Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C06A8ABDFA11F098F56327C4F9AE02.roa
File:                     B8C06A8ABDFA11F098F56327C4F9AE02.roa (raw, json)
Hash identifier:          rpwOqBPkKHlc0b0hgsmjbZ0yIabMdUx3h8LGSSycFKU=
Subject key identifier:   B6:3A:79:8B:F2:A7:3D:2F:E1:E8:61:53:79:BB:AE:E8:EE:BC:B6:A7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA5B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C06A8ABDFA11F098F56327C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:43:31 +0000
ROA not before:           Sun 31 May 2026 17:43:31 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152710
IP address blocks:        103.190.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59995 (0xea5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:43:31 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7343-5253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:26:93:ec:9c:4a:e5:21:cf:5b:6f:51:50:
                    73:7b:ce:21:2c:55:a7:36:cf:22:6c:97:2c:6b:ac:
                    90:30:86:28:75:34:ec:a5:27:ea:be:cc:25:b5:d9:
                    32:b5:d4:9a:72:97:d3:48:78:47:ea:37:8c:c5:b3:
                    63:04:98:08:fc:43:a6:78:6a:e6:6a:6f:ec:5c:c4:
                    21:ab:60:05:16:3e:d1:1d:c3:79:c4:08:fd:8e:e5:
                    f7:3e:2e:5b:85:26:98:a3:41:fa:b2:f2:ca:50:c2:
                    e5:2e:de:8a:55:c1:6b:9c:4d:dd:6e:2e:8d:16:f8:
                    31:3d:43:93:9a:f1:d3:d5:de:95:96:03:10:8b:72:
                    a7:19:0d:65:17:d1:f1:ea:02:83:a4:5f:6b:80:82:
                    3b:79:ca:00:97:c3:4f:01:53:dd:f7:8d:29:b0:5d:
                    4a:35:ba:f8:94:ff:77:30:80:2c:de:f2:dc:55:be:
                    d5:d0:a7:73:df:a5:50:29:63:00:eb:eb:6b:99:7a:
                    fc:13:c8:0f:2b:2a:0a:57:69:a5:6f:7b:3b:d3:07:
                    30:f2:2b:1c:48:80:2a:f3:e4:f4:c1:da:f3:3c:ba:
                    a2:b4:86:8e:3d:c5:ee:4f:97:f7:9d:88:a5:a3:fb:
                    e6:23:f2:d2:89:67:36:b8:75:24:76:80:a8:4c:64:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3A:79:8B:F2:A7:3D:2F:E1:E8:61:53:79:BB:AE:E8:EE:BC:B6:A7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C06A8ABDFA11F098F56327C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c3:36:09:65:e6:f1:89:ca:68:09:5e:da:90:e2:3a:4f:59:
         13:c6:5d:48:df:fb:63:19:b0:13:ce:8a:45:f9:d6:07:b0:15:
         d1:3a:bb:5a:3f:1e:2f:f4:7b:6b:f8:56:53:38:53:5c:a9:b9:
         c5:0b:0f:2f:a4:52:1e:28:af:98:9d:5e:3e:d0:39:30:90:dc:
         fb:c3:37:95:30:8b:d2:3d:47:94:23:b3:86:56:d0:5b:46:a3:
         58:4c:a8:8f:9e:39:6f:37:ae:d8:c2:52:4a:3a:0a:15:1e:f7:
         f7:5a:de:65:29:ab:6b:fb:e0:ce:11:d5:f7:3f:b0:ef:8e:4b:
         f0:f4:48:8d:42:9e:41:4a:07:f8:ae:de:07:fc:68:71:33:3a:
         08:1a:d3:d6:f8:d6:50:75:6f:29:39:72:5d:e8:f4:2c:8a:00:
         54:f2:83:ca:89:3c:c7:6c:c8:ce:72:93:cd:d1:d1:9f:ba:88:
         88:41:26:ce:80:fe:35:4f:18:d6:59:e1:8e:e6:78:98:02:03:
         4b:64:b9:42:f9:f6:00:3d:05:b5:f8:02:9e:58:2f:89:cd:8c:
         51:db:84:1d:22:16:44:e3:c9:8e:a9:85:be:c6:a7:6d:7b:96:
         71:79:85:c6:19:88:af:39:f0:6e:33:81:8a:5b:53:26:7b:f2:
         a9:e2:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:36 2026 by rpki-client