Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB31BE6E0DDF11EBADAEA40AC4F9AE02.roa
File:                     DB31BE6E0DDF11EBADAEA40AC4F9AE02.roa (raw, json)
Hash identifier:          Tvm20yTWpqTCEfTcYbdcuTjGrazEAl18peStI+jwWAQ=
Subject key identifier:   02:F4:D3:D5:F9:92:76:F8:55:A3:2B:15:A4:94:82:0D:44:33:B6:10
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E622
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB31BE6E0DDF11EBADAEA40AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:07:51 +0000
ROA not before:           Sun 31 May 2026 17:07:51 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     139478
IP address blocks:        103.142.149.0/24 maxlen: 24
                          103.145.100.0/24 maxlen: 24
                          2400:6160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58914 (0xe622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:07:51 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ae7-9fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:93:e7:f8:64:1a:8d:6d:e4:cb:1f:b2:31:
                    60:b2:95:6e:eb:cf:6c:61:f9:f8:9e:15:96:58:23:
                    cb:00:45:ff:c3:02:32:ed:c5:f8:14:0a:45:da:95:
                    44:d8:3e:ce:a0:ab:17:3a:35:96:69:30:cc:58:23:
                    27:67:ec:43:39:3a:ba:1b:5d:94:60:73:2d:3f:49:
                    f4:76:02:2f:57:d1:e7:7d:0f:53:59:f2:ad:55:7b:
                    21:e2:21:da:26:1c:18:87:9e:0a:65:0f:23:76:ba:
                    86:c0:20:eb:6a:d1:67:c3:4c:81:76:9a:0a:af:f3:
                    b2:67:5c:21:4b:cb:08:ea:76:14:fa:b0:2b:43:1a:
                    ce:a6:1c:61:21:c6:a4:4a:00:2d:80:f7:f7:72:56:
                    8e:56:b6:4a:a3:69:ff:1c:32:1a:0f:61:a4:90:56:
                    06:6f:ab:ef:b2:a2:dc:4c:a6:54:6f:03:10:ca:c2:
                    bf:62:9c:9a:45:ce:ce:b7:11:c9:23:75:48:e0:5f:
                    f1:18:45:0f:06:6d:72:4a:cc:38:53:58:ad:fb:f3:
                    f3:88:67:c0:6a:9b:e6:d1:89:2a:1c:91:c9:5e:70:
                    e8:45:27:ca:03:48:05:a1:47:d8:78:bc:f5:4d:74:
                    c6:e7:7b:9a:c4:c2:c2:66:12:1b:86:9e:a9:d2:1f:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F4:D3:D5:F9:92:76:F8:55:A3:2B:15:A4:94:82:0D:44:33:B6:10
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB31BE6E0DDF11EBADAEA40AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.149.0/24
                  103.145.100.0/24
                IPv6:
                  2400:6160::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:68:21:15:96:ac:72:2a:96:9f:57:30:13:35:20:35:44:
         40:4f:86:26:66:8f:10:1c:cb:f6:aa:ba:c2:0e:e7:be:52:dd:
         d6:96:3d:66:a1:34:67:f3:37:ca:20:45:d2:58:8e:c0:ab:70:
         a6:e4:ce:20:e7:78:24:d6:ca:c5:10:0d:13:e6:d1:60:2b:91:
         3a:76:ec:2a:5a:4d:55:e6:4e:36:3f:a3:cc:4d:49:7f:d6:2e:
         79:3d:33:0c:ed:77:8c:da:d9:b7:06:d1:08:c0:b0:de:2b:89:
         5d:1e:65:f0:1f:93:7f:b8:61:ef:59:75:3a:77:4b:82:c6:1a:
         bf:cd:42:77:bd:a9:1d:93:81:4d:38:c1:e2:34:76:f5:4f:15:
         94:f1:ea:22:08:af:33:c1:86:d8:ad:a9:cf:86:95:d0:a7:f5:
         ac:f9:51:8c:61:37:05:c9:5c:7c:c3:de:a8:72:e3:6f:2a:bf:
         eb:9b:05:82:7c:b0:54:1d:9e:ff:14:a1:a3:9d:b1:12:30:c0:
         88:69:c4:30:a9:88:93:44:49:a5:2f:29:38:1f:5d:f4:c7:a4:
         9f:c8:97:55:23:8a:db:b6:0e:fa:bd:ef:63:70:3d:63:31:b9:
         9b:d4:08:b8:6a:60:3b:f4:c7:ad:51:16:57:a4:f4:01:1b:a8:
         78:4c:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:05:13 2026 by rpki-client