Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEFD637C976611EB8499EA1CC4F9AE02.roa
File:                     BEFD637C976611EB8499EA1CC4F9AE02.roa (raw, json)
Hash identifier:          fY3Z0Z2mCzHbD17UMEyg0yKXeIzvS/icsL/W4cXUHpY=
Subject key identifier:   11:BA:18:81:7C:BD:D8:DE:8A:E0:D1:36:C8:E1:C3:FC:D7:B9:C6:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E47B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEFD637C976611EB8499EA1CC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:54:13 +0000
ROA not before:           Sun 31 May 2026 16:54:13 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136305
IP address blocks:        103.92.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58491 (0xe47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:54:13 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c67b5-58c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:a4:2a:0a:14:42:52:82:6b:17:30:bb:7d:
                    81:20:51:ef:e2:7e:81:d2:a2:40:31:c9:39:14:db:
                    fc:5e:9f:49:56:32:cb:68:6d:0a:29:73:d6:94:f6:
                    4d:f8:79:49:ea:b8:7d:7f:bc:d7:8c:c0:60:04:7c:
                    25:6c:7f:ab:3a:e7:a9:bd:25:0a:1f:36:63:6e:24:
                    f1:6b:5e:56:e7:c3:51:4f:a7:96:dd:6c:3d:ec:8c:
                    59:e2:11:69:a9:bf:0f:f9:11:e7:fe:23:70:33:7d:
                    5a:3c:fe:ed:ab:86:2a:85:7c:ae:3f:19:72:c3:ac:
                    33:1b:f3:1f:13:7b:ad:77:92:bf:17:49:27:e2:f9:
                    99:62:69:f3:0a:e5:b6:1e:75:d2:a8:8a:80:c8:c2:
                    bf:6f:f1:fb:13:f0:58:8e:74:fe:eb:fa:e5:37:93:
                    35:d6:29:07:68:2e:7c:15:e9:6d:17:d3:fc:e4:41:
                    7a:6b:c2:c0:0a:21:48:3a:61:df:12:fb:ab:16:cc:
                    38:ea:c1:4a:95:be:56:74:51:09:59:6e:71:ed:3d:
                    f5:7d:45:79:78:13:4d:e3:63:18:fc:fe:16:57:ca:
                    48:9e:e0:7f:9e:07:a2:8e:6a:c6:99:f5:a3:76:09:
                    db:35:6b:a1:d6:4c:f8:67:b8:8f:6c:9b:d1:19:cb:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:18:81:7C:BD:D8:DE:8A:E0:D1:36:C8:E1:C3:FC:D7:B9:C6:FB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEFD637C976611EB8499EA1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:30:34:db:10:e1:ea:ab:52:9b:81:5f:bb:60:46:73:5b:92:
         09:b4:03:d6:02:2f:82:3b:92:2b:10:5a:97:fe:71:9a:be:9f:
         22:88:c0:af:96:d6:7b:8c:0d:33:48:5f:c7:e1:46:30:5b:fc:
         20:39:49:b0:b2:a2:4f:85:b5:11:10:1b:71:22:69:58:3e:96:
         f6:a8:c0:b9:4b:42:d5:84:0d:78:f5:ff:b6:41:4d:c3:ea:ee:
         9e:7f:3f:ba:8d:cd:df:ba:93:21:ba:2f:2f:ed:6f:65:2f:68:
         31:d9:d4:d1:b7:60:2b:21:50:5b:28:47:88:6e:8a:7a:1d:06:
         42:3e:40:fe:19:60:6f:29:ec:79:8f:92:2a:65:af:78:68:b9:
         b2:a6:2e:7d:8f:16:2b:c9:68:d1:30:fc:92:32:c0:47:d1:40:
         a2:86:14:25:24:4c:b8:75:e0:d5:62:66:8f:38:87:f1:47:35:
         94:63:9d:53:fb:ab:40:e3:79:1a:b8:b7:0f:75:c0:81:1a:57:
         f2:c2:0d:30:5d:ea:e7:fe:69:ef:bb:78:07:a8:a1:01:8c:6d:
         e0:c7:28:6e:49:d9:4c:13:f2:94:95:0e:63:21:c7:42:f8:fa:
         ef:32:22:e8:26:b3:af:c7:ee:62:a3:78:23:ce:36:59:a3:cb:
         fe:5b:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:24 2026 by rpki-client