Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5ED667CE0C511ECBD46DA33C4F9AE02.roa
File:                     E5ED667CE0C511ECBD46DA33C4F9AE02.roa (raw, json)
Hash identifier:          Le/mFnOZEsGTPyaJONwOwaL9RS486SWbG/04xKiSlqI=
Subject key identifier:   37:97:A1:35:12:38:AF:D5:F0:8E:2D:EF:66:8B:FF:3B:97:F4:09:41
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5ED667CE0C511ECBD46DA33C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:39:08 +0000
ROA not before:           Sun 31 May 2026 16:39:08 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133715
IP address blocks:        43.239.212.0/22 maxlen: 24
                          103.188.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58027 (0xe2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:39:08 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c642b-8ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:5a:79:04:6c:22:dd:d0:9b:67:af:54:68:
                    1b:ad:74:90:8d:bb:db:ad:63:a0:f9:c0:35:cd:dd:
                    03:ea:1a:1d:2e:c1:dc:71:d2:81:c1:72:62:12:d6:
                    9d:27:c9:f4:31:4a:5b:52:ae:0d:04:58:1e:78:fb:
                    61:75:95:54:56:9b:f7:7f:6d:c8:d8:cb:8a:c1:01:
                    8f:3a:3e:4f:48:34:d0:69:c7:23:32:e2:66:e6:e2:
                    3f:7c:c1:0c:4e:4d:c4:31:02:a9:5f:5d:bd:1d:24:
                    30:d8:0f:9f:5d:ef:f1:4c:1a:c5:65:a6:7f:89:09:
                    95:69:c6:28:46:59:0f:bb:43:4b:e9:55:ff:72:60:
                    c2:cd:8a:d0:d8:5b:4d:f4:c1:22:3c:ca:bf:8f:24:
                    83:5c:ba:07:f9:94:d2:5c:03:48:83:2e:d5:93:0f:
                    bb:69:13:68:63:24:71:9d:cb:b5:f8:4c:70:ae:93:
                    35:14:fa:25:4c:51:ab:a5:7f:2c:58:69:45:61:03:
                    5b:bd:2f:9c:34:e7:f4:9e:f3:cd:7b:41:33:52:5b:
                    aa:58:6e:f8:7e:f1:06:d2:06:cf:90:41:69:32:99:
                    29:de:08:da:b7:ce:23:23:39:a7:17:e9:82:76:29:
                    81:64:e9:91:e3:95:17:d7:d0:e6:29:fa:39:af:69:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:97:A1:35:12:38:AF:D5:F0:8E:2D:EF:66:8B:FF:3B:97:F4:09:41
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5ED667CE0C511ECBD46DA33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.212.0/22
                  103.188.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:96:7b:69:db:56:a4:c5:84:2d:f9:cf:f3:14:94:0f:62:
         05:03:06:77:ca:e5:e8:56:22:51:4c:a0:04:47:e5:4a:5e:1a:
         4a:17:85:37:ee:24:e0:60:2a:94:c7:31:0d:eb:ea:13:33:75:
         fd:e2:bb:63:fc:78:31:6d:42:50:5a:34:11:60:4a:16:af:c4:
         46:ab:2c:19:c5:be:a8:c2:34:11:7e:ee:a8:18:2e:e7:ea:89:
         3f:67:f9:70:4a:bb:81:f0:fc:28:7b:19:8f:45:13:03:3c:5d:
         47:1a:2b:11:1a:98:b4:b5:45:d1:f0:b5:74:3b:fb:6f:70:8c:
         6d:a5:18:ab:e6:42:44:be:52:c6:5f:6d:69:60:8f:7a:8b:a7:
         0b:ec:2a:a6:fe:b1:5f:9b:16:d8:c5:ce:6c:88:62:00:0d:c8:
         19:3f:7f:83:e5:f7:07:ca:c8:04:b9:28:f2:8a:40:42:50:b9:
         51:16:67:16:3a:6e:da:5c:da:19:ca:06:79:0d:a2:46:4c:44:
         4f:57:6e:53:f5:1a:e4:87:e5:98:11:2d:23:40:36:62:c3:2e:
         cd:27:85:fc:07:3a:b6:ce:8d:f1:d0:5c:8e:e1:aa:8b:86:4a:
         df:1b:66:1b:a1:17:74:24:6c:8e:70:f3:52:3a:9a:be:e4:f6:
         82:7b:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:49 2026 by rpki-client