Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7D0A6A83B1111ED8383933FC4F9AE02.roa
File:                     C7D0A6A83B1111ED8383933FC4F9AE02.roa (raw, json)
Hash identifier:          jVO/kPY528HAnuHuDfxQhNrQ9X7xJqpuyQw8P+Pbie8=
Subject key identifier:   67:4E:35:51:7A:F6:97:81:54:08:B2:7A:52:D3:64:CF:DD:8C:41:16
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E918
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7D0A6A83B1111ED8383933FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:33:10 +0000
ROA not before:           Sun 31 May 2026 17:33:10 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150040
IP address blocks:        103.67.97.0/24 maxlen: 24
                          103.176.116.0/24 maxlen: 24
                          103.176.117.0/24 maxlen: 24
                          2001:df1:67c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59672 (0xe918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:33:10 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c70d6-5cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:55:77:0e:43:c0:c0:fd:e1:f1:c5:78:78:
                    c2:82:3b:99:7b:d4:55:ba:10:32:e2:e9:c3:cc:0a:
                    3c:58:b6:9a:e4:42:bd:c6:57:6c:91:68:09:61:27:
                    38:7c:d2:40:49:60:36:0a:b3:7b:2d:1f:be:4b:f1:
                    c3:5a:4d:60:be:8b:73:01:2a:36:14:25:eb:64:ed:
                    e3:4b:f4:13:b9:ae:c9:e1:72:ec:6a:18:77:99:7b:
                    e0:f8:01:a8:45:44:58:d0:3d:b3:47:74:7b:65:f4:
                    5f:2a:fd:d7:36:8f:b3:2e:9b:51:f4:d0:1e:b5:d1:
                    88:c0:fa:90:6a:e8:ef:5a:a0:7f:e3:11:83:d9:be:
                    de:37:e1:6a:94:fc:70:7b:e3:da:96:97:00:34:cd:
                    36:f4:b9:ce:8e:72:b6:4b:21:9c:e7:a4:d8:16:77:
                    7e:f7:f1:61:51:2d:11:d7:cf:3a:41:47:e2:d2:1c:
                    8d:59:8d:0f:3d:b8:f2:7a:50:6e:95:65:04:68:16:
                    0e:4c:05:3b:71:eb:33:62:1e:71:89:05:3f:4d:92:
                    55:5e:b2:3d:68:c0:cf:31:e2:93:79:c6:2c:6e:f5:
                    63:6b:06:9a:27:7c:c5:a2:59:7c:89:99:7b:24:73:
                    4c:6a:f9:43:e7:ee:a9:52:79:79:b7:6e:72:8c:08:
                    56:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4E:35:51:7A:F6:97:81:54:08:B2:7A:52:D3:64:CF:DD:8C:41:16
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7D0A6A83B1111ED8383933FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.97.0/24
                  103.176.116.0/23
                IPv6:
                  2001:df1:67c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:18:00:b0:a2:58:ce:b0:6d:c9:4e:6a:1b:e6:9e:56:98:84:
         da:36:d8:2e:e0:6a:f0:6e:4b:d2:9e:e6:b8:20:11:34:c5:86:
         18:ba:7c:4f:6d:a6:ee:55:e6:d6:96:5e:7a:9d:88:3d:fd:88:
         4f:01:a9:b8:c7:b1:e1:bb:5a:89:ae:8c:11:40:cb:03:04:75:
         5a:75:5c:63:34:7f:92:95:a0:16:8c:d1:ed:a1:6a:06:e5:d5:
         a1:20:b0:c1:4d:40:8b:af:72:aa:96:80:42:d3:d7:a9:42:23:
         b9:5b:57:fd:87:d7:9d:48:8b:42:3a:f6:56:9a:f4:96:96:28:
         ad:a7:dd:42:a3:b7:e1:44:46:9f:2d:27:2b:50:68:e5:46:c9:
         12:dc:41:f0:fe:10:6e:94:b4:47:9a:9f:6a:ed:b5:4f:ea:f1:
         68:12:c7:1d:14:ae:15:94:e0:a2:1f:66:01:b3:7c:a5:1a:a4:
         6a:8a:03:78:29:1c:64:df:db:70:dc:22:8c:9a:cb:a4:7f:85:
         2c:7f:15:3a:b0:be:58:a8:f1:55:40:17:d8:c8:1b:22:bd:00:
         97:b6:0d:ce:7a:6b:db:bc:48:dc:cf:61:20:75:6d:3e:3b:40:
         f8:e2:f2:25:f2:aa:a8:fc:d2:ec:5e:64:49:ad:c2:87:5b:4c:
         d3:9e:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:17 2026 by rpki-client