Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1F68F50DC7B11EE99243467C4F9AE02.roa
File:                     D1F68F50DC7B11EE99243467C4F9AE02.roa (raw, json)
Hash identifier:          RjcwKw8uq+4vxzTSqKSo0AMVOMrQw+1FZTsAkjwEFrk=
Subject key identifier:   27:91:A1:45:B8:C5:A8:32:FE:CA:AC:0A:EA:D6:44:F4:4C:C2:59:71
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E481
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1F68F50DC7B11EE99243467C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:54:24 +0000
ROA not before:           Sun 31 May 2026 16:54:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136314
IP address blocks:        103.215.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58497 (0xe481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:54:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c67bf-66e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:de:91:8c:41:d2:66:57:03:f3:2d:97:e5:
                    5a:ba:3e:fc:a5:85:15:64:b6:10:3f:80:f4:d6:c3:
                    af:b3:49:68:86:e7:9d:e9:dd:81:a4:1f:15:62:71:
                    02:94:7e:1f:1c:b9:94:cb:1a:b5:f8:0b:b9:e0:89:
                    9c:82:f7:6f:43:ee:a3:a8:4a:9e:eb:00:55:6f:bd:
                    90:a3:98:e7:4a:cf:1f:74:25:d8:60:df:e4:93:23:
                    63:63:b9:c0:b1:69:5a:5b:72:ae:84:61:99:f3:18:
                    25:d1:74:bb:1e:45:86:50:8f:f3:8c:22:11:48:67:
                    24:70:67:0c:6f:bd:8a:a1:67:cf:22:08:78:da:32:
                    5d:d7:7e:a2:04:88:8a:54:58:6a:78:e1:de:ed:04:
                    1a:cc:9c:e2:06:95:e6:b9:c0:c9:d5:cf:77:d1:e7:
                    76:eb:3a:de:f9:cf:33:1e:f8:81:bc:87:17:90:cd:
                    e1:2c:f2:59:b0:fc:16:dd:7c:be:be:e8:3c:98:69:
                    bc:22:40:e3:9a:00:73:1f:5b:0c:8e:9e:31:c2:33:
                    31:3b:f6:39:2f:ec:35:4a:f9:cb:eb:81:ed:5b:1b:
                    c9:cb:d4:ce:85:a7:29:d5:4d:40:22:87:ef:35:c0:
                    05:dd:f6:e6:2f:d6:ef:e7:d3:b1:72:ec:b7:e0:f1:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:A1:45:B8:C5:A8:32:FE:CA:AC:0A:EA:D6:44:F4:4C:C2:59:71
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1F68F50DC7B11EE99243467C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:e1:3a:c2:e8:19:ba:e5:c4:3c:8a:2d:6b:f4:8a:b8:b6:3f:
         55:77:6b:43:af:7e:90:19:c9:3f:e7:6c:b1:0f:20:57:b6:9b:
         6b:6e:0c:db:ba:94:1e:63:9e:d3:a8:63:4b:ff:f5:aa:e7:4e:
         9b:e5:1d:ba:f8:2a:6b:60:36:41:5c:f8:8b:41:be:c0:b0:2c:
         9b:64:60:a0:98:9f:36:6b:9d:43:55:0e:74:9b:75:ea:37:c4:
         db:60:e6:37:cc:05:78:cb:13:56:df:27:ae:d1:48:4e:54:b6:
         59:5c:34:3c:44:e1:2b:8c:e0:39:64:6e:d1:1f:b7:b8:3c:b5:
         dd:de:4c:02:18:2c:cf:be:50:2c:13:34:71:7d:94:62:04:17:
         b4:f8:57:17:29:16:67:d4:fd:ba:61:5a:2d:16:a6:f7:50:47:
         ee:57:2a:bc:42:48:c8:12:cf:d3:60:99:10:85:0a:61:cf:71:
         56:f1:e2:6f:d0:41:bd:e9:3f:cc:02:7b:42:07:31:e4:e9:89:
         08:5f:ac:57:2a:d6:c7:f5:10:70:8f:35:9e:fd:d5:49:35:b7:
         84:d9:b6:97:ae:3d:95:ee:6b:38:f8:61:96:df:d6:14:aa:d9:
         68:4c:05:58:19:2e:c8:01:23:e1:fa:c5:6a:d8:c6:f9:ef:80:
         a7:e5:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:45 2026 by rpki-client