Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa
File:                     B8645BF291A011EDA6B67334C4F9AE02.roa (raw, json)
Hash identifier:          7MrcA2SbCbn+5RnfVOda9u8cLuu2PeW0Zdwi9xjUsyk=
Subject key identifier:   53:7D:74:FA:BC:68:5D:F0:71:AC:E6:2C:01:7F:02:30:AE:E9:2E:8D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E949
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:34:50 +0000
ROA not before:           Sun 31 May 2026 17:34:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150562
IP address blocks:        103.85.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59721 (0xe949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:34:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7139-e535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:29:07:ea:6f:af:7e:d8:20:26:f7:97:65:
                    dc:da:47:a7:4b:90:48:22:7f:07:0c:36:64:b4:2a:
                    e8:8e:3c:37:97:92:93:f1:6b:3f:0a:c0:84:5f:e6:
                    a4:70:49:e4:fa:e5:49:0e:0e:ce:86:ba:a5:dc:af:
                    32:f6:b0:a5:fb:c4:8d:98:3f:39:88:0b:3a:16:85:
                    9e:39:40:c8:62:1c:29:b9:93:e5:3e:77:9f:fa:59:
                    e6:a9:03:7a:89:46:35:ca:e5:35:69:72:ea:f7:70:
                    fe:2d:c9:56:c9:6f:8c:02:cd:2d:23:1e:fc:a0:3b:
                    fc:6c:1d:cb:90:76:14:a8:6b:ce:8d:b9:a2:c3:ee:
                    0b:d8:c3:c9:da:47:67:95:96:46:bb:5e:09:a3:81:
                    29:21:67:64:20:5d:e1:ba:d1:45:53:34:8c:e9:fb:
                    68:2e:a1:72:08:e4:fc:94:00:6e:52:99:5f:e8:3d:
                    74:4e:36:78:7c:2e:b3:3b:53:59:a1:e9:91:fd:c1:
                    c3:ca:7b:02:ea:03:c5:c3:66:76:14:13:c2:78:60:
                    af:54:6e:41:3a:0f:1a:b8:4a:97:55:34:a2:08:af:
                    6a:66:92:67:c3:f0:7d:7f:72:21:bd:b8:9b:49:5d:
                    77:c6:ec:2c:7a:92:e2:c0:5d:8e:21:e7:d4:df:15:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:74:FA:BC:68:5D:F0:71:AC:E6:2C:01:7F:02:30:AE:E9:2E:8D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:20:7c:9f:f6:9d:1b:a8:1c:a2:d7:b8:9e:92:4d:f7:de:d0:
         99:4d:0f:aa:2c:e1:42:a2:3c:2d:d4:e5:5f:bc:20:0c:c8:d2:
         49:fa:6e:4b:1f:99:b9:ef:e6:dd:ff:08:2f:b9:2d:1a:c1:0b:
         98:47:4d:11:3e:5c:71:1b:2b:58:7a:d9:43:7f:ef:da:71:ee:
         fe:fc:14:e5:1d:5f:22:e1:1a:6c:e9:00:73:ae:ce:62:d8:29:
         7c:fc:88:50:43:76:01:3e:76:1b:7b:d8:46:ad:8a:19:88:63:
         a8:bb:48:a6:14:9a:1a:3a:87:ba:42:33:12:eb:a1:26:6a:1d:
         1a:c0:49:f6:fd:29:33:85:31:98:25:2d:5e:ec:f6:6e:83:6a:
         88:b6:e6:1c:39:56:6a:44:05:1c:07:98:40:9f:58:14:b0:ac:
         d3:8c:ab:93:9c:ce:f7:84:16:1a:d5:58:50:7d:fc:a3:07:ff:
         10:86:d5:1b:52:f0:d2:f0:43:30:0f:bd:73:37:13:64:f0:39:
         3c:8a:12:2e:1e:9e:5b:84:00:d8:78:e5:50:c7:45:fc:a3:cc:
         53:68:e3:e5:21:54:b4:25:69:a1:de:af:01:ba:52:21:03:b9:
         9b:e3:9d:ec:2b:8c:e4:24:7f:fd:1a:46:1e:aa:22:e0:c2:53:
         05:5a:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:42 2026 by rpki-client