Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD9046524AC711EDBA1A577FC4F9AE02.roa
File:                     AD9046524AC711EDBA1A577FC4F9AE02.roa (raw, json)
Hash identifier:          JAsniocSBj/EMQnydXbNmpaH5unShjPH7lMmd5FVa8k=
Subject key identifier:   23:F6:EA:EE:70:44:BD:8A:5D:08:CE:62:4D:BA:1F:F4:4C:98:EC:82
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E766
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD9046524AC711EDBA1A577FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:18:32 +0000
ROA not before:           Sun 31 May 2026 17:18:32 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141840
IP address blocks:        103.168.85.0/24 maxlen: 24
                          2001:df1:5dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59238 (0xe766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:18:32 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6d68-73c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:50:af:cb:d9:a0:9b:f3:c4:3f:fe:a6:2d:
                    94:41:3a:48:6c:d0:8c:12:fc:17:c9:02:e4:fb:30:
                    67:08:45:f3:50:93:0c:4d:b0:66:af:1f:48:84:c8:
                    47:ea:1a:72:f6:0e:02:39:da:7d:7d:38:2e:9e:31:
                    6f:c4:71:48:33:9c:cf:a5:af:40:38:79:6c:24:8f:
                    f5:d3:9e:9b:76:99:70:41:41:fd:1b:78:f4:7b:af:
                    94:1d:7a:67:e9:33:f5:54:80:de:7a:09:ff:29:92:
                    ec:a2:0a:46:16:68:d8:bd:eb:90:8e:89:d6:e8:7a:
                    bd:58:75:00:8d:2a:62:35:ea:ca:15:00:f3:34:b3:
                    dd:e6:f7:ea:17:23:79:ed:eb:a4:40:44:fa:30:e1:
                    e7:63:20:65:be:fd:2c:fc:5f:7b:39:ad:24:26:15:
                    78:b8:28:c8:af:2c:58:96:0b:06:75:c5:6e:2a:27:
                    be:89:2b:0b:9f:d0:b4:74:dc:6c:aa:02:40:6a:d6:
                    0d:b0:11:8a:42:09:8b:53:11:95:57:4f:32:4a:2b:
                    1f:f0:de:1f:6f:e4:80:71:45:e7:4e:09:56:b5:f2:
                    68:3f:2b:7a:d8:76:0a:03:96:90:7c:d4:7f:c2:19:
                    01:a2:d9:89:97:52:3d:50:74:a3:b9:1c:d3:63:74:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F6:EA:EE:70:44:BD:8A:5D:08:CE:62:4D:BA:1F:F4:4C:98:EC:82
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD9046524AC711EDBA1A577FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.85.0/24
                IPv6:
                  2001:df1:5dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:2b:91:fd:db:86:b0:20:67:d4:ba:ff:93:7b:f0:0a:8f:
         c2:ed:46:85:0d:5b:06:ed:3b:02:8b:f4:58:0e:e6:06:46:e9:
         44:c9:77:f2:26:ee:98:80:87:e6:c5:cd:68:7d:85:77:9d:fb:
         98:60:64:e6:b1:dc:b2:54:92:98:99:57:f8:07:e6:0f:cf:ff:
         c4:ae:8a:e4:b9:92:8c:f2:f8:6d:42:77:da:f2:c0:ab:e5:09:
         7e:77:06:84:82:a8:01:94:b0:b2:36:c0:d7:d0:d6:4a:6d:18:
         6b:31:6e:a3:10:29:11:ec:92:ab:3e:7a:36:b5:d8:0f:6b:47:
         21:4a:5b:c1:26:3b:f4:1c:14:e3:f8:8a:b4:f7:71:c7:d9:da:
         19:e5:79:74:79:93:2a:03:5e:fc:ee:4f:06:5b:36:3e:4e:9b:
         f2:78:2c:75:ba:df:08:bb:07:9c:05:a5:7c:09:1c:20:e2:7b:
         16:65:46:9a:39:33:31:c0:74:6e:1b:69:5f:25:ea:57:9e:01:
         13:9e:88:b7:10:03:b1:1e:6e:71:1c:1d:41:76:b3:68:68:d8:
         0f:9d:48:31:60:ad:f0:e0:e3:e9:5c:eb:f3:3e:30:6b:0b:9c:
         dd:61:16:7f:ec:2d:bf:53:58:f1:60:4f:4c:62:0a:7c:60:4d:
         82:63:7d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:48 2026 by rpki-client