Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1A2ACA6AA4F11F080DBAA6AC4F9AE02.roa
File:                     E1A2ACA6AA4F11F080DBAA6AC4F9AE02.roa (raw, json)
Hash identifier:          EdKDLCgXuE3LSUIZNpLlJl9gGKWp4Ft2/4G0aPgAl7c=
Subject key identifier:   2C:51:8E:4B:DB:4E:61:BC:48:3B:6D:99:F0:B5:70:2A:05:6F:BC:56
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA87
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1A2ACA6AA4F11F080DBAA6AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:44:52 +0000
ROA not before:           Sun 31 May 2026 17:44:52 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153366
IP address blocks:        103.124.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60039 (0xea87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:44:52 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7394-0820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:9c:2d:ee:24:60:3b:96:ed:43:3f:81:92:
                    b0:43:28:b5:98:2e:bc:6c:3c:76:2e:3a:67:91:32:
                    1d:b5:69:66:4b:0f:93:f0:38:0c:ee:8f:a6:49:86:
                    3a:57:f7:b6:75:b5:81:d7:1b:40:07:b8:8f:e4:db:
                    e9:62:7d:70:81:63:ed:b0:b3:a6:00:28:6b:dd:b4:
                    ef:d6:bc:d1:1c:84:f4:2e:61:84:af:06:e6:1a:c9:
                    12:f9:6e:f4:c7:d3:c5:7c:b5:71:7f:24:26:6c:1e:
                    99:c9:24:5c:20:c9:d2:d3:65:1a:4c:85:4d:d2:3a:
                    67:32:6a:12:bb:0f:dc:e3:8c:82:6c:d4:71:e5:e0:
                    31:b5:be:d6:16:b0:1c:8b:90:67:be:8b:99:ea:e6:
                    f1:a3:4c:1d:df:d2:5d:5a:8c:75:60:f1:71:8e:cf:
                    15:a2:37:7e:4f:3d:5c:68:74:b4:ca:60:90:0f:07:
                    ae:bd:9f:18:20:c8:d7:02:26:c1:2b:05:38:27:00:
                    b9:70:e3:08:0c:1d:8f:5e:e1:2c:d3:f2:8e:e2:cf:
                    a0:da:84:4b:0e:3c:ac:e5:cc:a9:90:74:8e:fc:de:
                    27:b3:46:3e:ec:2c:0e:76:49:47:71:b6:4d:7d:31:
                    27:36:8a:2d:b1:57:1c:2a:c4:3f:52:10:ec:7c:24:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:51:8E:4B:DB:4E:61:BC:48:3B:6D:99:F0:B5:70:2A:05:6F:BC:56
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1A2ACA6AA4F11F080DBAA6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:bd:06:3c:55:3d:f1:85:b4:36:4a:6d:bc:dc:0f:2e:75:0b:
         79:d1:c8:f0:49:a9:94:a6:0e:2c:ff:cc:f9:4f:31:aa:c4:dd:
         09:3a:d0:36:36:4d:7b:69:a4:8a:02:86:cb:a3:c9:dc:d1:42:
         96:55:fa:e2:b3:dc:5c:9a:d2:b9:5a:a6:f4:3c:bf:c7:c1:b9:
         3b:50:77:96:fb:b8:c3:bc:44:2f:66:86:b4:21:78:28:ea:98:
         d6:5f:0e:1e:24:02:65:0f:83:20:57:a6:0c:89:f7:1e:13:de:
         00:c7:4b:da:9d:ea:b6:30:ed:23:69:53:ff:78:a5:f6:37:f4:
         ac:6b:93:51:fe:17:7e:a0:3f:d2:fd:01:07:e7:87:9d:5f:2c:
         62:f5:2b:29:22:cd:af:e2:67:8f:a6:0f:63:40:d6:69:99:e3:
         6e:68:7b:0b:99:f9:7f:e7:1e:31:2f:79:0b:b9:eb:2b:44:9c:
         67:70:31:06:06:4e:5c:ff:8d:96:c3:e2:39:04:cc:c6:b5:6d:
         93:ca:07:ff:6a:a4:ec:7d:14:66:9d:a9:e4:7d:ad:ae:b8:c0:
         3d:b0:c6:52:14:5e:4c:a3:23:86:f0:5b:f3:89:b2:11:58:29:
         47:a1:4e:8e:16:e9:1a:fb:5a:de:86:b9:44:a6:ce:e5:6b:89:
         bb:e7:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 23:40:22 2026 by rpki-client