Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B576D062FDA711EFA5218D84C4F9AE02.roa
File:                     B576D062FDA711EFA5218D84C4F9AE02.roa (raw, json)
Hash identifier:          0K+jBjhMjdcEolPftrngcgBChFEHlEVvzmNlX88Gzl0=
Subject key identifier:   B6:44:4C:A5:50:31:48:CB:4B:7C:41:82:AD:AC:28:F2:97:E0:D9:C7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA8A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B576D062FDA711EFA5218D84C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:44:58 +0000
ROA not before:           Sun 31 May 2026 17:44:58 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153637
IP address blocks:        103.48.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60042 (0xea8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:44:58 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c739a-6a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:c3:5b:42:25:25:27:44:9a:e1:86:cb:33:
                    78:e8:22:fc:dd:7c:ee:77:ad:3e:3b:c4:eb:fa:81:
                    12:10:5a:6b:42:02:97:5e:ba:6e:0a:e6:a6:99:20:
                    5e:3f:4b:a1:00:69:b3:e7:b9:be:82:57:d7:9f:66:
                    28:29:a3:62:ac:56:24:46:79:59:86:1a:ed:4f:56:
                    1e:5a:e4:1b:58:e6:9d:4a:8e:7f:1c:7d:e8:05:66:
                    07:52:c6:3c:f0:51:85:83:b5:c4:9d:1e:b3:0b:f8:
                    80:47:3a:80:69:95:f0:a9:a7:a2:78:80:52:79:43:
                    7e:69:f6:72:2a:cc:36:90:ca:a6:01:e9:5a:78:da:
                    13:e8:7a:4c:28:a8:8c:5e:9b:47:b9:53:98:38:e9:
                    ef:44:8c:7a:5e:31:5c:b2:30:1c:c4:c7:ca:30:2f:
                    76:50:6e:e0:df:01:cc:f1:a4:f2:00:ac:0b:d5:a5:
                    6b:69:f4:16:9a:71:d7:51:bd:c3:17:f5:d4:7b:ed:
                    30:91:16:d9:24:27:7d:2b:67:93:2c:e1:b2:36:30:
                    a2:88:3d:93:c6:ef:83:a3:90:9e:31:af:2c:c4:31:
                    b6:91:c0:99:3f:ee:8f:36:74:78:64:b8:fb:a6:f3:
                    43:26:96:4c:c7:9c:28:a1:46:4f:54:f7:69:3c:3c:
                    21:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:44:4C:A5:50:31:48:CB:4B:7C:41:82:AD:AC:28:F2:97:E0:D9:C7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B576D062FDA711EFA5218D84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:f0:0b:ff:9c:44:ef:a1:dd:9b:9f:81:ce:39:92:2d:f0:
         75:1c:23:2e:bf:87:b8:0f:35:20:84:32:4b:29:01:99:0d:06:
         03:4c:de:0c:c4:e2:89:4c:fe:8e:84:5b:51:2d:5e:09:41:b7:
         28:c0:3c:c3:3b:3a:b3:63:26:c5:b3:1c:95:3b:d9:9f:19:71:
         3b:52:fd:8c:ae:93:41:63:75:1a:93:91:21:7f:6e:7e:8d:1c:
         53:db:25:74:bf:a3:39:7c:d7:b6:2d:a9:a6:b3:f5:0f:40:e5:
         1b:03:91:2e:7c:52:85:61:ae:4b:38:16:c6:b6:04:2a:4d:93:
         58:02:4f:18:69:ed:51:e8:ff:1f:98:70:ed:7d:5b:44:cd:f3:
         af:41:27:c8:b3:6e:7b:b1:c7:bb:a0:97:c0:d8:98:0a:39:49:
         54:67:02:68:53:9e:f7:f3:e6:b0:c0:5a:5b:b5:13:26:18:23:
         a4:d5:93:ca:b3:98:97:af:2a:68:29:83:b4:16:c5:b0:82:d5:
         f5:70:44:d0:a6:ec:d6:30:17:ac:71:40:e0:02:6e:47:9c:11:
         53:52:79:e0:bf:98:8e:e3:16:3b:13:60:b9:ef:11:ea:7f:6d:
         05:27:a1:1e:b0:e0:79:90:9d:7e:ae:ca:31:ec:4d:ed:a0:70:
         e6:bf:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:40 2026 by rpki-client