Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B052D67C0C5111EBBFD0520FC4F9AE02.roa
File:                     B052D67C0C5111EBBFD0520FC4F9AE02.roa (raw, json)
Hash identifier:          hMakxyMhW/HHy4TEfZq8iB6Y6kEsyIyx4tprnDRq2mc=
Subject key identifier:   02:D5:A3:CA:E2:B4:B8:2A:A5:25:86:CD:7C:7B:FA:2A:39:70:E2:89
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EB9D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B052D67C0C5111EBBFD0520FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:53:28 +0000
ROA not before:           Sun 31 May 2026 17:53:28 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     59188
IP address blocks:        103.107.142.0/24 maxlen: 24
                          103.133.162.0/23 maxlen: 24
                          103.210.104.0/24 maxlen: 24
                          2404:6780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60317 (0xeb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:53:28 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7598-16ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:24:87:fa:e0:73:2e:44:33:7c:bf:f1:f6:
                    da:d1:63:0d:b3:a9:ed:11:c9:4a:00:d5:75:ee:0d:
                    bb:d6:47:c3:13:2e:80:31:24:8b:88:6f:67:11:b0:
                    1f:d8:76:16:1a:74:75:a6:ff:6b:d0:5b:eb:c9:9c:
                    6f:ef:d4:3d:4d:95:16:ac:ad:f2:6a:09:96:ef:30:
                    b3:5e:2f:e0:8b:ed:fd:34:b8:14:e3:13:43:a3:a1:
                    dd:a5:23:46:4a:cc:9f:10:19:28:26:a2:31:b3:ea:
                    b3:6e:76:78:c2:e6:d0:e4:a1:42:69:8a:02:41:70:
                    d3:a1:bb:74:88:09:8e:62:0c:f2:82:b7:77:f2:0e:
                    ab:58:33:6d:a7:52:fb:71:d7:54:66:14:61:2a:6f:
                    5e:40:a6:83:f3:65:b9:e0:43:85:4c:3f:8a:9f:8f:
                    12:30:3d:92:98:11:3a:c6:df:74:9b:96:d2:7e:08:
                    17:71:79:14:11:00:37:8a:7e:79:57:52:85:21:71:
                    68:9e:5c:17:19:04:f1:d6:55:77:0c:fa:ad:bd:cc:
                    92:6e:1c:6c:01:11:a8:bf:dd:e3:1d:b9:70:3a:05:
                    89:2e:74:0d:6d:59:a3:f1:8f:e5:15:53:5f:09:97:
                    6e:85:37:41:94:1c:fa:8b:69:3b:a7:a8:55:a6:6a:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D5:A3:CA:E2:B4:B8:2A:A5:25:86:CD:7C:7B:FA:2A:39:70:E2:89
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B052D67C0C5111EBBFD0520FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.142.0/24
                  103.133.162.0/23
                  103.210.104.0/24
                IPv6:
                  2404:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:dd:2f:4c:d0:f3:30:e8:3e:62:89:34:7a:59:81:1f:99:
         b7:cb:b9:e6:6d:4e:32:08:33:c1:3b:65:26:fe:dc:4a:da:ae:
         35:38:c1:1c:1f:a2:69:eb:97:32:f4:c3:41:06:14:3a:05:0c:
         a8:d2:5b:01:fb:f6:b9:d0:79:c1:40:f4:67:ee:ff:5d:ae:a7:
         d5:f0:51:86:9f:54:0a:ea:9d:c8:2e:a3:b7:9b:71:b8:c5:6e:
         68:56:6f:a0:6a:6f:8f:47:43:4e:e7:6a:e2:bb:68:ee:cc:c6:
         d6:33:38:a3:33:a3:31:b1:43:b1:f4:37:72:67:7b:89:8a:90:
         29:60:c3:f3:6f:d1:44:ae:1b:14:68:ad:27:90:99:5c:1b:b1:
         58:f2:43:d5:51:55:fa:37:ee:8e:33:32:b4:96:82:08:98:66:
         5d:b1:fd:18:93:c5:d7:34:3e:82:9e:98:83:d2:d4:ed:8f:9f:
         60:72:1a:e2:6b:90:01:ba:e0:60:b5:b8:58:70:40:37:19:49:
         aa:f7:27:98:05:f5:eb:e0:30:91:e1:e4:98:2b:90:1d:34:99:
         aa:1d:4f:db:16:bf:80:4e:88:15:ef:af:9e:dd:b5:9e:ea:5f:
         00:87:2d:9c:06:b0:90:a0:cd:6c:80:0a:fa:07:1d:62:2b:ee:
         34:db:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:24 2026 by rpki-client