Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9E4451EBB1E11ECAB080E31C4F9AE02.roa
File:                     A9E4451EBB1E11ECAB080E31C4F9AE02.roa (raw, json)
Hash identifier:          ZGMxBfXRCal3w5aI3GbbeRVqxhZOh76lBa7FUDXXT2g=
Subject key identifier:   A4:49:27:ED:DD:55:96:C1:53:D9:53:58:9D:CF:25:3B:79:53:61:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E577
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9E4451EBB1E11ECAB080E31C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:02:22 +0000
ROA not before:           Sun 31 May 2026 17:02:22 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137640
IP address blocks:        103.186.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58743 (0xe577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:02:22 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c699e-68c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:88:15:32:35:b6:9a:22:34:d8:cf:df:c4:
                    c8:7d:84:d1:dc:29:a2:de:5e:dc:f7:42:65:fb:11:
                    cf:c6:8a:ac:da:31:03:b5:ed:27:70:74:e7:3a:c2:
                    c9:0c:3a:13:98:fc:6c:7c:0b:a3:38:ff:9d:77:63:
                    8b:04:11:8b:e9:59:f0:7d:6c:39:47:2c:f8:aa:48:
                    3e:bb:2a:3f:6f:34:42:52:3e:6e:c6:89:4e:93:6a:
                    05:2c:92:4f:45:1b:17:7f:a2:43:53:b3:56:f4:bf:
                    c3:51:07:aa:0d:32:0f:a3:bf:d2:2a:47:cf:dd:b7:
                    b2:87:33:17:2c:32:54:c4:71:48:2d:82:2e:3e:ba:
                    65:e9:6c:3f:32:2f:aa:e8:c7:16:c2:6e:26:78:c6:
                    8c:e4:d2:6f:b7:94:90:8f:7e:fd:be:24:25:93:dd:
                    1f:10:f1:65:dd:ad:5b:bd:31:c7:f3:82:b9:75:13:
                    19:a6:d0:a3:a1:15:15:10:47:6e:15:a6:3e:5e:aa:
                    4e:7f:f0:fb:85:a7:f0:57:3b:9c:d6:e1:fd:d3:02:
                    61:5e:bf:36:72:e2:48:01:dc:52:10:ba:64:0b:60:
                    2c:d9:d2:70:e5:55:b5:a6:33:38:70:00:78:bf:cc:
                    bf:8f:4f:49:f5:ed:0a:96:ad:3b:38:57:75:08:43:
                    15:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:27:ED:DD:55:96:C1:53:D9:53:58:9D:CF:25:3B:79:53:61:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9E4451EBB1E11ECAB080E31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:59:60:98:a7:2b:2b:49:79:c0:5d:da:d0:9f:d5:7f:d6:93:
         76:d7:3f:94:11:bc:95:b6:9d:92:2f:d2:32:c5:8f:b5:5d:33:
         cb:0d:ed:e1:cb:de:eb:92:ce:4c:7e:31:b8:7d:89:1e:c4:73:
         ea:81:3b:1d:4e:ad:fd:e9:ba:a1:94:87:d8:b0:77:23:f6:c9:
         41:c4:6b:a2:c6:a9:ca:a1:ec:74:c5:30:6b:ad:b8:e3:05:f6:
         b9:50:a2:a8:0b:43:07:90:f9:0f:6f:eb:7e:86:0d:ba:77:cf:
         4d:32:8c:9a:24:d0:e0:4e:93:d4:d8:b2:3f:6f:6d:c1:96:05:
         ce:fc:4b:07:a5:66:31:53:4a:78:21:c1:40:31:0e:e1:a1:12:
         06:38:bf:9c:a4:90:2f:85:0e:db:c3:2e:82:cb:36:f8:a0:4b:
         50:5f:82:01:3f:fa:bb:13:a2:3f:65:18:05:b4:02:7e:83:67:
         22:c6:c0:1e:a6:10:49:87:35:f2:de:25:50:a7:c0:f2:e3:ff:
         94:b3:b0:39:2b:eb:71:98:3c:0e:69:1e:b2:0f:0b:98:49:63:
         1b:7d:a8:87:1e:7c:35:f1:52:a1:22:26:53:66:8f:b6:3f:38:
         64:fe:07:2d:b9:43:d4:3a:3f:c9:da:b0:12:a1:f0:7f:e2:b2:
         26:b6:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:42 2026 by rpki-client