Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B87697DA8C4711ED846F2486C4F9AE02.roa
File:                     B87697DA8C4711ED846F2486C4F9AE02.roa (raw, json)
Hash identifier:          /s0AGmgs0QFZALlYeXcCzzqFoxEL8cJnUsx9jFcOLMc=
Subject key identifier:   E1:B0:E6:79:21:DD:D8:69:EB:77:B7:FB:6E:0F:4F:3E:B4:89:DC:63
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E96D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B87697DA8C4711ED846F2486C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:35:58 +0000
ROA not before:           Sun 31 May 2026 17:35:58 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150608
IP address blocks:        103.62.150.0/23 maxlen: 24
                          2001:df1:c3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59757 (0xe96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:35:58 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c717e-c5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:d8:ef:45:4b:22:ee:76:f3:40:58:93:1e:
                    15:46:96:b6:16:5f:60:39:eb:ec:55:f5:e6:ad:58:
                    98:98:76:75:65:24:b5:aa:28:98:13:7c:bb:87:28:
                    db:42:4f:17:9c:7a:85:a2:b5:8b:a2:72:b6:6e:4d:
                    30:7c:9c:77:7d:36:c0:53:1f:ce:c1:9e:99:d1:88:
                    15:a9:0d:77:63:18:dd:c3:2f:5d:84:9f:b0:d6:ef:
                    a7:1f:f4:2a:07:b2:53:5a:ea:bb:a1:13:cc:9f:03:
                    d1:db:a4:02:25:e6:f6:f7:36:c2:6d:b3:b1:82:c0:
                    c6:55:94:a2:02:39:d8:62:53:7a:85:d7:00:f7:2b:
                    09:27:66:6d:42:a4:1a:09:b0:c1:54:d2:bb:b5:8b:
                    df:dc:e8:29:56:47:c7:34:a4:d2:98:8f:f4:9e:db:
                    d0:51:58:40:15:a5:a0:fb:37:2e:7f:6f:fc:22:00:
                    c9:62:54:f6:7f:e2:3a:ad:98:cc:7d:e3:e7:cc:a2:
                    6c:68:98:27:0c:41:36:e7:1a:ff:af:61:f0:42:45:
                    a7:5b:b6:a4:dc:81:f4:97:bd:22:d9:93:27:f5:76:
                    80:8d:cf:0a:21:e1:1c:38:96:aa:b5:e0:e4:06:1d:
                    9b:cf:8b:5d:04:72:4a:82:d5:55:0c:3d:6c:8a:58:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B0:E6:79:21:DD:D8:69:EB:77:B7:FB:6E:0F:4F:3E:B4:89:DC:63
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B87697DA8C4711ED846F2486C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.150.0/23
                IPv6:
                  2001:df1:c3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:85:c1:56:1e:a6:96:45:ea:ed:52:6f:39:1a:fa:40:30:
         1b:21:ae:d2:e8:ad:e0:2c:18:aa:21:c3:ce:f2:33:73:0c:f3:
         b9:6a:45:6f:40:8b:b0:60:ee:4f:5d:e9:41:f2:35:fd:8c:28:
         28:ec:7c:c1:77:70:3d:2a:1b:6b:8c:95:c2:86:1d:d6:70:c9:
         3d:a5:e9:7f:54:09:a1:06:81:5f:c2:ad:ae:10:45:7e:34:79:
         74:77:6d:c1:8f:81:da:d5:1d:6e:3d:5f:4a:4e:be:cd:66:1a:
         a0:20:bd:64:d1:06:77:8c:a7:9d:1e:c7:c4:bf:45:5f:05:34:
         f6:1c:0f:0a:b8:53:f3:0f:b4:f2:23:13:b6:00:04:6c:ae:94:
         70:65:f3:3c:13:90:fc:90:52:d7:d3:e4:1d:93:8b:00:85:3d:
         cf:61:90:47:cd:0e:e6:16:03:08:a3:fa:73:88:60:fe:31:01:
         6b:06:de:c7:46:03:d0:b7:f1:cc:8a:24:10:34:32:f4:7e:ca:
         ce:61:bc:7e:33:37:94:a6:37:79:2e:3b:10:db:49:ed:1c:9b:
         3d:de:3d:ca:9f:e6:b4:e8:43:a7:5c:a0:6b:59:e8:7f:ed:92:
         3f:ce:a0:69:c9:3c:0e:d6:98:a2:fa:fd:63:1a:bb:e8:3c:2d:
         26:b0:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:22 2026 by rpki-client