Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A604490A8A8811ED9DF2425AC4F9AE02.roa
File:                     A604490A8A8811ED9DF2425AC4F9AE02.roa (raw, json)
Hash identifier:          zMwg1Iyho/RaBcqV20vItlPN0Ay62hUrEIyAXku/aTU=
Subject key identifier:   1E:EF:85:8D:82:EE:45:F1:6C:E1:FA:9E:FE:E3:4F:0F:DA:5C:8C:0D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E882
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A604490A8A8811ED9DF2425AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:27:52 +0000
ROA not before:           Sun 31 May 2026 17:27:52 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149219
IP address blocks:        103.179.164.0/23 maxlen: 24
                          2001:df0:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59522 (0xe882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:27:52 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6f98-0183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:1e:ff:bf:24:8c:6f:70:ed:2d:b2:b0:ea:
                    c5:37:79:50:fa:78:e6:cf:2f:d5:d8:ac:10:08:f7:
                    51:e6:8d:93:c8:c9:2c:e7:b8:1c:b3:56:2f:ae:d8:
                    f9:d1:e9:75:5b:95:06:69:5c:c0:b1:62:24:ff:72:
                    94:0b:83:ae:43:a8:78:7b:b2:6f:65:37:05:c6:68:
                    4e:40:14:e0:bf:c0:3c:60:db:64:09:b2:6d:c2:f4:
                    4b:d1:1f:a4:88:70:3f:cc:8f:9a:b2:33:c9:1b:69:
                    35:63:5f:e3:a2:fd:6e:26:b6:75:d7:d1:b1:b1:13:
                    11:34:ae:34:cf:41:41:b5:1d:b1:ec:1e:1d:7b:8d:
                    0f:94:da:f2:42:61:74:76:e0:b0:19:fa:85:69:e7:
                    1e:cc:6d:e0:e0:27:0d:ef:39:cc:09:e2:0f:48:7b:
                    7f:07:e2:b5:0b:2e:43:13:81:88:13:ed:d2:8d:ec:
                    f9:61:f8:18:4c:51:28:a2:a4:49:57:ba:49:be:49:
                    d9:df:47:93:eb:87:e7:0a:c9:46:df:9d:e6:8a:d5:
                    ae:9b:ab:5f:b9:c1:87:fa:9c:72:aa:51:9b:74:f6:
                    39:28:b0:54:7a:4e:69:4d:f8:a9:04:78:1b:4c:95:
                    4b:f1:3c:27:f8:9f:ae:26:0d:54:3f:e5:fc:9e:e7:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:85:8D:82:EE:45:F1:6C:E1:FA:9E:FE:E3:4F:0F:DA:5C:8C:0D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A604490A8A8811ED9DF2425AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.164.0/23
                IPv6:
                  2001:df0:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:f7:b1:cf:84:ea:02:10:1f:a7:81:b3:5f:00:cc:69:ee:
         31:4c:48:f5:18:b8:fc:8d:8c:4d:ee:3c:f5:78:48:3b:52:e4:
         4f:3b:6a:75:1c:d8:c2:df:9b:6b:09:2a:4d:06:29:8d:5a:d4:
         d1:7b:dd:c6:25:db:c1:c3:8e:f0:d4:71:0c:7b:91:e3:17:72:
         45:01:39:97:16:e0:97:b3:99:4c:a9:91:8f:a6:d2:fc:f0:4f:
         d8:7b:5e:17:f8:4d:f0:1d:e9:aa:3e:4f:31:24:e2:37:32:e9:
         26:d0:8c:7b:72:f6:b2:1c:d9:03:2a:ca:09:40:3a:b6:c7:68:
         aa:4d:5a:af:e1:3f:c1:b7:cd:47:d6:5b:e6:4f:cf:fc:4f:de:
         cd:d5:1b:91:a3:89:45:c4:3c:83:0a:dc:22:e1:df:19:81:96:
         af:ea:e9:98:d9:0d:48:1e:9c:29:23:ea:27:08:1b:d2:8b:45:
         5f:98:e5:09:a6:bc:5d:ce:dc:70:c8:67:a4:23:1a:ba:d3:00:
         33:92:d1:4c:d8:83:e3:93:bb:d2:23:d0:3e:4f:cc:71:5d:ce:
         1c:e1:e4:2b:69:ce:8d:85:4a:ac:9d:8f:61:ff:a2:99:a8:97:
         68:18:98:a1:79:4b:08:50:43:b5:b1:85:7e:82:3e:25:f7:7e:
         47:b6:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:51 2026 by rpki-client