Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE06AF46C06911ECB1C8AA2BC4F9AE02.roa
File:                     BE06AF46C06911ECB1C8AA2BC4F9AE02.roa (raw, json)
Hash identifier:          4Fw1JiMZR2RGMlkQMKXst/lyhyFE7uIcMTvFAsSMwP4=
Subject key identifier:   B0:9F:47:8B:02:88:A4:D0:71:93:CF:A8:4F:44:6E:D8:8A:BA:BD:E6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8B4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE06AF46C06911ECB1C8AA2BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:29:36 +0000
ROA not before:           Sun 31 May 2026 17:29:36 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149534
IP address blocks:        103.94.56.0/24 maxlen: 24
                          103.94.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59572 (0xe8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:29:36 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7000-c596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:e3:d3:e2:c6:0b:13:02:1f:6b:09:07:30:
                    6f:88:cf:e3:51:da:dc:6d:2d:ad:75:b1:5a:51:60:
                    88:3d:72:7d:b6:01:74:3b:e6:94:ce:2b:b4:9f:cf:
                    9c:1c:7b:63:ee:cd:fa:77:49:10:21:6a:4e:81:bb:
                    b6:f2:bc:93:b1:17:0f:a3:e8:a3:e7:7f:f4:a4:1a:
                    79:ec:6a:75:72:8d:5e:7d:cb:0d:3e:fe:e4:6e:b4:
                    75:10:e2:81:47:f1:f5:31:ff:b6:71:cb:86:ce:cf:
                    4e:4d:9e:22:78:28:f4:26:5d:c3:6d:f6:1f:49:9b:
                    f3:26:59:71:d2:50:fb:38:90:f7:c2:a8:60:28:55:
                    0e:32:3f:be:85:f5:e7:d0:40:a9:91:5b:84:df:f9:
                    68:9a:ba:02:c8:60:f3:0b:df:00:6f:c7:94:50:4e:
                    a0:82:04:4e:17:95:07:b3:96:a3:b1:cb:f7:19:7d:
                    af:75:d1:32:b9:05:9b:89:b9:d2:e5:b7:71:32:88:
                    cd:93:52:cc:e1:e0:cf:5a:05:93:09:dc:a6:ca:39:
                    34:00:29:6c:bb:85:41:29:c1:88:43:8a:19:ff:61:
                    9e:5d:52:3f:36:20:76:a7:72:c4:e6:45:f1:8d:db:
                    75:c7:93:36:a1:c5:46:2f:bd:79:12:63:62:95:60:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9F:47:8B:02:88:A4:D0:71:93:CF:A8:4F:44:6E:D8:8A:BA:BD:E6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE06AF46C06911ECB1C8AA2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.56.0/24
                  103.94.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2f:08:d1:d0:e0:bc:29:a7:82:db:e9:ff:40:f7:ed:2e:db:
         1c:d8:e0:d1:57:ac:25:f8:c1:92:6e:37:9b:a6:21:84:a6:93:
         18:39:a4:64:59:ec:9a:df:9f:bd:88:18:30:44:a2:b5:c6:f1:
         05:ba:b2:60:73:d2:02:f3:5a:99:ee:f7:09:5c:7c:3b:d4:bb:
         50:18:5c:b7:b2:b8:bf:bc:74:e1:76:c7:1e:86:d4:8e:ef:93:
         14:ea:d9:5e:24:03:43:be:9a:5e:02:3d:53:90:be:3f:a5:ca:
         7b:02:b0:3e:ec:8e:d1:17:4f:3a:c6:9d:c3:95:4f:6a:7f:25:
         2c:5b:8a:4f:a4:6b:09:5a:24:41:45:a4:e1:59:a1:90:fe:47:
         2a:7f:a2:be:fc:19:6a:c1:7e:77:29:1c:14:bb:b2:8b:bb:bf:
         c6:43:b7:41:e5:6a:aa:75:5a:8d:45:dd:d6:1e:76:ec:d8:75:
         7b:bf:a7:ad:96:9f:74:f1:5a:ad:d8:1d:ba:1c:c4:ec:93:30:
         74:fd:f5:38:5f:66:e3:b6:dc:6d:c6:2e:83:44:5c:1d:3e:5d:
         d7:af:ab:74:c0:a9:2c:09:a1:82:83:28:8f:75:51:f9:e0:b6:
         86:c8:a5:d4:72:3e:b4:6c:db:7f:87:e9:1b:0c:c9:29:a4:ab:
         aa:85:03:08
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAOi0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjkzNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcwMDAtYzU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbi49PixgsTAh9rCQcwb4jP41Ha3G0trXWxWlFgiD1yfbYBdDvmlM4rtJ/P
nBx7Y+7N+ndJECFqToG7tvK8k7EXD6Poo+d/9KQaeexqdXKNXn3LDT7+5G60dRDi
gUfx9TH/tnHLhs7PTk2eIngo9CZdw232H0mb8yZZcdJQ+ziQ98KoYChVDjI/voX1
59BAqZFbhN/5aJq6Ashg8wvfAG/HlFBOoIIETheVB7OWo7HL9xl9r3XRMrkFm4m5
0uW3cTKIzZNSzOHgz1oFkwncpso5NAApbLuFQSnBiEOKGf9hnl1SPzYgdqdyxOZF
8Y3bdceTNqHFRi+9eRJjYpVgXo0CAwEAAaOCAmYwggJiMB0GA1UdDgQWBBSwn0eL
Aoik0HGTz6hPRG7Yirq95jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JFMDZBRjQ2
QzA2OTExRUNCMUM4QUEyQkM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGdeOAMEAGdeOjANBgkqhkiG9w0BAQsFAAOCAQEAIi8I0dDgvCmn
gtvp/0D37S7bHNjg0VesJfjBkm43m6YhhKaTGDmkZFnsmt+fvYgYMESitcbxBbqy
YHPSAvName73CVx8O9S7UBhct7K4v7x04XbHHobUju+TFOrZXiQDQ76aXgI9U5C+
P6XKewKwPuyO0RdPOsadw5VPan8lLFuKT6RrCVokQUWk4VmhkP5HKn+ivvwZasF+
dykcFLuyi7u/xkO3QeVqqnVajUXd1h527Nh1e7+nrZafdPFardgduhzE7JMwdP31
OF9m47bcbcYug0RcHT5d16+rdMCpLAmhgoMoj3VR+eC2hsil1HI+tGzbf4fpGwzJ
KaSrqoUDCA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:27 2026 by rpki-client