Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A703179A8E4011ECB9A53B6DC4F9AE02.roa
File:                     A703179A8E4011ECB9A53B6DC4F9AE02.roa (raw, json)
Hash identifier:          FVkLjNvnWhGyRmUEJ1XlAPNbeSehWAKfSk7YVrUXs8I=
Subject key identifier:   49:70:BF:AE:41:66:4C:72:E5:91:4A:0B:54:43:1B:32:B8:F9:62:3D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E483
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A703179A8E4011ECB9A53B6DC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:54:27 +0000
ROA not before:           Sun 31 May 2026 16:54:27 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136316
IP address blocks:        103.181.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58499 (0xe483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:54:27 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c67c3-64ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:f4:f5:db:de:e6:52:fe:c3:c0:b0:31:87:
                    d8:03:cf:27:f2:b3:dd:04:0b:52:cc:02:38:43:bc:
                    7f:7d:da:cd:85:12:1b:48:8d:24:d3:f6:3d:9b:0d:
                    f9:ec:7c:48:97:9b:ab:80:87:20:66:0c:51:b7:09:
                    25:8d:d6:59:57:85:82:6d:ac:33:4a:cc:5e:53:45:
                    fb:d7:95:ab:cb:4c:b2:4c:57:10:1b:f7:77:d1:f9:
                    05:57:84:60:de:ad:fa:a1:e0:ea:23:aa:8c:42:75:
                    0d:65:bf:20:16:95:bb:31:5e:1b:fa:f8:59:90:c3:
                    b4:07:04:36:70:57:6b:d1:52:28:d9:79:e7:1a:31:
                    c1:7a:f5:62:49:cf:d1:be:08:df:fe:81:ca:f0:03:
                    78:52:99:ab:09:39:70:55:2a:c4:d4:67:cd:2c:c4:
                    08:ea:37:79:f8:98:3a:3e:6e:a2:6f:b3:ad:e8:5d:
                    d4:f3:00:6c:a4:9b:e9:00:1f:7c:16:a4:be:99:99:
                    e3:15:ff:09:5c:4c:d4:aa:50:ee:c7:01:d1:fa:19:
                    f7:7c:46:d8:b9:6b:a4:9f:48:47:01:ad:83:c9:fa:
                    40:8a:16:47:86:10:af:48:aa:9c:96:61:29:4b:64:
                    d3:5b:ab:f8:a8:b1:63:b9:0b:b0:0f:a0:cc:17:8e:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:70:BF:AE:41:66:4C:72:E5:91:4A:0B:54:43:1B:32:B8:F9:62:3D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A703179A8E4011ECB9A53B6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:d9:5e:6e:f1:d2:e1:b0:3e:9b:5a:c0:be:09:e3:b3:ee:d7:
         0d:0c:da:52:68:78:7f:a6:85:37:e3:11:79:50:b6:71:38:41:
         47:ca:95:57:2a:82:09:9c:40:b2:36:03:24:4e:39:1d:b3:03:
         74:68:0a:ae:1a:c1:b5:e2:f9:64:f5:d0:11:8c:42:52:e4:c1:
         f1:b0:8c:b8:38:14:34:87:57:75:05:6a:86:1e:ef:4d:63:25:
         88:1c:7c:e9:6e:27:3e:da:37:16:aa:d8:40:bf:7b:0e:0d:4d:
         cf:1c:0e:22:65:85:a9:38:67:f6:08:53:22:63:5d:0e:d5:04:
         49:6d:b0:5f:ae:67:c0:74:1f:3c:e2:80:77:5c:71:8e:bb:d4:
         33:ba:d7:35:be:1f:71:95:6e:4b:fd:e2:58:fa:3b:e4:0e:65:
         2c:25:d0:1d:59:25:64:b4:74:8b:de:13:d7:7f:e6:b7:4d:61:
         03:3d:fb:93:29:66:92:4b:57:95:d8:43:74:c1:ce:ef:3f:eb:
         ce:40:49:3c:00:b8:43:2f:ad:e5:95:84:f4:ad:c2:c6:d4:dc:
         67:a5:83:17:dc:2f:a3:77:11:cd:6b:61:ec:98:b3:8a:95:62:
         fd:a7:ba:27:49:a9:27:55:35:95:04:d7:95:63:4e:aa:ad:7a:
         07:d1:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:26 2026 by rpki-client