Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA5651D69CFC11EF96B23E48C4F9AE02.roa
File:                     BA5651D69CFC11EF96B23E48C4F9AE02.roa (raw, json)
Hash identifier:          JEZf53TDPEFFABH8Bii+icM9v4GAlKdsyiKXFuT+C6I=
Subject key identifier:   4D:8D:1F:DE:62:EB:28:76:56:76:92:ED:A9:6D:66:AF:1A:E1:CD:78
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E701
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA5651D69CFC11EF96B23E48C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:15:16 +0000
ROA not before:           Sun 31 May 2026 17:15:16 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141492
IP address blocks:        103.162.64.0/23 maxlen: 24
                          2001:df5:e680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59137 (0xe701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:15:16 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ca4-0130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:8b:af:21:d5:1b:73:ef:f9:8f:2a:c1:a5:
                    9f:b6:02:2f:ee:c9:9a:b0:18:ba:fd:06:3e:86:bb:
                    ad:8d:32:cc:77:2d:59:8c:dd:8c:8c:e6:63:6b:66:
                    77:91:53:64:ff:30:86:11:75:08:49:08:e6:26:f2:
                    74:18:9f:89:f7:c2:66:87:c4:bb:d5:55:eb:05:05:
                    67:f2:63:15:5c:5f:fd:ec:d5:63:4c:2e:4c:fe:5b:
                    60:4c:12:2f:23:0e:c5:56:5e:eb:1b:f2:05:79:b1:
                    ad:d3:90:6d:8e:fb:4a:98:99:06:37:c3:61:3d:f4:
                    b4:92:53:89:d1:98:c9:88:77:86:bb:74:83:97:16:
                    46:fd:46:c7:fe:30:0f:b8:f6:82:02:41:6e:b1:65:
                    2c:fd:3f:34:08:c9:12:ca:63:ac:f5:7d:6e:7f:1d:
                    5d:55:fe:cb:1f:e9:2e:6b:d2:fc:c4:93:45:fa:5a:
                    7f:d2:c6:7e:a2:28:38:a9:bc:ed:20:8c:c6:ad:8f:
                    93:6c:92:f4:c5:bc:0e:48:7b:8b:9b:6e:07:34:c6:
                    a1:d7:eb:01:f4:d5:b3:bd:7e:6e:d7:32:53:72:d3:
                    fb:85:27:91:1c:2a:15:f6:9c:d0:45:a9:c6:49:ef:
                    3c:97:56:f0:6c:63:f2:07:46:26:61:c9:d9:44:36:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8D:1F:DE:62:EB:28:76:56:76:92:ED:A9:6D:66:AF:1A:E1:CD:78
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA5651D69CFC11EF96B23E48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.64.0/23
                IPv6:
                  2001:df5:e680::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:a1:ff:6c:6f:2b:e8:a2:ee:b1:c5:12:7b:14:42:a7:bb:c9:
         41:ed:67:a7:0e:80:d0:d0:4c:7a:de:bb:45:af:dc:1a:86:ce:
         3c:4c:fd:c0:36:f5:37:2d:6a:02:0a:d0:42:27:b6:30:1c:16:
         87:c8:4b:7c:97:16:1b:f2:66:a7:39:14:d8:f5:4d:f8:cd:4d:
         80:86:40:f3:c8:1a:47:a8:2b:70:f8:a9:e0:ad:c3:63:df:ed:
         65:40:f5:14:0d:cf:1d:73:ea:53:aa:4b:dc:96:2c:09:69:98:
         e2:91:d1:39:87:bf:8e:bb:d5:70:73:89:e7:2e:c5:e3:78:2c:
         31:ac:ad:3d:21:31:90:dc:ff:33:bb:de:e1:1b:8b:b4:17:3a:
         24:71:d5:02:7e:21:24:9b:4a:f5:98:30:ba:10:27:85:56:9a:
         1e:aa:a8:f7:6d:e9:74:36:a2:21:89:0d:a5:8f:6c:09:bb:4a:
         02:72:0d:a2:d1:2c:71:29:5e:9e:25:91:d5:34:a1:49:89:91:
         9c:74:a8:62:49:4f:90:c2:1b:14:6d:be:c4:d8:7b:64:2a:08:
         69:4c:24:f3:02:98:c2:af:8e:30:16:fb:96:13:a0:7a:6d:04:
         f3:10:12:f1:ec:98:6a:6c:99:e5:cf:9a:62:9a:3e:47:46:da:
         8c:57:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:09 2026 by rpki-client