Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE3B92003C2311EEA8267557C4F9AE02.roa
File:                     CE3B92003C2311EEA8267557C4F9AE02.roa (raw, json)
Hash identifier:          dp8ic8rYgjZBj/YvtGcK5/hXcEaSs2D4iw9YVmMCVdI=
Subject key identifier:   E3:9B:6C:3E:AD:F9:FD:2F:8B:A7:75:54:7F:58:02:76:58:03:BD:B9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E805
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE3B92003C2311EEA8267557C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:23:36 +0000
ROA not before:           Sun 31 May 2026 17:23:36 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     146922
IP address blocks:        103.171.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59397 (0xe805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:23:36 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e98-b9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:0c:23:8b:3e:3e:1d:c6:63:25:cd:2b:23:
                    38:3f:f1:0d:60:db:2b:05:69:2e:ee:21:e1:c7:16:
                    72:b0:4f:8a:5f:f9:61:3a:07:3a:e9:47:ce:65:88:
                    8b:36:75:ee:3d:f6:f3:d0:83:11:e7:3a:9f:16:b6:
                    11:72:ed:31:33:e6:f2:f5:52:ed:c3:c2:d0:84:6a:
                    80:e4:e7:f4:dc:e4:13:31:65:a6:4b:66:97:de:83:
                    42:5a:99:3f:d6:db:9f:39:00:63:76:4c:44:53:f9:
                    b3:89:39:6d:14:d1:ab:a4:ea:47:03:42:93:b7:85:
                    44:3b:01:27:7e:fc:9a:65:df:7b:62:7d:3a:06:55:
                    6b:52:e0:4e:9d:fc:4e:3f:7c:94:70:11:8b:7e:8a:
                    22:ef:b0:70:56:5d:3c:85:6d:a9:54:44:6c:e4:84:
                    f9:ac:fc:c5:f5:a0:4b:11:98:99:0c:6d:f4:35:ee:
                    82:ee:52:e4:51:ba:33:27:a9:3d:04:e5:98:92:6c:
                    73:df:ad:d4:0d:6f:e0:73:e2:71:02:4e:57:ba:90:
                    02:f4:ee:13:33:84:8c:19:60:bd:8c:f6:9d:c0:8f:
                    01:ab:74:a4:5c:79:54:d5:99:ab:33:44:8f:3c:fe:
                    c9:cc:1c:ce:89:49:7a:e2:4e:a1:b6:bf:8a:2c:6d:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9B:6C:3E:AD:F9:FD:2F:8B:A7:75:54:7F:58:02:76:58:03:BD:B9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE3B92003C2311EEA8267557C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:94:cd:12:17:50:04:fd:e9:e7:9a:44:60:cb:63:f6:20:
         6e:03:a1:9e:e5:ea:d4:5d:80:5e:cc:64:91:51:9b:15:0d:8c:
         0e:10:2f:a6:90:cd:73:5b:1e:ed:ac:12:f1:23:79:1b:79:bf:
         0d:96:da:d5:fb:70:5c:cb:73:68:89:5c:99:a6:e9:91:34:04:
         3b:12:85:f5:f2:06:a3:57:78:d9:fa:96:ec:90:5f:f8:36:80:
         e8:75:dc:cb:a6:d1:b5:df:75:b3:8c:cb:00:5b:78:ef:d9:fc:
         87:9c:cd:0f:89:ab:f7:4f:cb:c0:72:ad:66:35:bf:84:a7:94:
         81:c7:0a:1c:b5:7a:93:f1:7d:f2:c9:39:22:cd:9e:02:e0:5e:
         03:16:a9:ae:d9:00:bd:97:c6:13:b1:ab:c7:52:2c:ed:20:4d:
         52:63:0e:78:c6:b3:e4:2b:e5:35:8a:4a:12:ad:21:c9:ed:a1:
         5c:f2:48:8d:e8:a4:97:3d:78:d0:e4:d4:11:1f:1f:98:d5:81:
         a9:28:39:49:8d:66:3d:6c:37:89:4a:e3:2e:c3:be:b8:8a:98:
         0c:e2:0b:b5:f3:17:6d:c1:90:db:52:28:49:5f:f2:63:78:51:
         c6:02:15:05:4b:2b:a4:6e:33:32:c7:83:8c:32:2d:18:4a:4d:
         73:aa:f9:69
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOgFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjMzNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZlOTgtYjliOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMoIDCOLPj4dxmMlzSsjOD/xDWDbKwVpLu4h4ccWcrBPil/5YToHOulHzmWI
izZ17j3289CDEec6nxa2EXLtMTPm8vVS7cPC0IRqgOTn9NzkEzFlpktml96DQlqZ
P9bbnzkAY3ZMRFP5s4k5bRTRq6TqRwNCk7eFRDsBJ378mmXfe2J9OgZVa1LgTp38
Tj98lHARi36KIu+wcFZdPIVtqVREbOSE+az8xfWgSxGYmQxt9DXugu5S5FG6Myep
PQTlmJJsc9+t1A1v4HPicQJOV7qQAvTuEzOEjBlgvYz2ncCPAat0pFx5VNWZqzNE
jzz+ycwczolJeuJOoba/iixthUUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTjm2w+
rfn9L4undVR/WAJ2WAO9uTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NFM0I5MjAw
M0MyMzExRUVBODI2NzU1N0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGerrDANBgkqhkiG9w0BAQsFAAOCAQEAZ6SUzRIXUAT96eeaRGDL
Y/YgbgOhnuXq1F2AXsxkkVGbFQ2MDhAvppDNc1se7awS8SN5G3m/DZba1ftwXMtz
aIlcmabpkTQEOxKF9fIGo1d42fqW7JBf+DaA6HXcy6bRtd91s4zLAFt479n8h5zN
D4mr90/LwHKtZjW/hKeUgccKHLV6k/F98sk5Is2eAuBeAxaprtkAvZfGE7Grx1Is
7SBNUmMOeMaz5CvlNYpKEq0hye2hXPJIjeiklz140OTUER8fmNWBqSg5SY1mPWw3
iUrjLsO+uIqYDOILtfMXbcGQ21IoSV/yY3hRxgIVBUsrpG4zMseDjDItGEpNc6r5
aQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:07 2026 by rpki-client