Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7561AC21E8611F0A16A566AC4F9AE02.roa
File:                     C7561AC21E8611F0A16A566AC4F9AE02.roa (raw, json)
Hash identifier:          YapxDMK1yCcu+sh8rx8Z1Auslwzv0zLqk3WfKeZAbBo=
Subject key identifier:   C1:B9:FF:72:3E:1B:A3:3E:86:73:84:DD:DF:92:AA:6C:FB:1F:A7:AA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E6A2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7561AC21E8611F0A16A566AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:12:15 +0000
ROA not before:           Sun 31 May 2026 17:12:14 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140201
IP address blocks:        103.155.40.0/23 maxlen: 24
                          103.160.238.0/23 maxlen: 24
                          103.217.249.0/24 maxlen: 24
                          2001:df1:cbc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59042 (0xe6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:12:14 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6bee-1f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:b5:2d:31:1a:d6:24:99:69:ff:54:4f:cc:
                    5a:09:c2:03:cc:dd:ae:9c:a1:32:81:c7:c6:18:86:
                    e1:11:4c:6c:b5:ad:39:c8:b9:27:96:bf:8d:1d:6b:
                    9f:38:05:10:82:70:7a:c2:aa:4c:ab:60:cc:a2:20:
                    10:04:9c:19:f3:6c:54:45:a2:87:6f:2f:8e:79:d0:
                    a0:5a:d3:82:81:40:61:86:d0:1e:8c:f3:e4:11:99:
                    50:74:62:fc:5a:e6:f3:0e:40:56:e5:b3:08:e3:dd:
                    87:e6:11:8f:92:95:f1:1e:5a:26:dc:6d:e8:67:3d:
                    a5:20:41:ef:09:dc:bb:ee:8e:30:f7:dd:42:a6:18:
                    19:43:a8:7e:d6:3f:8f:1c:81:c1:39:f3:32:3b:98:
                    21:ea:53:c0:0f:34:39:dd:f8:be:87:b3:70:ad:62:
                    a2:fd:f9:c2:6d:4d:28:d8:2f:52:68:81:77:5a:78:
                    5c:f0:02:87:81:ae:7e:bc:1d:eb:73:7f:64:d7:34:
                    27:6b:1f:fe:40:96:8c:7b:38:b0:34:ac:d9:00:ed:
                    bc:36:fa:c4:6e:08:2d:32:ef:11:25:fc:0a:a3:3c:
                    cb:40:a8:43:ca:5e:44:cf:d4:b8:fa:0a:31:fb:c2:
                    06:6b:09:76:45:06:f2:3f:db:d0:7a:c9:01:b1:a1:
                    0d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B9:FF:72:3E:1B:A3:3E:86:73:84:DD:DF:92:AA:6C:FB:1F:A7:AA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7561AC21E8611F0A16A566AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.40.0/23
                  103.160.238.0/23
                  103.217.249.0/24
                IPv6:
                  2001:df1:cbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:74:15:bd:be:5b:6d:26:51:21:c6:27:91:60:48:47:bf:ca:
         49:5a:a4:b0:c6:c9:62:d7:b0:27:15:0a:94:61:9d:03:4b:3a:
         2e:b9:28:74:a7:19:9b:f8:f4:0e:98:1e:23:d1:f7:8b:b7:e1:
         04:5a:18:d8:a8:3f:20:a8:62:7b:fc:79:a4:81:54:0f:ff:59:
         ef:75:6e:07:2b:31:63:cb:66:e5:ee:d8:42:36:df:f4:4c:70:
         f6:3d:cc:02:c9:ac:e1:2a:5e:a6:87:4c:51:2f:44:f6:c6:b3:
         7c:48:46:3c:44:75:3d:48:26:fb:18:8e:b0:12:b7:fb:80:c4:
         f6:9c:89:fe:f3:96:4a:1a:53:c3:33:d9:f5:f3:60:6d:a6:63:
         c4:1c:9c:87:75:71:60:a9:c5:20:41:27:63:1e:c5:44:b4:72:
         3c:23:01:4d:b2:47:9c:bd:cf:e8:f8:34:2d:0c:97:12:1f:1f:
         82:02:9a:1d:83:8b:62:2f:0f:a1:76:f0:ea:42:ce:25:41:e6:
         01:1b:cc:70:f0:a2:a7:29:82:03:31:cb:8c:45:68:ca:bd:de:
         3f:8a:ef:87:0f:31:8e:bd:f1:1e:37:0c:e9:5f:b4:e3:3b:16:
         03:bf:e9:72:2d:7f:3f:db:a9:92:71:32:4d:ae:42:d0:f3:3a:
         35:46:92:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:13 2026 by rpki-client