Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
File:                     E491F456D8A011EB8F5C1925C4F9AE02.roa (raw, json)
Hash identifier:          GG/ECX7V2M5d2cjmeTk0ZZy7osR1KE43hdGiitrmEG4=
Subject key identifier:   E4:74:49:EA:78:39:1F:85:70:12:E0:74:CB:4C:2C:C3:C3:1E:FE:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E59F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:03:41 +0000
ROA not before:           Sun 31 May 2026 17:03:41 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138229
IP address blocks:        103.124.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58783 (0xe59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:03:41 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c69ec-65a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:14:8b:a1:85:63:17:34:ab:71:f7:73:89:
                    c3:33:94:f0:ce:7b:9c:49:c0:5d:73:0a:e9:fb:71:
                    20:71:b1:1b:85:9b:8c:5d:38:82:1f:bc:f2:09:4b:
                    c6:90:a9:06:64:ef:ee:7c:c9:68:f0:b3:40:26:9b:
                    a3:c6:23:11:65:f0:3c:ad:91:b8:07:c6:aa:ad:c9:
                    04:84:e0:6a:8f:37:55:82:f1:2c:1d:7d:0d:4d:69:
                    c1:4d:44:6b:4f:d9:7f:bc:77:d8:a0:d7:b1:39:bb:
                    20:9b:75:b7:66:af:05:90:1d:65:59:70:04:7c:97:
                    46:91:8a:a9:b8:00:0e:46:16:5c:89:b6:dc:34:20:
                    fd:23:36:2c:f8:58:31:e7:4f:e8:2e:a6:20:d3:0b:
                    a9:ca:af:d9:b2:2c:68:73:7c:24:08:05:83:d2:ed:
                    e9:43:2d:53:9f:3b:e1:00:24:ce:9e:45:2c:7c:12:
                    25:f0:78:62:a2:c9:35:26:18:b2:08:34:65:a2:bf:
                    39:9d:2b:04:d8:5c:0e:dc:52:fe:b1:fb:f7:88:24:
                    46:ac:f3:47:45:5b:ed:e5:87:e4:24:ce:c6:61:e6:
                    28:57:97:87:93:89:ee:52:2a:7c:10:48:00:98:a9:
                    24:ec:a8:97:57:86:57:97:ad:dd:76:be:04:d0:a0:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:74:49:EA:78:39:1F:85:70:12:E0:74:CB:4C:2C:C3:C3:1E:FE:0C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:d7:8c:0c:55:69:b5:5b:5f:25:0b:69:e2:c3:dd:18:71:fd:
         63:19:92:ca:8f:c4:73:5b:d7:2c:0e:8c:e5:6f:ee:b0:ac:ba:
         a6:90:e3:37:d8:34:7e:82:57:17:1d:79:45:21:9a:ff:61:63:
         ee:c6:72:56:94:fa:04:65:7e:d4:f9:23:1d:d3:a1:cf:e4:54:
         99:74:91:b6:09:ef:3d:43:55:38:38:07:f3:ff:c2:75:f0:01:
         4f:3b:ff:69:81:7f:3d:5f:09:43:1a:59:ae:4d:2b:3d:a0:c0:
         c2:c5:66:5d:c6:36:97:67:67:1f:4b:d3:c5:88:eb:37:7b:31:
         bd:e3:0b:43:fa:91:ef:12:4d:17:b9:17:30:24:d8:d6:45:25:
         a1:96:be:a4:0b:e9:0a:47:d9:96:92:0e:4d:c0:17:ee:7f:d5:
         5f:fa:ec:81:1d:59:46:e4:e9:2e:64:1e:b5:40:bf:e1:c7:08:
         47:2a:05:16:b9:7e:fe:49:a1:b9:1b:cd:89:8e:fe:52:02:41:
         a6:f8:a1:ab:84:ee:6f:84:07:68:93:02:84:39:22:96:72:6c:
         af:86:fd:5f:86:41:81:0c:91:12:ab:af:63:2c:81:3c:94:aa:
         b6:68:8f:5b:b5:e2:b4:d2:e3:db:b5:33:83:78:97:c8:52:eb:
         66:d5:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:29 2026 by rpki-client