Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E0616234E9A811ED8B614C43C4F9AE02.roa
File:                     E0616234E9A811ED8B614C43C4F9AE02.roa (raw, json)
Hash identifier:          N0a8GFIpK4hnXmlkBN0v8rKCR89w4XFswXQSDqRsgeY=
Subject key identifier:   FD:6A:90:73:76:A9:2E:48:71:75:9C:79:9D:70:EB:B2:86:D8:20:1B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E424
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E0616234E9A811ED8B614C43C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:51:25 +0000
ROA not before:           Sun 31 May 2026 16:51:25 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135782
IP address blocks:        103.82.96.0/22 maxlen: 24
                          2407:ddc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58404 (0xe424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:51:25 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c670d-d403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:a3:58:39:80:58:86:f5:09:01:b4:aa:43:
                    20:f2:5a:65:cd:3a:ba:4b:28:66:37:78:d4:ae:b8:
                    c6:c7:97:a4:da:46:8d:23:52:5d:33:53:d8:24:77:
                    58:ff:a9:1e:e2:ca:cb:7e:d6:43:f3:40:e0:b2:be:
                    39:8a:dd:cd:be:19:b6:ad:0a:05:d1:06:ab:45:66:
                    08:d2:ba:03:0d:55:6d:6f:d3:a7:4a:83:63:73:cf:
                    d0:08:49:fa:ef:71:e4:b8:01:8b:c2:fb:8d:13:25:
                    e3:13:88:2f:4a:74:1b:32:53:b4:1f:24:45:20:eb:
                    7f:8a:b4:89:d3:49:f0:ab:b3:e4:3e:34:13:7c:ee:
                    d1:fe:d7:4c:df:47:00:dc:d4:b5:d2:bd:4a:8d:84:
                    f5:7f:df:ee:ca:72:75:87:16:1e:12:73:f3:bc:31:
                    b1:8b:5a:ff:0f:03:dd:fa:a0:1e:72:f5:a3:54:33:
                    53:aa:c9:6e:d6:46:7a:f3:d3:e1:74:d0:df:a7:41:
                    9d:31:92:a2:59:fe:e0:37:fd:11:43:77:ca:63:8a:
                    a0:f2:5e:de:15:c9:7c:17:12:4b:62:d0:be:c2:cc:
                    ab:c0:5e:e0:58:ee:31:ae:81:e2:4b:75:99:d3:de:
                    58:26:54:43:ca:e4:c4:a9:9e:f7:75:f4:e8:16:8a:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6A:90:73:76:A9:2E:48:71:75:9C:79:9D:70:EB:B2:86:D8:20:1B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E0616234E9A811ED8B614C43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.96.0/22
                IPv6:
                  2407:ddc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:8a:23:b9:fd:fa:0e:c3:56:0e:18:68:7f:d3:87:64:df:95:
         f1:87:ad:d6:54:e3:69:72:08:da:56:c9:8b:8a:55:1b:9a:34:
         80:2d:86:78:d6:2d:b3:a6:61:7c:d9:a2:88:4e:88:82:cb:6c:
         9d:b6:5a:78:1a:8a:c5:bc:98:74:a5:97:a9:3e:82:5a:00:37:
         d9:36:5c:58:ca:da:64:65:fa:5b:42:72:ff:2e:6c:c5:bd:07:
         c6:d1:24:de:81:5a:b5:dd:47:ae:0d:61:a0:c0:a5:c4:2b:65:
         4b:da:86:b6:1f:80:d6:b4:bd:06:59:d4:25:6f:3a:f0:80:f0:
         96:10:65:9a:b0:25:f7:1c:1f:c8:6f:e9:25:f4:a4:39:ce:de:
         d9:75:d4:bf:48:d8:d5:33:2f:d4:bc:15:02:40:e0:32:28:01:
         0d:c3:3f:bd:01:d7:7f:c9:56:b5:35:bb:5a:f3:35:f0:8a:09:
         57:14:62:1c:1b:c5:d4:0f:c7:fd:7e:f1:66:9f:af:37:66:4b:
         78:26:ea:95:af:55:73:37:f9:84:14:56:c6:9c:3b:ff:6b:d4:
         3e:e8:bc:f5:bd:48:06:3a:91:8b:ad:ba:3c:75:c1:51:48:df:
         3e:2f:b8:a0:b7:e9:ec:36:66:85:83:9c:c9:dd:89:27:c1:c9:
         5f:22:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:37 2026 by rpki-client