Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7470DF64D0011F0BCF5486FC4F9AE02.roa
File:                     A7470DF64D0011F0BCF5486FC4F9AE02.roa (raw, json)
Hash identifier:          uX6fv/Slss9oVlJmP368TquIsegOXJqmG3rs52SZxlw=
Subject key identifier:   51:44:98:E7:28:A5:DB:45:B5:02:7E:C1:09:09:C8:96:27:0F:34:10
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAB6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7470DF64D0011F0BCF5486FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:46:17 +0000
ROA not before:           Sun 31 May 2026 17:46:17 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153984
IP address blocks:        103.158.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60086 (0xeab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:46:17 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c73e9-501e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:d3:70:d9:4f:37:3b:70:f2:04:2c:4a:c6:
                    b5:48:f6:a6:61:3a:21:10:7a:0f:5f:eb:5e:80:d5:
                    60:fb:ff:f2:2e:f7:72:08:d9:1e:f7:65:ef:89:b6:
                    0a:e5:9d:78:f9:5f:e0:b3:31:09:2b:1d:94:cf:a1:
                    8c:2e:ca:e5:f8:ae:d4:80:52:ad:8e:40:79:b0:52:
                    3f:fe:9a:e4:c1:75:14:d7:70:d1:1c:3b:89:25:e7:
                    8c:07:f8:e1:bf:68:c4:0c:61:b1:78:89:f1:ff:9c:
                    9f:ee:d9:74:7d:16:b9:4f:16:f3:a3:e4:cd:63:9a:
                    17:5a:3a:4e:78:d3:fe:f9:f8:64:d2:0c:4f:fe:ea:
                    44:4f:ab:c9:30:6f:b7:71:e9:1b:fe:af:09:f9:03:
                    b4:a5:3d:b9:fe:e6:21:cc:3b:c9:21:e6:b5:c1:9d:
                    e3:d1:1e:c7:7b:db:0f:62:10:d8:74:91:a0:80:b1:
                    23:57:4a:67:ff:bc:e6:28:45:ef:30:1d:c5:1b:81:
                    19:99:3d:24:d8:7d:3e:49:4f:9f:17:34:4a:c9:a6:
                    43:9a:d4:89:e1:80:96:d9:c6:3a:1c:f4:8e:4d:d5:
                    b8:12:01:70:24:2e:be:99:55:30:70:91:22:d6:3a:
                    39:3d:9b:21:ae:4a:69:2e:89:83:32:4e:0d:5e:a4:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:44:98:E7:28:A5:DB:45:B5:02:7E:C1:09:09:C8:96:27:0F:34:10
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7470DF64D0011F0BCF5486FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c3:6a:51:ca:bc:24:82:e4:96:69:d9:6a:c8:55:61:a7:95:
         39:47:4a:e5:e3:40:23:9a:11:62:28:d1:2c:fd:b0:6b:6b:4a:
         71:b5:3c:ac:4f:2a:36:4f:3f:8d:d3:65:76:6a:91:8a:a6:d1:
         6a:42:14:6b:11:86:96:a2:b8:94:db:69:27:9c:62:57:e9:7a:
         18:e6:5f:48:66:91:ae:97:1b:0c:c5:ea:26:47:b5:c3:be:d9:
         c1:f0:6d:36:67:33:63:ec:d0:29:07:3a:46:6f:a9:b7:a2:06:
         df:ab:8c:79:ad:89:bd:2b:1f:8a:75:bb:47:f8:c3:b3:07:e6:
         40:6c:fb:44:8a:58:f5:4a:b6:2e:e4:33:2e:34:e6:5d:53:a0:
         86:e9:cb:7b:72:bc:e7:85:51:3e:48:00:e2:f5:cc:78:aa:34:
         5b:22:9a:1c:12:c0:a7:68:9b:93:a3:ab:d3:76:94:b1:23:3a:
         2f:a7:c4:1b:09:da:00:6a:61:26:db:b3:96:24:57:1e:7a:db:
         05:13:c4:f2:7c:a9:53:a3:84:5f:d1:e0:fa:77:4c:f5:ad:1e:
         df:e0:49:2f:50:35:f3:93:ff:13:5d:ca:f7:ee:d9:66:f0:8f:
         b1:ba:eb:d8:f4:8f:1e:a8:ef:29:aa:fe:50:98:69:9c:f8:e8:
         3f:24:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:14 2026 by rpki-client