Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE298DE45E111ECB7263A7DC4F9AE02.roa
File:                     DBE298DE45E111ECB7263A7DC4F9AE02.roa (raw, json)
Hash identifier:          xgYaWeMEBjL9SxvHNveDswWSYAYoqe/qDEYYl3z6LTQ=
Subject key identifier:   56:DC:27:A5:B8:AA:EF:8F:08:61:B6:E1:CD:24:AD:87:01:38:72:38
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E826
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE298DE45E111ECB7263A7DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:24:50 +0000
ROA not before:           Sun 31 May 2026 17:24:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     147210
IP address blocks:        43.231.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59430 (0xe826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:24:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ee1-66c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:03:b5:eb:d6:8a:36:55:47:2b:a8:cb:a9:
                    df:96:9a:91:5d:e2:50:0b:f8:1c:5c:b8:13:fe:84:
                    59:ef:88:01:2e:b6:10:72:79:4f:95:06:c5:c2:21:
                    06:07:cf:8d:9b:70:37:bf:a3:56:bc:6c:82:28:03:
                    cc:98:0c:f2:a5:76:2a:e3:99:1c:8d:3b:ae:48:c7:
                    ad:8b:d5:d4:66:89:46:cf:c8:40:61:ad:af:3c:5f:
                    18:ea:5e:b9:31:a5:80:c4:25:15:5a:08:3a:18:9d:
                    32:3b:83:2e:f6:82:03:48:0b:15:45:14:cb:58:19:
                    4a:89:dc:74:f0:37:dd:9e:c6:80:85:f6:e7:bb:bf:
                    88:ac:91:09:ce:be:f2:1f:76:fb:2c:98:80:61:b5:
                    00:45:21:f4:75:0d:1f:a5:ba:2f:fc:74:fe:52:d8:
                    39:a3:98:7a:46:44:d3:e0:86:a7:9e:63:ca:1d:c9:
                    b9:d6:c8:c9:4f:46:a6:6d:ae:dd:e8:9f:2c:7b:c5:
                    cf:ae:15:82:e9:74:6c:f0:c4:b2:f6:1d:a5:ae:cd:
                    29:7a:eb:9c:08:20:32:60:d4:3e:67:ed:be:82:20:
                    1a:6a:d8:c9:4d:96:84:0c:28:6a:82:f8:0c:23:3d:
                    8b:c6:28:a9:15:b3:e9:eb:33:58:7e:1c:40:ca:b1:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DC:27:A5:B8:AA:EF:8F:08:61:B6:E1:CD:24:AD:87:01:38:72:38
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE298DE45E111ECB7263A7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:1d:68:ce:e5:53:14:d7:b8:e2:59:a4:b9:a0:b9:c5:12:d4:
         6a:8c:f4:3a:c4:11:5c:87:d5:d2:2e:26:9a:52:54:76:3a:35:
         cb:80:0d:9f:81:86:ad:60:16:14:47:fd:59:7d:69:9d:68:27:
         9e:d3:b9:85:a6:b2:22:bd:4e:7d:62:18:d5:e7:d7:63:07:32:
         d3:77:fb:24:ad:92:36:9f:7e:45:1d:5e:ee:0a:db:25:5b:0b:
         24:12:f7:62:2c:a1:d6:a8:f4:78:2e:66:3f:59:e8:16:b1:2b:
         82:ec:d0:7d:a3:a6:18:a0:13:e7:79:0c:70:f3:5a:45:96:40:
         b7:b4:8e:8a:21:2d:83:fc:d1:67:ff:65:6c:be:a2:d6:57:ee:
         36:eb:07:22:5b:d0:60:75:a9:c7:0e:22:03:22:50:6c:e5:e6:
         d5:24:6f:d3:64:25:85:00:9f:3b:0c:92:38:89:8b:26:46:4d:
         6c:b3:0c:19:3a:e2:c6:d2:97:31:b9:dd:5e:43:93:8c:8f:70:
         71:0b:ba:9c:b2:d6:f6:5f:a1:69:2d:b6:f5:87:2b:4d:7e:b3:
         bf:ab:00:a5:8a:02:8f:cc:d2:a6:7e:51:9f:18:0e:d0:28:1d:
         ab:21:56:0f:f1:0d:57:4f:e5:3d:a8:61:67:ff:e6:9c:63:0f:
         c9:62:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:44 2026 by rpki-client