Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C93495902A4711F0A7BFC73CC4F9AE02.roa
File:                     C93495902A4711F0A7BFC73CC4F9AE02.roa (raw, json)
Hash identifier:          1GHa8FxvbuQw2Hu0yFPJojx1gzSp3wS24z2UxzvFfys=
Subject key identifier:   8B:55:EE:F1:B6:A4:65:55:B0:FB:E2:96:F5:AF:18:0A:07:EF:AF:C8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E846
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C93495902A4711F0A7BFC73CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:25:58 +0000
ROA not before:           Sun 31 May 2026 17:25:58 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     147255
IP address blocks:        103.163.130.0/23 maxlen: 24
                          103.176.172.0/24 maxlen: 24
                          2001:df0:1240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59462 (0xe846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:25:58 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6f26-da0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:06:09:9c:74:70:fc:f2:21:5b:0e:5f:ef:
                    44:d7:68:eb:ea:56:88:b8:dc:0c:81:d5:89:72:c0:
                    f2:14:f7:41:2e:67:9c:b6:90:54:fa:51:fa:ae:17:
                    1e:e5:d8:b5:1b:a0:d2:bb:81:de:2f:4d:21:5f:40:
                    cb:4c:fb:4c:27:5b:a4:2c:ea:77:b6:f6:16:4a:92:
                    9f:69:7e:7e:ff:3c:76:64:45:db:e1:e7:ae:b3:28:
                    7f:b8:69:b9:58:86:6c:73:54:38:9d:73:48:21:db:
                    81:d2:8d:84:82:3b:57:25:f2:bd:8d:ec:e2:89:67:
                    b1:5b:f0:79:13:a7:90:0c:f2:aa:9b:ce:72:ea:21:
                    40:de:41:7a:e4:3a:01:bb:4e:46:9e:08:2a:b7:21:
                    97:aa:2f:d4:fb:dc:54:c9:28:c0:f1:2a:14:0b:92:
                    ea:b4:dc:57:c4:fa:ad:ff:e4:e8:66:84:33:f7:f4:
                    15:df:96:62:c9:da:d1:64:03:aa:9e:4b:cb:6e:28:
                    e6:06:31:4a:ea:73:d8:4d:7a:30:aa:ea:02:f1:89:
                    94:e6:01:79:da:f6:91:a2:ae:a7:31:4c:33:ee:e5:
                    f9:c4:22:8a:3a:12:bf:9e:2b:8a:65:df:d5:7d:32:
                    2f:35:cd:d6:42:ca:11:a8:1d:11:55:62:4e:c7:3a:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:55:EE:F1:B6:A4:65:55:B0:FB:E2:96:F5:AF:18:0A:07:EF:AF:C8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C93495902A4711F0A7BFC73CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.130.0/23
                  103.176.172.0/24
                IPv6:
                  2001:df0:1240::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:ab:f5:01:87:0d:7c:fa:79:72:35:8b:5b:e9:e0:72:37:
         00:17:34:6e:bf:78:93:58:62:65:c1:19:26:0f:cf:ad:e3:09:
         f8:a4:b8:fe:77:d9:f7:18:d7:ab:76:b0:29:87:74:d3:86:45:
         a2:d1:85:df:a1:b3:8a:18:b7:f7:45:b4:3e:bf:9b:c3:2e:d5:
         e7:d9:37:97:9a:75:b9:9f:76:d7:f5:d2:fb:6c:9f:4e:7a:1b:
         97:28:4c:87:10:26:11:7f:61:7f:db:56:ed:b0:ee:57:b6:67:
         14:20:a6:45:51:b6:59:81:88:95:91:57:c4:fd:f3:f1:38:8c:
         a3:36:20:43:32:2a:2f:59:f3:db:61:46:c6:c3:5f:86:04:42:
         fe:2d:d7:dd:2c:5c:21:b0:48:b6:42:c5:8d:d5:f5:60:d9:0f:
         e9:05:e5:bc:24:7c:18:13:2d:d9:f2:44:14:43:0b:57:0a:1d:
         3f:58:fc:22:6f:a4:e1:3e:20:26:05:ee:40:32:e6:c2:47:05:
         42:36:9a:e1:f1:75:88:e7:91:92:b0:50:30:c2:86:16:bd:1b:
         89:a5:66:d7:68:f7:cb:94:d9:78:f6:87:0b:38:23:bd:b5:97:
         e2:56:97:21:be:48:e0:63:d6:e6:36:64:4d:89:b2:8f:88:07:
         bc:5e:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:21 2026 by rpki-client