Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E16B0EE689C611EEB959850BC4F9AE02.roa
File:                     E16B0EE689C611EEB959850BC4F9AE02.roa (raw, json)
Hash identifier:          sJjYofZvye2hlq91YJViSWlPBUVJYgX+5LnaoAXoqvU=
Subject key identifier:   23:D3:9A:73:C6:BD:0A:B4:DF:CD:CE:88:24:34:48:26:4E:45:40:C8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E16B0EE689C611EEB959850BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:40:20 +0000
ROA not before:           Sun 31 May 2026 17:40:20 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151711
IP address blocks:        116.199.204.0/24 maxlen: 24
                          203.23.1.0/24 maxlen: 24
                          2001:df3:1a40::/48 maxlen: 48
                          2001:df6:1340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59896 (0xe9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:40:20 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7284-9043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:f4:0c:f9:e3:e5:b4:02:e1:dd:1e:f5:93:
                    ae:b9:65:d9:fe:ab:3c:8e:ad:62:0b:3b:1d:5f:6f:
                    65:af:a3:2a:68:ed:07:8f:fa:9e:07:ed:0a:55:42:
                    0e:8c:8a:1d:66:16:9a:6d:3e:39:c6:1c:72:fb:cf:
                    af:78:f9:5a:42:31:7e:36:53:b7:5d:ef:d4:fd:78:
                    f1:39:7a:34:5d:78:85:ca:bb:ff:5c:96:96:49:b1:
                    34:6e:0c:69:3c:a2:8b:75:6b:3b:59:a4:e8:7c:1a:
                    94:a7:3d:69:97:15:57:70:8c:ac:7b:f3:d7:fb:09:
                    65:21:b7:17:0e:e0:76:1a:98:3f:d6:f6:2b:ca:fc:
                    57:d3:3b:e9:1b:21:16:c6:f3:88:6b:36:87:a1:6a:
                    2f:3b:c3:80:d6:a9:23:f9:06:2d:01:5d:b2:8a:87:
                    a5:7d:a3:0d:51:58:ee:17:6a:7d:e3:f3:b9:51:44:
                    c3:af:d6:93:af:6b:83:c4:cf:cf:01:ad:f1:65:99:
                    d1:54:24:03:ee:28:f9:7d:2f:0c:a5:28:ff:65:98:
                    5d:d8:6a:ff:57:2b:2a:19:71:5e:f7:1e:b2:0a:e8:
                    03:cf:21:55:23:6e:d2:48:e2:55:13:a6:9e:a1:36:
                    48:b7:98:0e:fe:46:5b:bd:59:b6:a9:a0:fe:43:41:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D3:9A:73:C6:BD:0A:B4:DF:CD:CE:88:24:34:48:26:4E:45:40:C8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E16B0EE689C611EEB959850BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.204.0/24
                  203.23.1.0/24
                IPv6:
                  2001:df3:1a40::/48
                  2001:df6:1340::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:98:99:6b:25:c4:90:a7:b8:02:eb:4f:75:17:ca:c7:cf:ee:
         fb:84:4e:85:67:04:a6:40:ae:18:d1:5a:eb:ac:87:66:c1:dc:
         59:20:42:41:91:c2:3d:9d:e1:e4:16:7e:bb:e4:59:63:c0:c2:
         24:32:fa:2b:fe:91:42:93:6f:84:d2:bd:6f:4c:80:a5:73:bf:
         72:fb:49:ee:a9:a6:6c:36:10:da:c0:3f:6e:4f:4f:5d:20:ed:
         5f:27:0c:d8:b0:fd:66:e9:38:44:70:f1:b3:16:17:ec:43:6f:
         70:98:8e:d4:eb:c9:af:a3:6c:d0:fa:9f:80:26:50:95:85:f3:
         43:e1:3f:2f:60:66:d7:72:1a:c5:b0:84:1a:c0:40:1f:02:b9:
         48:be:fd:62:a7:f7:ba:f2:de:b4:f8:c4:d8:63:e6:31:63:64:
         48:20:74:c9:69:5d:1c:8b:7e:27:9b:e9:40:cb:ce:bc:b0:e3:
         74:22:be:a3:93:e4:eb:f9:db:85:8e:f6:f5:98:15:18:4d:72:
         dd:39:2e:7f:57:3b:0b:ad:1a:a6:92:98:ff:5e:af:fc:a0:33:
         05:7f:52:3c:c5:78:17:94:58:f3:d3:9e:e4:0f:c6:a6:23:25:
         bf:37:59:61:a9:78:73:b4:11:82:e3:67:5f:7a:70:6e:b6:57:
         71:d7:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:36 2026 by rpki-client