Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa
File:                     C3C794CCE22611EFBBF69E1FC4F9AE02.roa (raw, json)
Hash identifier:          5mXIuC/658ME3HBbC7Xn+oAeuRVNOVH2Y5DqAzWWlo4=
Subject key identifier:   EE:A4:5F:A9:88:23:52:78:17:07:3F:C5:50:0D:27:DF:6B:7B:7B:FC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E75F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:18:19 +0000
ROA not before:           Sun 31 May 2026 17:18:19 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141826
IP address blocks:        103.167.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59231 (0xe75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:18:19 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6d5b-5459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:d9:3f:1d:de:51:a4:80:26:6e:02:95:1b:
                    28:52:0c:d1:93:bc:99:3f:e8:cb:67:9a:d5:4d:93:
                    2d:7e:02:88:5d:10:cd:02:3b:f3:83:7c:38:fa:7b:
                    b6:aa:7c:1b:df:13:aa:81:62:60:e4:4d:bf:ce:55:
                    69:66:d6:fb:2e:04:cf:2a:b7:9a:95:bb:7b:02:65:
                    32:58:94:3c:26:c3:53:2d:4f:c4:ba:5b:43:f3:05:
                    85:7f:11:d6:6d:4b:9f:16:03:d7:22:ef:66:c3:9f:
                    c2:e0:da:f9:01:ff:f7:8f:16:72:b3:24:0d:4e:7d:
                    ba:cc:1b:1a:61:13:59:0e:93:c7:71:1b:7a:49:ac:
                    d2:87:93:2d:79:e0:f4:81:8e:52:72:b0:eb:38:87:
                    c6:86:e5:bc:be:aa:52:f9:31:46:4f:aa:4f:78:19:
                    8d:46:55:9f:3f:54:ff:14:02:30:87:6d:29:58:7a:
                    02:22:e7:01:8a:c7:4c:d1:91:9b:96:3b:08:98:b7:
                    06:3e:8a:49:ce:e5:6c:ac:68:2d:b0:6b:ff:59:b6:
                    79:f8:c4:28:87:4d:6f:e5:ac:ac:78:b6:d7:56:97:
                    df:9f:f6:6c:cd:8f:fc:35:a4:d0:79:76:23:2f:79:
                    1e:8b:e2:4d:ef:89:5a:3d:d3:ff:b5:fc:5f:d0:fa:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:5F:A9:88:23:52:78:17:07:3F:C5:50:0D:27:DF:6B:7B:7B:FC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:bc:bf:64:c2:bb:4c:9d:f6:06:40:c6:6e:df:e1:6b:68:
         22:ae:dc:9f:f8:80:9a:59:03:5c:0e:3e:09:81:f0:f7:fe:22:
         ae:11:50:85:02:28:33:c8:79:80:87:e8:8e:5e:03:50:f4:f5:
         87:56:af:d0:a5:ad:f2:35:38:32:a3:b7:73:49:3b:a9:48:f1:
         95:ac:fc:1c:e8:61:32:73:9a:14:6f:96:ba:6e:02:1d:f4:de:
         b1:a6:20:e2:8a:3f:bf:c7:9d:66:b1:b5:20:8f:b2:84:45:c5:
         e5:79:3f:79:37:e0:91:25:4f:39:38:d8:2d:9b:c1:dc:19:3c:
         58:c7:45:91:06:8a:a3:be:2b:5c:a1:8b:dc:58:a6:0c:71:b3:
         e6:94:de:6f:27:85:98:8b:25:7b:60:c3:e1:98:de:c7:a2:47:
         c9:b7:83:fb:99:b4:54:14:76:28:c0:48:5f:1d:5f:3b:d7:c8:
         02:3d:86:8a:2c:bc:8d:42:80:25:dc:ab:6d:3c:e7:51:7d:1b:
         57:6c:e2:e8:c8:d9:b9:86:a5:18:ab:6b:7a:05:62:ef:46:3a:
         03:70:fb:3d:65:1d:bd:32:e6:b4:1a:40:7a:65:cb:d5:d0:52:
         d6:f3:b9:d5:57:f8:63:2f:ad:9a:e9:07:a0:72:7a:7b:0a:ce:
         ad:f1:00:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:38 2026 by rpki-client