Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C9271AC02E3711EBA4D3163FC4F9AE02.roa
File:                     C9271AC02E3711EBA4D3163FC4F9AE02.roa (raw, json)
Hash identifier:          KUa0IhbNQ+UEphlVCVRBff1MyGNvtEO7+awMGXXcp7U=
Subject key identifier:   21:DA:23:89:F0:67:09:5E:22:67:05:46:78:BA:3A:23:E2:F8:72:B0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E52B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C9271AC02E3711EBA4D3163FC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:59:47 +0000
ROA not before:           Sun 31 May 2026 16:59:47 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137132
IP address blocks:        103.110.168.0/24 maxlen: 24
                          103.110.169.0/24 maxlen: 24
                          103.110.170.0/24 maxlen: 24
                          103.110.171.0/24 maxlen: 24
                          103.135.168.0/24 maxlen: 24
                          103.135.169.0/24 maxlen: 24
                          103.135.170.0/24 maxlen: 24
                          103.135.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58667 (0xe52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:59:47 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6903-4f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:db:01:c3:9c:26:c3:34:46:f7:f8:ed:3f:
                    7d:83:28:0c:1b:4b:39:76:01:be:b4:a4:98:16:89:
                    da:3e:01:33:07:3f:49:e2:63:c9:c8:73:40:d6:ee:
                    ed:3a:07:7d:5b:c3:58:ac:07:f5:00:15:01:b7:62:
                    b4:20:16:d2:45:d0:ad:11:cf:31:14:dc:a7:f7:72:
                    ed:e5:57:9c:92:da:b6:10:3d:9d:20:41:c8:9e:23:
                    76:63:46:ae:a3:2a:33:02:ce:16:ff:c0:3b:1b:8c:
                    85:5a:16:b0:09:2c:41:62:19:0e:5e:99:06:43:b7:
                    28:c6:e8:09:fc:ee:c9:ac:de:9f:b2:64:da:fc:01:
                    b3:a1:e2:5a:b7:99:cc:34:49:99:64:9a:82:e7:55:
                    9b:2b:87:77:de:11:da:c9:cb:66:d9:0f:f8:82:51:
                    bf:0f:1b:1d:18:c8:b4:91:3c:5d:ee:99:d2:0f:fd:
                    2e:7d:ce:cb:81:55:b3:5b:d5:31:6b:de:30:86:bd:
                    bf:cc:fa:3d:ad:fc:de:87:79:80:d6:f8:1f:92:78:
                    0a:b7:c5:e9:85:30:3b:7d:b8:2e:76:19:a8:4c:34:
                    28:07:9c:26:8a:3b:ec:7a:0e:68:ad:b8:37:ae:e5:
                    cd:13:91:48:3c:7e:01:76:f9:a7:99:8c:ea:53:da:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DA:23:89:F0:67:09:5E:22:67:05:46:78:BA:3A:23:E2:F8:72:B0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C9271AC02E3711EBA4D3163FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.168.0/22
                  103.135.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:35:16:2d:e4:47:ab:45:b1:cb:37:b5:78:e6:d5:e2:5c:
         20:a9:5b:89:dd:8f:da:f8:5e:6e:e6:4f:37:f5:54:4c:16:e8:
         1b:ce:3d:f5:fd:22:a6:d3:71:df:15:ea:f9:5b:e5:36:7e:1f:
         4f:50:e1:ed:d4:8a:c3:9f:03:af:04:ef:5c:64:2b:a7:34:4a:
         02:0f:71:4a:59:05:e6:91:02:f6:8c:8a:10:e5:b1:c6:23:36:
         27:b9:81:22:39:50:09:ea:9e:69:71:f8:c7:3d:e3:ad:dc:f1:
         da:0f:1e:96:eb:40:27:73:57:c9:58:d6:1a:ac:60:dd:5e:d5:
         10:66:72:62:28:7d:b9:44:b6:a0:04:a6:55:ba:95:53:ea:88:
         0c:ac:4c:b9:4d:26:95:6d:61:05:32:0a:f2:5d:30:59:22:ce:
         c9:7d:eb:46:dd:bd:15:0e:f4:c4:f8:29:ba:f1:21:f8:2c:f7:
         dc:7e:b7:f0:03:41:3f:df:db:d1:a5:34:55:37:c6:53:8f:94:
         83:91:0c:27:e4:b8:24:cd:c4:80:aa:00:2c:1c:99:2c:d6:e3:
         f5:22:a3:94:11:64:1a:4f:6a:89:1d:6b:7c:65:7e:86:de:7c:
         c7:01:36:a6:30:11:15:1c:b9:be:90:4b:1d:2a:53:f0:46:b5:
         bc:50:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:53 2026 by rpki-client