Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BE04C4AB18911EC892E2662C4F9AE02.roa
File:                     9BE04C4AB18911EC892E2662C4F9AE02.roa (raw, json)
Hash identifier:          sZbTdhMPNHpd2jErhOMPKPOFr76wqRGthJMfuE70HhQ=
Subject key identifier:   FE:1B:90:D4:89:B0:43:80:83:A3:02:2C:50:AB:6B:B2:F7:0A:F1:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E585
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BE04C4AB18911EC892E2662C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:02:49 +0000
ROA not before:           Sun 31 May 2026 17:02:48 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137658
IP address blocks:        103.181.118.0/23 maxlen: 24
                          2001:df1:3540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58757 (0xe585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:02:48 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c69b8-42e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:65:b2:4e:1c:47:c6:79:fb:bc:34:5b:a1:
                    c3:fc:76:aa:90:50:f7:fc:1f:7a:ba:45:00:da:ed:
                    d6:ac:2e:83:38:ea:f4:8e:dc:54:cd:6c:70:41:1d:
                    8a:1a:c9:11:70:d9:bf:0f:c3:31:59:cc:e8:e7:5b:
                    84:c6:81:a8:e8:9a:4c:6b:70:17:b1:9f:db:25:d6:
                    36:35:0e:50:1d:fc:82:3a:eb:b7:0c:39:4d:71:da:
                    b7:4e:c4:46:62:84:67:83:5c:8a:50:a4:87:05:8d:
                    0b:ea:9c:11:0b:cb:03:e3:02:76:fc:07:fe:bf:41:
                    71:1a:86:df:7b:8d:c1:2a:50:c4:0e:a3:6c:1c:a3:
                    a3:e3:41:82:52:75:45:cc:ba:c9:a6:43:43:ed:bd:
                    ae:33:fe:ff:05:30:95:34:52:c7:24:e8:ce:0e:48:
                    99:01:73:0c:6f:02:b0:b2:8c:e9:d1:6d:cd:94:5f:
                    d5:7e:42:54:11:cb:35:78:2d:6b:d6:90:51:5a:d6:
                    c2:3e:1f:b1:6d:5b:d4:a1:5b:2b:9f:3a:60:02:00:
                    50:8a:fa:5a:7d:6b:01:21:00:9d:43:ce:7c:de:96:
                    d6:4c:71:e8:1c:56:bb:ab:9a:3d:e2:69:c2:ea:f9:
                    db:11:c7:5d:06:6b:ec:3c:3f:8e:b7:3d:77:4c:ec:
                    12:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:90:D4:89:B0:43:80:83:A3:02:2C:50:AB:6B:B2:F7:0A:F1:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BE04C4AB18911EC892E2662C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.118.0/23
                IPv6:
                  2001:df1:3540::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:83:4b:0c:05:58:46:ae:f7:2c:5e:0f:fb:c1:0c:84:36:
         fc:43:b0:6e:28:f7:ad:66:7b:cd:3e:64:07:4b:57:91:87:46:
         28:e7:c4:1c:fe:ae:8c:3b:fe:14:54:e1:3d:83:06:d1:14:68:
         63:02:99:f2:8b:97:b0:a5:88:b5:00:27:b4:3c:b8:b6:99:e7:
         e0:a6:0a:7a:91:4f:c3:a1:de:28:89:64:5f:90:93:c1:92:33:
         64:3f:fd:8b:c4:d4:e6:80:40:1e:56:c5:fe:d8:4f:46:c5:e5:
         c6:f6:d5:12:86:d4:89:d3:2e:ce:d0:0a:54:73:2c:5f:cb:46:
         f0:ed:f1:44:11:8e:fa:08:95:73:4c:ea:b3:52:76:f7:e8:93:
         24:20:f5:a4:78:d1:f7:5b:db:52:9a:c6:6e:91:c7:2a:91:eb:
         e8:3d:e4:26:45:2d:38:f4:15:6e:6a:e1:c0:16:59:e0:db:98:
         1a:7f:d8:b2:8c:06:f3:a7:e0:41:17:fc:a2:5d:1e:99:9a:f7:
         37:62:03:66:80:35:16:cb:41:08:5b:0a:3e:9e:8b:02:9b:1d:
         e6:06:8a:fd:15:b1:da:9b:2b:38:83:e3:6b:b5:75:4a:bd:07:
         63:fc:68:5d:31:5b:d4:60:bb:77:6e:e7:df:4b:01:9f:81:72:
         8d:e4:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:07 2026 by rpki-client