Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa
File:                     A79EE6C4321C11F09F67030DC4F9AE02.roa (raw, json)
Hash identifier:          oY51NOrvc3Vwb+jhx4SvUuwvXAISFeYr2ulZ5pM3K6w=
Subject key identifier:   5D:8B:C7:C1:51:99:89:B6:17:C5:0D:DF:02:BF:4C:73:D0:14:53:D5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2D0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:40:19 +0000
ROA not before:           Sun 31 May 2026 16:40:19 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133995
IP address blocks:        103.53.21.0/24 maxlen: 24
                          103.109.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58064 (0xe2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:40:19 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6473-6908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:5d:3f:74:70:8c:06:0f:6b:d0:da:49:d8:
                    00:cb:97:48:13:8e:9f:f4:e4:b5:4c:5f:f7:db:4d:
                    92:ba:07:2a:86:5c:fd:31:63:3d:8e:3d:f5:04:73:
                    f3:15:13:01:65:93:dd:40:a2:5e:1c:4a:49:95:75:
                    f7:92:5e:8d:bd:0b:a1:de:f5:0d:f8:fa:8f:f1:33:
                    d3:07:1b:76:3d:99:c3:55:be:5f:6a:f4:c6:24:8b:
                    fa:4f:0d:f6:a8:04:8e:84:bb:7b:aa:43:4a:47:6e:
                    b6:3b:d7:eb:45:b0:56:1b:32:c6:3f:47:13:fd:5d:
                    ec:03:04:ae:4c:71:c7:0e:8e:5b:c7:31:5b:b4:21:
                    c7:94:bf:e0:36:08:2a:e6:80:25:4b:5d:a9:10:37:
                    64:3f:53:4a:ad:65:b1:d3:90:65:63:62:fb:50:65:
                    48:e9:81:81:07:ae:e1:6f:7c:7d:60:7f:d2:5c:ec:
                    b8:36:38:7d:2c:8d:d8:b5:c8:59:42:4d:85:06:8a:
                    d2:d8:e3:aa:c8:bd:b2:44:10:d2:ae:9d:b8:be:bc:
                    c9:2f:30:95:da:e8:90:e8:96:56:64:70:33:bc:2f:
                    f3:7f:d1:99:0e:8c:37:1c:36:1c:4f:68:0d:17:5f:
                    15:4b:01:35:1b:b3:65:ee:9e:2d:1b:52:95:86:38:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8B:C7:C1:51:99:89:B6:17:C5:0D:DF:02:BF:4C:73:D0:14:53:D5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.21.0/24
                  103.109.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c6:56:2d:8f:e9:9e:19:cc:79:a2:3e:e3:75:db:1c:55:5a:
         8e:b8:a5:dd:fb:e8:68:68:14:71:d7:7c:05:93:84:42:19:6d:
         d0:5c:20:d4:38:84:f5:31:98:5f:01:16:6a:c4:69:e1:1b:91:
         94:ac:a6:8a:ec:3f:35:06:13:80:e0:3e:e3:73:ab:f5:9f:e0:
         78:3c:c7:1b:c2:f0:57:6f:34:f9:a9:67:3b:52:a5:71:d0:c2:
         68:bd:61:4e:a9:a2:7f:7f:3e:db:56:55:af:51:a4:dd:fc:b7:
         95:44:e0:15:6c:e8:3b:05:dc:cf:07:68:b0:67:d2:f8:6f:ba:
         4b:9c:32:88:8e:7a:2d:ee:23:cf:84:fa:cf:31:22:70:0e:59:
         e6:4f:72:e6:76:45:e5:0a:8d:9f:b1:c0:c4:0a:b1:83:04:68:
         15:4a:8f:39:10:8d:6f:eb:4f:fa:1f:30:aa:b5:67:b9:df:07:
         67:b4:97:17:84:27:7e:68:b7:a6:bc:8b:22:2a:9b:bf:45:8e:
         5c:9d:08:80:59:08:f6:6f:d0:e4:36:99:08:76:d3:54:27:83:
         50:fb:da:50:a5:08:c5:26:17:27:d2:3d:0e:34:f1:dd:2d:ac:
         c3:03:d9:75:53:cc:84:7b:f4:c5:23:16:57:65:5b:52:6e:bf:
         1a:28:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:29 2026 by rpki-client