Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E077B82AE811EE941D9B2AC4F9AE02.roa
File:                     D2E077B82AE811EE941D9B2AC4F9AE02.roa (raw, json)
Hash identifier:          qzlR7OMnCfZ8Fg34OBcJG0cL5Yr8PsGmSNWh6uDlRbM=
Subject key identifier:   CF:FC:16:D1:5E:2F:32:05:29:64:20:89:F0:51:C2:D9:29:92:C3:66
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8A8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E077B82AE811EE941D9B2AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:29:11 +0000
ROA not before:           Sun 31 May 2026 17:29:11 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149272
IP address blocks:        103.181.102.0/24 maxlen: 24
                          103.181.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59560 (0xe8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:29:11 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6fe6-0533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:9c:c4:43:c9:5b:19:31:de:f1:12:8e:fb:
                    aa:6e:fd:8c:55:0f:fb:6d:3d:77:e5:99:d4:fe:9c:
                    32:f3:5a:67:91:1b:62:cb:89:68:ef:90:9c:5d:fc:
                    7f:8d:1c:70:a5:41:29:9e:65:67:94:a7:29:51:c1:
                    62:0c:a4:3f:e6:80:9e:91:00:ae:9d:2e:a0:33:fd:
                    fa:8d:af:64:0d:19:b4:14:85:c4:3b:ad:07:fc:1e:
                    af:43:f2:32:de:d6:e4:65:f2:f2:04:40:09:96:61:
                    87:08:ed:e0:43:95:4c:43:9d:13:9d:b5:33:d9:af:
                    bb:bc:3f:6c:a7:e3:22:dc:2b:3b:a2:c0:84:ec:4a:
                    8c:77:b7:46:90:37:7a:86:e0:1f:c7:b4:90:a9:d1:
                    c3:17:4c:eb:c4:a9:bb:41:4b:2b:bc:c6:05:e2:da:
                    34:1a:4e:11:99:fd:fb:a0:87:2c:e7:a1:94:f3:3f:
                    b7:6e:db:42:f5:b5:00:cd:3a:08:cb:a6:4a:71:70:
                    ee:24:7e:a8:b5:4d:6e:c9:eb:f7:ee:48:7c:62:5e:
                    35:53:16:80:f6:17:e4:70:da:98:b0:5a:05:ec:3a:
                    59:6b:37:b5:0a:74:53:ec:67:45:4e:ec:df:03:85:
                    03:8f:b4:1f:f5:1a:fd:a1:07:ab:14:8d:60:43:27:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FC:16:D1:5E:2F:32:05:29:64:20:89:F0:51:C2:D9:29:92:C3:66
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E077B82AE811EE941D9B2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:bb:0a:f2:60:dd:5d:c5:0f:e7:d5:d0:ca:97:56:e7:4a:
         09:e2:58:57:9d:0e:f1:0b:84:f0:a7:55:80:87:65:9e:ea:61:
         23:b6:92:f2:3d:c0:a6:e3:d7:29:5e:70:1f:28:c8:57:ea:e6:
         2f:74:19:68:2a:99:c6:c4:dd:79:a1:5b:85:49:d3:eb:22:c3:
         37:10:ac:ec:e0:f2:23:ec:3c:32:3e:b2:03:18:bc:39:26:6f:
         eb:f3:ac:99:de:a5:88:f6:d0:16:b3:03:53:2a:c3:16:cf:44:
         50:16:15:ca:0c:57:b7:38:50:90:a8:b2:6c:5d:e6:72:d9:14:
         8b:6f:60:09:39:db:39:72:97:6d:9d:a2:af:07:2a:a1:57:2b:
         94:6c:1f:48:75:72:0b:4a:01:b5:5c:09:4e:d9:1b:26:5e:0a:
         98:c4:af:1e:31:ba:0b:12:0c:a1:89:84:70:03:ac:02:2c:bb:
         03:31:a7:15:f9:1a:e2:f5:e9:0f:85:63:b0:58:7b:a7:cf:b2:
         03:63:e4:fb:1e:5c:37:26:24:5b:f1:51:aa:82:03:57:f0:a2:
         3d:c3:6a:ef:16:81:41:d4:fe:05:b9:1e:e0:d5:e3:d6:bf:ae:
         c0:5d:e0:72:30:de:d6:51:be:1c:3a:58:07:66:dc:57:c2:a0:
         9d:89:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:12 2026 by rpki-client