Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC539E2874B911EF96293618C4F9AE02.roa
File:                     BC539E2874B911EF96293618C4F9AE02.roa (raw, json)
Hash identifier:          /oiqh4SIZnbEbIf9oINZSPsBL/IqU7j0YnsZnfsmoJs=
Subject key identifier:   C4:E0:99:F9:21:30:0F:A7:1A:FF:8C:26:7F:65:AF:8C:05:4A:46:5C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E91C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC539E2874B911EF96293618C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:33:18 +0000
ROA not before:           Sun 31 May 2026 17:33:18 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150044
IP address blocks:        103.89.44.0/23 maxlen: 24
                          103.178.248.0/24 maxlen: 24
                          103.190.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59676 (0xe91c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:33:18 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c70de-fbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:7d:c7:42:9d:c5:64:bc:7f:75:63:f7:eb:
                    9e:94:7d:da:6a:38:bc:e0:44:7a:9b:0c:db:df:8a:
                    69:bf:91:8f:ca:5e:02:c0:ff:8f:83:b1:c1:de:37:
                    09:d4:c3:bb:9e:8e:ed:f8:66:9e:49:ac:36:88:62:
                    f0:07:cc:30:81:24:82:8c:19:df:15:45:ca:b5:ca:
                    c1:df:aa:54:c1:12:86:53:ff:2e:f9:a2:8c:22:8b:
                    be:cb:05:a6:ca:64:9d:1c:32:c6:bb:4e:3c:c5:c9:
                    9f:ed:f9:e6:ac:6c:96:4c:b2:be:e0:94:eb:20:67:
                    33:21:9a:00:3a:b7:b6:27:8c:98:f4:bf:47:34:db:
                    f2:b9:5f:55:65:45:50:ef:ed:f4:d8:e2:13:a3:28:
                    d2:3d:fb:63:4a:ea:59:40:08:63:7b:ec:56:a5:85:
                    e0:63:30:1d:6c:21:18:39:46:f6:3c:8e:b5:de:c6:
                    2f:c0:a3:9e:a7:06:bb:ab:cd:d3:37:bd:a2:37:34:
                    e5:6f:95:bd:78:af:46:c5:7f:c8:04:f4:4d:4f:41:
                    d5:b9:19:c7:82:5f:98:f6:ca:8c:a0:02:9e:9b:62:
                    2d:61:7e:13:6e:fe:c5:e2:ee:ec:d5:57:94:93:40:
                    2a:ff:5f:cf:95:47:2a:8f:d5:16:6e:c8:c2:f9:3b:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E0:99:F9:21:30:0F:A7:1A:FF:8C:26:7F:65:AF:8C:05:4A:46:5C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC539E2874B911EF96293618C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.44.0/23
                  103.178.248.0/24
                  103.190.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:3b:98:b9:df:1a:ed:16:f9:c4:db:e8:a6:57:fa:a2:8c:08:
         25:bf:42:38:ca:17:71:ec:f0:95:8f:43:99:ca:eb:d5:e9:97:
         3c:15:96:cd:30:84:85:b8:71:e3:f2:05:f5:4b:11:49:f5:d4:
         e9:a3:80:45:17:47:a6:12:1a:b6:51:fc:cf:2d:67:90:bd:da:
         21:f1:3e:81:c9:fb:8a:57:82:64:2b:bd:73:1d:b0:93:1e:be:
         cb:25:50:d3:f9:73:9b:66:d1:2f:cf:83:3c:3a:90:3b:7f:c4:
         97:1b:9f:29:24:6f:4e:f9:46:67:9c:5b:70:3d:8f:b6:5f:22:
         68:9a:64:82:85:6b:e4:77:15:bf:97:e1:c3:e4:a9:45:79:d6:
         85:1d:bc:4a:a5:38:65:c5:11:b3:fd:cd:7e:f4:9f:2f:44:77:
         21:23:ea:24:19:b0:4e:51:f3:dd:3f:e3:99:6b:ec:3c:26:90:
         af:cf:36:ea:0d:3f:b8:53:95:b9:8a:44:8e:25:e1:12:cb:9a:
         04:96:62:19:08:5a:f7:f6:d4:a4:cb:aa:d0:6e:1d:c1:65:7d:
         7f:3f:4a:93:e3:d7:f9:fa:92:7d:83:d8:cb:57:b0:33:92:50:
         2d:f8:b9:a0:c9:73:a4:c6:d9:dc:08:17:c1:ad:9b:2c:dd:12:
         99:99:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:37 2026 by rpki-client