Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
File:                     D419127E7F8F11EE8E122B28C4F9AE02.roa (raw, json)
Hash identifier:          hExTqXNFvmVabmM88BaQzWADAo02VJdZxfdssrMXdFc=
Subject key identifier:   B3:37:59:B7:D7:50:A7:52:FD:A1:A6:2B:44:1C:F8:15:BC:33:42:C2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E61A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:07:35 +0000
ROA not before:           Sun 31 May 2026 17:07:35 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138798
IP address blocks:        103.79.100.0/24 maxlen: 24
                          103.79.102.0/24 maxlen: 24
                          103.117.219.0/24 maxlen: 24
                          103.135.201.0/24 maxlen: 24
                          103.135.202.0/24 maxlen: 24
                          103.135.203.0/24 maxlen: 24
                          103.141.116.0/23 maxlen: 24
                          103.160.237.0/24 maxlen: 24
                          103.174.140.0/23 maxlen: 24
                          103.181.92.0/24 maxlen: 24
                          2001:df6:5280::/48 maxlen: 48
                          2407:35c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58906 (0xe61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:07:35 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ad7-e1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:f3:d2:87:1a:09:ac:17:97:0f:ef:5e:4d:
                    0c:a1:c0:43:01:88:4a:88:59:84:0c:7f:e7:f9:e2:
                    42:81:b4:12:f2:69:45:67:8e:51:73:7a:87:c1:ed:
                    a6:d3:0f:4a:9a:36:be:66:15:0c:51:7b:a2:6a:3d:
                    fe:1b:41:53:07:9f:81:41:5d:e8:13:31:b3:ba:60:
                    7f:fa:1c:d0:e1:51:29:cd:eb:92:29:fc:57:f6:a0:
                    95:4b:bd:60:95:35:81:c5:2b:60:75:a2:cf:cd:b4:
                    35:c8:11:ef:06:b9:e1:b0:b2:5a:2d:13:60:df:22:
                    b0:cd:71:43:4a:bb:c1:f9:cc:b1:ff:9e:18:bc:86:
                    55:7d:ba:5b:c0:de:a5:c1:e3:a1:8f:6f:a1:c4:1f:
                    fb:6f:e0:3f:e0:e7:e8:32:7b:be:4d:c1:4f:5f:d6:
                    c2:11:22:5c:4d:9a:94:36:49:58:6b:4e:1d:39:13:
                    44:b6:32:61:04:46:f4:29:80:1a:b6:6d:39:e6:b0:
                    c4:33:16:ea:63:87:7a:f8:fa:ad:11:2d:ae:2e:b9:
                    d7:a6:91:73:13:23:0c:f2:44:06:d0:00:27:d0:20:
                    15:7f:49:18:f4:02:fc:c6:f0:8a:1b:e4:0a:c6:64:
                    1b:59:2c:84:c6:a0:02:3e:2a:76:54:61:05:09:2d:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:59:B7:D7:50:A7:52:FD:A1:A6:2B:44:1C:F8:15:BC:33:42:C2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.100.0/24
                  103.79.102.0/24
                  103.117.219.0/24
                  103.135.201.0-103.135.203.255
                  103.141.116.0/23
                  103.160.237.0/24
                  103.174.140.0/23
                  103.181.92.0/24
                IPv6:
                  2001:df6:5280::/48
                  2407:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:94:42:db:2e:10:95:ba:1a:fb:ec:ad:76:cf:72:cf:ee:50:
         0a:46:79:43:b8:30:76:6b:48:5a:a9:e1:48:a3:d9:aa:4f:a3:
         64:7f:c1:a5:e1:b7:1a:a4:3f:f8:78:82:db:59:5c:3e:15:13:
         94:58:f2:54:16:e0:8d:94:3e:cc:81:1b:26:82:17:75:10:d9:
         da:1e:de:7a:42:52:a0:5f:4e:eb:60:f3:f8:32:ac:8b:58:8d:
         ab:3e:2f:20:8e:c7:f0:d2:22:e7:e7:39:e7:f6:40:86:91:bc:
         93:81:b1:3e:a7:c1:ff:f8:8f:ad:5d:98:8f:39:75:dc:5c:2d:
         03:aa:0a:42:76:70:b0:c0:43:fa:2b:0c:f3:ed:a5:ea:be:e8:
         bc:77:af:0f:b5:df:89:a1:1b:37:8c:2f:18:96:98:54:55:5c:
         e0:af:fd:a9:f4:03:b4:2f:69:c7:a9:cf:83:f9:0c:97:c8:86:
         b7:7d:bd:ba:b5:7d:bb:d0:47:58:94:5a:46:d6:83:11:32:1f:
         55:0c:40:ae:0e:f4:9c:51:74:4a:1a:f9:5c:4f:bd:5d:a2:f7:
         47:a6:03:a2:e8:07:c8:39:5a:6b:52:f0:16:26:c2:46:4b:72:
         98:87:d2:d5:fe:bb:7c:be:5e:57:c4:2d:49:6e:7d:db:8e:cf:
         22:11:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:07 2026 by rpki-client