Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B197DFC80EDA11EC95CB984DC4F9AE02.roa
File:                     B197DFC80EDA11EC95CB984DC4F9AE02.roa (raw, json)
Hash identifier:          rjrCsjGDX4H9F7CzfjwmWNMQDkBoTTCxMbz2DtMT77Q=
Subject key identifier:   D2:7D:A9:7B:A1:91:53:9C:04:69:2F:8E:5A:60:A0:96:FD:E1:AC:1A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E808
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B197DFC80EDA11EC95CB984DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:23:42 +0000
ROA not before:           Sun 31 May 2026 17:23:42 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     146926
IP address blocks:        103.171.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59400 (0xe808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:23:42 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e9e-1b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:86:46:92:0a:5c:88:2c:aa:fa:23:9c:65:e8:
                    4c:b8:c5:af:16:dd:9d:bb:2b:b2:0f:73:33:26:4d:
                    59:da:55:63:da:e2:66:4e:1e:5f:ea:96:06:8a:15:
                    69:57:77:ee:d1:ea:6c:bb:99:26:cc:44:0e:d9:df:
                    a5:8d:02:24:96:7f:85:c3:d9:a4:ba:16:f4:3e:10:
                    f9:50:5b:35:e3:96:92:67:52:88:88:96:d8:2e:67:
                    31:16:a1:bf:27:dd:e2:cf:83:08:88:e5:6d:77:55:
                    94:b9:59:25:8b:78:b1:b8:1e:2b:58:94:31:af:9d:
                    99:eb:96:b1:8e:15:80:f4:c5:38:49:c5:9b:96:93:
                    21:6d:4a:af:64:33:4d:e3:b1:07:00:8d:f3:07:5e:
                    e2:f5:b7:4e:58:97:c3:15:65:d9:d1:72:a7:74:95:
                    cc:ae:32:29:41:0f:df:00:af:08:e8:0e:66:bb:57:
                    69:76:bb:ab:b0:75:e1:9c:40:70:40:6c:17:ae:7e:
                    60:05:3b:21:78:db:b3:2b:a9:b1:b0:f7:80:3e:ad:
                    c0:8f:18:c3:60:62:fc:c4:4b:34:7f:c6:e4:db:0e:
                    15:b7:16:bd:43:8d:90:0f:8a:22:21:74:ce:00:42:
                    ec:3e:15:fc:30:ab:8e:a3:02:8d:37:c0:b8:fb:63:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7D:A9:7B:A1:91:53:9C:04:69:2F:8E:5A:60:A0:96:FD:E1:AC:1A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B197DFC80EDA11EC95CB984DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:55:b8:c6:4c:f1:0b:c4:37:36:cf:46:66:08:2d:68:3e:
         1c:73:18:d6:6a:ee:ea:11:ce:69:e4:cd:fd:a6:62:07:f5:01:
         3d:3c:63:e3:c0:e9:51:e0:75:38:1d:ab:b3:87:7f:99:05:cb:
         79:05:3c:b3:91:4e:cf:45:1c:37:7a:a6:f6:71:f6:f8:26:07:
         df:67:bd:26:08:9f:46:6b:67:2b:40:ef:21:b4:1d:28:0b:9c:
         17:c7:e5:ab:3c:31:34:fd:4e:6f:ec:2e:57:8b:3b:7e:df:fe:
         07:c4:04:e8:c9:99:7e:fa:cc:5b:1a:0e:b7:66:b7:36:d1:99:
         f9:5a:8c:40:d8:51:6a:49:20:5e:aa:ca:2a:3d:8f:70:6f:35:
         dc:2c:9b:a6:46:c2:34:7f:2a:9b:20:35:58:ff:5b:c8:f3:39:
         84:0b:99:e2:26:6e:6f:3b:25:d6:48:3e:61:22:9e:4e:0d:21:
         32:56:dd:24:96:e6:46:92:eb:ad:2d:b9:9c:de:87:79:b6:e9:
         49:07:eb:3a:9c:59:be:75:a8:8b:db:9d:e0:92:2b:3f:88:49:
         b8:f8:88:d4:10:90:4b:6f:4a:d4:a1:fc:2a:20:1a:81:3d:2c:
         a8:20:df:36:e6:f8:2a:c8:d9:df:70:a8:9f:02:84:9e:6c:7d:
         5f:be:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:32 2026 by rpki-client