c1:8a:3f:2d:b3:83:fe:77:
         9e:b0:30:09:c8:31:a5:7f:5a:95:72:e2:ed:1c:24:1f:96:a7:
         57:58:02:bf:33:a4:d6:5f:70:fa:2f:78:0a:7a:8d:eb:1a:12:
         3f:3d:89:b1:5e:b7:07:3d:08:eb:a7:d0:a8:47:c5:63:32:e2:
         82:cc:1e:91:2f:51:4f:da:5c:15:f7:db:83:ae:eb:2f:f7:60:
         c9:4a:d5:9a:fa:c0:34:28:61:2b:51:2e:fb:3a:c8:7f:9a:91:
         bd:6c:8f:3f:98:6d:e2:2f:8b:86:06:3c:1c:04:2c:95:07:d7:
         91:dc:fa:38:68:af:bd:80:88:7e:ef:46:5b:de:66:3e:9c:b7:
         4b:1c:43:85:2f:b0:c6:6a:90:08:f8:b1:71:13:2a:85:7f:89:
         a5:32:92:51:fb:98:a5:9f:72:f2:4c:b3:b0:cb:15:b5:b7:8f:
         46:8d:c3:69:82:72:78:09:af:c3:bd:50:54:c9:c4:a9:38:46:
         5c:b5:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:03 2026 by rpki-client