Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C663F2BC43A511EB8DC4923AC4F9AE02.roa
File:                     C663F2BC43A511EB8DC4923AC4F9AE02.roa (raw, json)
Hash identifier:          ijn8BkA5yM3JIPC2V290f5ajUsj3hhCsp1aSTfgyeIc=
Subject key identifier:   BF:5F:6E:32:A0:A4:9B:52:9A:BA:4B:CE:B7:9B:E7:E3:4B:C9:3C:CB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E6F4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C663F2BC43A511EB8DC4923AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:14:52 +0000
ROA not before:           Sun 31 May 2026 17:14:52 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141476
IP address blocks:        103.160.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59124 (0xe6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:14:52 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6c8c-fdfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:36:c7:da:54:59:38:f3:4d:42:70:73:c0:
                    54:1d:85:3e:20:d2:ba:71:93:9f:83:e0:4a:99:d0:
                    45:7e:08:19:f3:73:09:e9:6a:d8:07:98:99:92:6b:
                    b6:a6:a4:0a:d4:aa:77:bc:e4:b5:5f:f7:bc:14:70:
                    88:23:1d:df:6e:11:ee:09:19:9b:b0:0a:7b:e3:46:
                    ad:53:15:55:ce:a9:b0:ee:ed:6d:86:e0:3e:6d:cd:
                    e0:56:50:88:58:7c:7a:b7:79:b5:af:d2:85:22:5d:
                    f2:6d:75:21:d5:6b:5d:d3:b1:f0:1a:12:e1:02:90:
                    9a:4b:b8:c4:e2:29:f7:a5:90:5d:84:f2:cf:84:5e:
                    09:30:e8:79:b7:68:1b:c9:76:a1:0a:d3:6b:1d:78:
                    ea:87:ca:92:53:bc:a4:45:c5:a3:6d:8a:92:0d:87:
                    26:8b:d4:0e:71:a2:74:5f:27:be:5e:6d:a2:25:0a:
                    2b:e9:3f:60:63:72:4f:44:a4:08:5c:9c:52:75:0d:
                    26:ee:2a:07:aa:78:42:5a:5c:90:1f:4b:3f:39:fe:
                    41:07:8c:c4:a6:2a:e7:38:dd:72:18:cb:fc:c9:23:
                    8d:69:82:d4:32:5f:70:3e:02:25:fc:bf:68:aa:43:
                    d7:b9:9b:9c:1b:b8:89:0d:79:b2:38:e4:b8:65:24:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5F:6E:32:A0:A4:9B:52:9A:BA:4B:CE:B7:9B:E7:E3:4B:C9:3C:CB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C663F2BC43A511EB8DC4923AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:90:83:1e:41:d2:c8:81:ac:c9:0f:34:5c:81:76:95:fd:d3:
         4f:dd:9c:eb:cb:ee:10:f4:98:5d:41:1f:1d:69:87:00:89:9a:
         6f:50:26:d4:5c:cd:60:8a:7b:18:48:5f:97:5c:e9:3a:4f:b5:
         3e:f5:2b:31:d8:d3:ad:9f:af:50:1b:46:aa:ed:1e:e7:c9:b1:
         1c:5e:17:c1:50:ba:6f:52:ea:05:6d:1a:2c:4a:7d:9f:70:8b:
         62:21:46:ab:85:10:92:78:81:17:10:bb:9c:52:ae:5a:13:e9:
         c2:2a:54:ae:70:c6:08:45:0b:84:cf:99:bf:c3:d8:1e:10:20:
         46:b8:ce:19:50:53:c8:85:df:0e:e0:36:11:7e:5a:4b:c3:80:
         87:92:75:88:4d:69:83:7c:71:88:ac:c7:7c:3c:9f:f4:9a:64:
         92:ab:7d:a8:66:87:32:fa:8f:49:01:6d:b2:b0:5b:3e:5c:19:
         d1:38:7c:47:a9:c4:1e:3c:df:5b:e4:20:e3:fa:07:d0:7c:57:
         28:49:02:1d:78:0e:c0:2c:bd:13:5f:cd:ad:4c:68:fc:2a:6f:
         5b:04:bd:09:9a:77:65:ea:eb:55:f4:41:92:18:c3:8c:36:28:
         9c:e9:1a:76:28:2b:4a:e2:57:9a:8b:cc:68:94:44:42:b0:e2:
         d2:fd:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:40 2026 by rpki-client