Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D91402748EFB11EC825FAB77C4F9AE02.roa
File:                     D91402748EFB11EC825FAB77C4F9AE02.roa (raw, json)
Hash identifier:          AWDgeFLFPg8qm36LFrq/i1WwYA/6V3jdgsvV5ptFOX8=
Subject key identifier:   80:DC:C8:85:69:EB:1B:EC:04:D5:8E:A8:31:03:7B:54:0C:2A:15:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E88E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D91402748EFB11EC825FAB77C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:28:16 +0000
ROA not before:           Sun 31 May 2026 17:28:16 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149234
IP address blocks:        103.181.166.0/23 maxlen: 24
                          2400:5aa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59534 (0xe88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:28:16 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6fb0-65ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:e0:24:d6:9c:91:c0:97:40:5b:94:27:1b:
                    22:2b:b8:47:fc:a7:8a:af:99:22:04:1f:17:15:32:
                    70:46:a0:4c:2a:1e:b9:ce:8b:91:d5:79:b8:c0:1c:
                    9c:0b:8b:22:1d:75:23:bf:01:d9:71:75:1d:d5:0b:
                    9d:cc:b8:36:5f:bd:b4:7a:78:f1:3f:6b:9c:d1:36:
                    e0:14:e8:9e:4b:72:2b:d7:41:c5:93:38:69:53:cc:
                    1f:fc:f2:94:c1:55:5c:d0:c8:72:cf:9a:65:7f:25:
                    4e:e6:e8:4d:3c:3e:f3:4d:aa:92:b7:cc:2d:f7:75:
                    0d:4d:a4:df:2c:2b:d2:26:51:9a:78:d0:1e:8f:8f:
                    46:7e:45:49:07:28:11:2d:0a:c5:4a:16:3e:bb:33:
                    02:a4:da:7d:01:9a:0a:dc:3e:71:8d:0e:13:ed:42:
                    66:43:04:ac:ba:45:09:57:8d:0d:be:07:18:fa:72:
                    44:f2:24:4b:a0:ca:40:58:6c:1a:af:ec:ec:93:4c:
                    db:27:95:d5:c0:1f:6b:ec:24:c8:a4:b9:e2:ce:55:
                    0e:23:fa:92:00:a3:c1:b8:75:5b:d6:bf:06:66:d6:
                    71:fe:dd:07:8e:1c:ba:4f:5b:a8:17:36:0c:07:1a:
                    d5:2b:d9:59:47:d9:19:f2:28:30:80:fc:67:ac:01:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DC:C8:85:69:EB:1B:EC:04:D5:8E:A8:31:03:7B:54:0C:2A:15:CE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D91402748EFB11EC825FAB77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.166.0/23
                IPv6:
                  2400:5aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:7b:eb:02:32:1a:1e:ee:b6:e3:f2:7e:71:8e:52:ff:b2:
         99:f8:a4:92:7e:83:49:74:d6:18:ad:a8:82:a7:e5:d6:d0:a3:
         a8:4f:95:94:10:75:e8:b2:c6:3a:0e:87:10:49:7c:e7:55:cd:
         f1:fd:d9:86:98:ca:30:a2:37:e0:9f:03:ec:6f:eb:7d:89:33:
         dc:03:9f:bf:fd:a1:10:21:28:f4:82:18:fd:9d:18:69:cb:04:
         f5:39:85:69:77:7b:ac:2d:e5:d0:de:da:fb:05:84:b3:17:89:
         15:7d:fa:7f:8a:a8:3c:cc:6f:05:cf:fe:e3:99:74:ef:97:82:
         14:ea:00:ca:0a:75:e0:a6:62:e5:78:d3:63:91:70:4e:22:a2:
         4b:53:eb:5b:cb:ba:1b:bb:0f:76:e2:6f:c6:96:9f:42:d5:62:
         33:6d:08:ff:30:5c:d8:17:2b:97:c6:35:1b:d8:01:78:f5:82:
         42:c9:63:13:0f:39:e4:b4:1b:70:b2:93:e0:45:0d:26:1c:bc:
         7a:87:db:98:e2:fc:03:5e:70:cc:2e:b6:2e:7c:96:64:50:36:
         0f:5e:cf:69:80:78:4a:00:07:3a:1f:4c:0f:bd:43:42:6c:48:
         7a:bb:ea:41:09:d8:f4:b0:f0:ca:b4:ba:24:53:c9:6a:13:78:
         f5:7f:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:16 2026 by rpki-client