Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa
File:                     BD014932FFE211EBB4FA4965C4F9AE02.roa (raw, json)
Hash identifier:          yXbZQfzZM0fuV5H/MmOV8NNMnL8/xlqkR2ryi8qpbjY=
Subject key identifier:   B9:7D:0D:A5:13:67:DB:18:CE:81:02:F4:28:44:11:3C:B1:FB:14:E2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7CE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:21:53 +0000
ROA not before:           Sun 31 May 2026 17:21:53 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142531
IP address blocks:        103.171.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59342 (0xe7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:21:53 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e31-30e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:db:8a:42:37:c5:ec:86:38:20:33:2d:13:
                    c8:ea:2e:b1:30:82:22:a7:50:4e:9c:e7:5f:5c:2c:
                    50:80:05:23:50:0d:d7:34:14:1a:54:7a:4e:2c:68:
                    56:13:4d:e9:4e:2a:94:4b:37:fa:8a:e4:0e:ee:51:
                    a5:8a:64:c0:47:7a:8a:46:b3:05:69:2f:a1:27:7f:
                    f3:5c:3f:a3:8f:b1:ff:93:78:b6:6a:11:01:23:40:
                    b4:65:9b:05:cb:66:c8:91:78:c9:0a:86:e8:83:d7:
                    53:47:e8:48:26:7a:ab:5f:1a:56:0f:3a:01:c8:b0:
                    58:cd:ca:d5:62:68:2a:35:b5:94:5a:2c:a6:0b:a5:
                    71:77:0a:02:e1:8e:1b:ba:46:0b:e6:5a:1f:b3:3e:
                    3f:00:58:40:f1:9f:3c:5d:26:dd:69:0b:c8:74:05:
                    bd:2a:07:07:91:16:c7:6d:5f:6e:93:de:a6:2a:cf:
                    bd:60:49:43:25:25:4a:06:70:84:17:16:b6:3a:7f:
                    af:fc:07:3e:b1:a1:b5:19:a6:7d:4d:eb:5f:ad:99:
                    36:58:e3:15:02:f4:9d:72:dd:20:12:5a:98:3e:ed:
                    f7:f3:1d:34:8d:4d:5a:5b:16:de:b4:09:a4:b4:c7:
                    c9:b2:04:d4:16:e5:20:80:43:ed:ab:2d:7f:b0:0d:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7D:0D:A5:13:67:DB:18:CE:81:02:F4:28:44:11:3C:B1:FB:14:E2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:b1:66:5e:f1:9f:48:e3:22:18:fb:0c:17:cf:08:f2:a3:06:
         e3:46:4f:69:2b:4d:b2:a6:0f:fd:03:e1:a7:22:1f:8b:b7:9c:
         aa:f6:e8:63:8d:69:d0:ce:90:e4:e4:6a:5d:1f:8d:cc:9b:f1:
         cf:3f:42:90:2b:14:db:34:22:76:db:6b:50:ef:6f:db:e2:27:
         c2:95:ad:47:f2:c8:0d:87:a9:96:12:7a:3a:eb:4d:22:65:e8:
         9b:8e:f8:7d:70:04:94:30:79:04:f6:11:94:a9:c0:8e:ec:67:
         ca:08:bc:e1:f7:3f:f5:26:53:b4:f6:c0:9f:59:40:4f:28:48:
         21:d6:a7:ad:3b:9d:69:23:0e:27:be:1c:89:fa:72:d6:57:fe:
         fe:7a:c0:da:dd:d8:14:98:8d:ca:ee:fd:44:d7:80:7a:38:ed:
         75:22:4b:58:bc:ad:73:2d:1d:f4:ae:72:ad:ce:60:f9:e2:93:
         06:23:cc:fb:3e:5f:ee:06:47:83:19:20:fa:b2:04:a2:49:5c:
         eb:f2:15:71:dd:aa:50:53:b4:3d:19:b7:98:cc:74:d8:d8:0e:
         a8:54:2b:cd:c5:ba:2f:92:89:60:ff:79:86:c7:be:88:78:31:
         0d:de:15:67:05:de:a6:89:c4:ef:53:6a:c3:21:f4:65:a7:a3:
         3e:ee:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:55 2026 by rpki-client