Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC728661B9A11F19347013B413D8C67.roa
File:                     ABC728661B9A11F19347013B413D8C67.roa (raw, json)
Hash identifier:          gX+XoWtmIs0hVgJ9fGxJQD5TA5cijyo4U/BarVcgS3w=
Subject key identifier:   99:34:D4:48:A7:E2:C8:CF:DD:AF:2C:32:E7:CC:0E:EA:56:AA:49:31
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E5C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC728661B9A11F19347013B413D8C67.roa
Signing time:             Sun 31 May 2026 17:04:54 +0000
ROA not before:           Sun 31 May 2026 17:04:54 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138286
IP address blocks:        103.157.8.0/23 maxlen: 24
                          2001:df5:680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58822 (0xe5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:04:54 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6a36-271b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:4f:ed:71:51:05:c7:d8:41:b3:80:2e:18:
                    31:43:1c:fa:a6:a6:5d:f0:78:00:2b:4b:77:df:06:
                    b4:fe:01:ab:3c:de:10:d2:9f:82:6b:f4:b8:3d:a7:
                    ba:29:a2:40:97:fc:6c:fb:ff:ff:ea:29:51:b4:ef:
                    5a:b0:5e:28:db:a2:18:92:8a:64:12:8b:f9:38:05:
                    42:bf:fd:2f:81:71:98:6e:cc:9a:73:c1:33:8d:48:
                    e2:44:32:36:21:9e:d6:2d:6d:3c:87:7c:a9:70:92:
                    bf:f6:9d:fe:3d:40:eb:05:d6:1b:f8:42:3b:b8:d9:
                    a7:b6:05:28:9c:f7:65:d7:47:7b:06:06:75:bf:56:
                    25:f3:2d:80:86:4e:88:33:db:48:f3:f7:12:6c:b8:
                    bc:a7:e6:20:b4:b7:02:69:fd:1b:1f:bf:4a:59:4a:
                    2f:0e:71:3d:83:5f:50:62:3d:c6:74:16:96:bd:d6:
                    25:ab:37:a6:c2:a2:0e:ca:46:bd:31:32:d8:4d:9e:
                    52:ed:e5:44:79:05:ca:b5:74:98:18:11:0c:b8:90:
                    7c:d6:42:0b:d9:47:0f:0c:3b:73:1b:24:eb:f6:a6:
                    71:4b:d8:58:1c:e4:91:56:15:8c:3d:a2:67:7d:fc:
                    13:88:b9:9e:0b:d3:1e:19:b1:03:54:cf:01:0c:e6:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:34:D4:48:A7:E2:C8:CF:DD:AF:2C:32:E7:CC:0E:EA:56:AA:49:31
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC728661B9A11F19347013B413D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.8.0/23
                IPv6:
                  2001:df5:680::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:e0:5b:6c:fd:87:ef:e5:07:8b:12:0a:75:6f:60:8d:86:
         24:3e:df:2f:65:44:f2:3e:15:e1:b3:cd:97:ac:bc:50:16:a9:
         9e:a3:bd:5d:12:e5:05:74:b4:59:12:61:e2:bb:ef:16:66:72:
         a5:68:00:be:09:ac:a0:42:46:4d:0b:d9:60:15:94:fd:db:07:
         4f:07:a3:33:78:5c:97:6d:6c:b3:49:0f:65:92:94:d5:bf:85:
         e4:56:4d:55:d7:43:5c:1d:d8:48:99:a2:5a:66:3e:72:70:63:
         ac:bb:b7:0a:b1:3e:0e:65:24:b3:fb:72:ae:8e:10:0d:a7:8a:
         4f:85:74:22:0d:ed:49:45:d0:91:9a:30:0d:ce:17:80:4b:9c:
         f4:be:17:09:65:bb:7c:1d:58:f7:6f:5c:bc:e5:b3:9b:d1:75:
         b0:dd:0c:d0:7c:97:3e:21:f5:f7:76:97:cd:fc:14:e5:b4:b3:
         f1:cf:5c:87:8a:65:15:f1:32:51:30:4a:d8:57:2e:3f:84:40:
         71:ca:22:97:9e:0e:3c:66:13:aa:48:55:69:23:82:c5:a4:8e:
         45:2b:66:bf:61:7d:8d:8b:52:1a:b4:47:fb:00:bb:7c:b5:95:
         a5:f9:8f:33:90:d7:ce:07:e6:90:b3:a0:90:34:39:24:dd:80:
         40:81:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:40 2026 by rpki-client