Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B096D3C6E5F511EB80B97619C4F9AE02.roa
File:                     B096D3C6E5F511EB80B97619C4F9AE02.roa (raw, json)
Hash identifier:          rmqKrLB+XsSFlwCUJZ54rQZ/CRStJhbqoRAzhqCe9V4=
Subject key identifier:   87:78:D3:A5:59:48:41:94:00:ED:79:8B:0A:19:1E:27:EA:58:D9:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E54C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B096D3C6E5F511EB80B97619C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:00:52 +0000
ROA not before:           Sun 31 May 2026 17:00:52 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137177
IP address blocks:        103.110.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58700 (0xe54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:00:52 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6944-92cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:14:8d:8e:b7:09:04:b5:32:74:87:2c:3a:
                    f7:10:0f:26:c0:dc:78:fe:d2:69:8d:e8:2b:0b:66:
                    1b:e0:60:c6:1a:bf:dd:e3:65:96:f8:1c:d8:26:78:
                    4e:9b:dd:dc:7d:ed:3b:94:2d:a1:c8:49:d9:b6:07:
                    98:81:a6:6e:6b:d5:83:40:ed:e3:8e:2a:ad:cd:30:
                    ac:37:7e:59:39:3f:25:f1:4a:9d:9e:26:a4:24:1a:
                    14:4e:96:c1:f2:b0:d6:a4:c3:94:2c:f4:64:e8:5c:
                    42:78:75:0f:c7:0b:fc:3b:2d:cd:2b:d6:ba:59:f4:
                    10:1b:f4:e3:60:6a:d7:37:9d:1a:c1:e2:e1:a2:9a:
                    80:31:a6:b4:15:2a:10:4e:4b:04:39:46:99:9a:6e:
                    1a:b3:6b:e2:b8:3d:f1:01:ce:4f:86:22:73:75:8f:
                    93:a2:7e:72:66:e6:4b:4d:59:ee:27:32:aa:c9:03:
                    41:b4:50:4f:bc:a9:ac:84:74:8c:e1:f8:d4:f8:19:
                    b6:f4:4b:c2:68:55:07:d9:43:1b:f4:07:6a:6c:eb:
                    8d:3a:0e:ce:f8:f0:2c:ae:fb:f2:6b:6a:bf:17:97:
                    60:76:ec:da:a3:92:39:60:2f:f8:ff:c5:da:9f:dd:
                    70:92:eb:81:76:e9:0d:94:09:ca:a5:05:d5:28:3b:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:78:D3:A5:59:48:41:94:00:ED:79:8B:0A:19:1E:27:EA:58:D9:CE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B096D3C6E5F511EB80B97619C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:e8:65:56:33:0f:1e:25:55:de:67:eb:32:b4:39:5e:68:6d:
         6b:19:f5:77:55:07:53:e9:48:49:ee:c3:cc:6c:47:28:2f:ca:
         10:d1:d9:7f:b2:0d:02:1e:9a:4b:80:1e:48:86:0a:fa:65:dd:
         66:19:e7:53:6b:fa:49:09:80:a4:1d:ea:e3:ad:86:d2:39:3d:
         49:1e:16:96:02:70:75:81:86:08:76:ad:92:15:da:43:71:c1:
         c5:30:c2:d9:68:c0:fd:39:63:65:81:18:46:98:1f:58:2c:07:
         d4:ad:fd:31:e8:ef:9e:64:78:d9:18:37:cb:a7:59:4f:45:07:
         67:18:a0:06:d0:4a:6a:a4:b3:3c:f9:23:19:38:01:25:53:6f:
         9f:bf:84:a7:f4:6f:92:ab:ad:f8:2b:90:16:9c:3f:32:f2:f5:
         30:b6:8d:92:d0:9f:e5:13:70:80:01:28:92:02:b9:c0:c5:52:
         33:72:68:a3:40:8f:48:60:c9:dc:e3:29:b6:cb:da:12:8c:70:
         d9:4a:30:07:46:d4:fb:67:02:18:8a:12:a9:67:5a:9d:63:1b:
         ed:20:23:9d:42:d2:f1:39:d5:7e:38:f2:d6:9a:62:ba:a7:5e:
         cb:72:76:0a:30:7e:dd:52:07:5d:0b:a8:b0:50:f3:02:a5:08:
         d8:7b:0e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:12 2026 by rpki-client