Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD57C586B91411EE9590D65BC4F9AE02.roa
File:                     AD57C586B91411EE9590D65BC4F9AE02.roa (raw, json)
Hash identifier:          EScWn1REamOgm9dyoTbUw+kDUYT9XDDovLuvZci6Jvg=
Subject key identifier:   33:DB:BF:CF:BF:FA:FD:B4:F7:1F:BA:D9:F0:F3:BC:01:4C:D6:2A:42
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E391
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD57C586B91411EE9590D65BC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:46:36 +0000
ROA not before:           Sun 31 May 2026 16:46:36 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135171
IP address blocks:        103.159.39.0/24 maxlen: 24
                          103.215.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58257 (0xe391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:46:36 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c65ec-cf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:f6:b0:ce:d2:47:18:06:15:56:5c:78:7b:
                    6d:10:f0:39:14:c6:c2:2a:1a:7f:65:54:ac:c5:b3:
                    43:42:7d:0f:87:2b:9f:1c:8b:bc:b6:d3:af:03:f6:
                    a5:65:c3:09:bd:86:f7:b1:c4:05:e8:9e:b8:ba:8f:
                    38:33:fc:54:6f:81:b3:b4:4f:10:f6:9c:12:14:02:
                    3d:9e:18:b6:b6:97:44:ef:3d:07:42:16:28:72:de:
                    a3:50:0b:12:51:2a:97:7b:76:6e:35:ba:d9:06:f0:
                    f4:33:cb:ce:69:9d:2e:20:52:7d:8c:a5:a9:cf:16:
                    9a:44:d5:e1:89:fb:ca:14:17:5b:d1:71:6d:7d:96:
                    e4:1d:20:96:b7:46:24:0d:da:eb:d3:4c:89:4c:64:
                    7b:eb:a5:ea:d4:74:18:af:68:8b:10:bf:bd:3d:30:
                    9f:d1:84:38:52:63:ce:2c:56:7e:36:49:24:ba:9a:
                    e0:e5:e5:6d:0a:e8:0f:6c:aa:fb:6b:a6:c9:04:ca:
                    86:6a:95:dd:f9:67:d9:e3:13:32:92:74:c7:5e:72:
                    c9:69:2a:2f:28:5b:cb:3a:5c:83:35:62:da:03:e7:
                    fb:5a:58:f0:42:64:2f:45:c0:38:7e:15:9f:84:13:
                    7b:99:ef:df:47:31:93:5c:fe:b0:d5:e3:cb:04:bf:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:BF:CF:BF:FA:FD:B4:F7:1F:BA:D9:F0:F3:BC:01:4C:D6:2A:42
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD57C586B91411EE9590D65BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.39.0/24
                  103.215.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:41:4f:df:6e:80:ff:80:e2:f3:c5:c1:bf:6b:73:1f:d4:e8:
         f7:8c:eb:83:6a:0c:b4:52:e9:65:63:15:2f:61:74:99:c1:b8:
         29:00:b8:b1:5a:00:d6:92:b4:1f:81:d4:30:be:9c:35:65:bb:
         d9:b6:1b:1f:62:7e:ac:e7:00:a9:d7:d3:76:2a:2a:2b:a4:92:
         fb:f9:76:34:21:8b:b6:8f:5a:0d:ad:8d:9a:32:8d:07:ac:b9:
         4b:c3:f3:7c:db:b4:d4:3b:bc:15:ea:52:b2:ca:9c:98:e5:08:
         df:20:b2:66:66:ff:5e:b2:c0:a5:cb:24:35:36:c9:f3:1b:47:
         c1:7f:62:e5:f3:32:8d:aa:90:da:0c:f7:da:45:62:22:f3:9c:
         c0:66:22:3e:c6:3c:26:fd:df:d8:fc:40:b9:30:41:d6:6f:d2:
         18:9f:ca:4a:55:26:ab:be:08:10:c5:d0:03:61:96:6e:80:e2:
         84:5c:73:fc:5a:03:23:23:5e:ae:44:31:ad:03:c6:6b:28:4c:
         c7:98:eb:64:1d:af:ed:40:19:53:3b:99:0d:56:9c:e0:ba:e0:
         9a:58:45:59:af:98:e2:67:f5:48:af:12:eb:f9:f4:9f:48:93:
         94:25:55:91:0f:c5:0c:57:c3:2e:2d:a7:a3:e6:71:8b:96:d3:
         64:eb:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:38 2026 by rpki-client