Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E80314CEDFCD11EBA4B62A1AC4F9AE02.roa
File:                     E80314CEDFCD11EBA4B62A1AC4F9AE02.roa (raw, json)
Hash identifier:          Ws0feLf1w79N9Nb6Xp4gafdJhCeDb3Psvzy5KpK/Ezs=
Subject key identifier:   0D:87:A6:58:27:21:89:A6:84:F0:8B:BA:CA:77:E5:DB:FB:F4:7B:4D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E3C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E80314CEDFCD11EBA4B62A1AC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:48:22 +0000
ROA not before:           Sun 31 May 2026 16:48:22 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135251
IP address blocks:        103.220.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58312 (0xe3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:48:22 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6656-f1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:64:e5:0d:a2:c0:64:46:f3:f1:49:2c:bc:
                    76:60:38:e5:e4:0e:2f:9b:b5:b2:52:c0:a2:d0:a9:
                    a4:0d:3d:01:e3:e4:46:12:49:13:32:84:29:cd:3d:
                    0a:e5:1c:ab:1f:99:ab:39:97:21:0e:a0:2a:b9:8f:
                    80:1e:81:78:f2:2c:03:2c:a3:ff:fb:f6:79:51:d3:
                    e7:7f:4d:16:b4:71:14:dc:b8:18:9c:24:65:55:1b:
                    0a:b4:66:a6:6b:47:2f:89:94:92:ad:c3:7d:21:48:
                    a7:9f:28:94:b7:53:4a:d7:6d:43:a5:ef:a2:f6:42:
                    66:91:8f:2e:ac:2a:e4:37:32:8a:21:26:d6:eb:ea:
                    2b:36:4c:2b:5c:79:88:8c:36:3d:e8:9c:f7:d7:0e:
                    e7:5b:22:39:51:ee:cf:35:a1:0e:d8:85:39:19:b6:
                    89:64:ee:f6:39:94:02:c8:56:5b:e1:8e:4c:5e:77:
                    84:56:d9:1f:53:ed:bd:d1:cc:1f:8f:d4:27:61:98:
                    7e:68:a6:44:d0:e1:0f:a0:b5:ab:c2:65:6f:a7:31:
                    5a:fe:87:e4:76:4b:ee:5d:b5:11:92:66:04:d6:b0:
                    13:84:69:69:db:0b:8a:26:cd:94:d5:4c:b8:ca:8e:
                    de:ee:fd:51:b8:00:a6:2f:2d:4e:df:5f:0b:78:98:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:87:A6:58:27:21:89:A6:84:F0:8B:BA:CA:77:E5:DB:FB:F4:7B:4D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E80314CEDFCD11EBA4B62A1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:35:c2:50:b7:dc:74:76:4b:64:0f:d3:e9:52:e1:33:2a:d4:
         d9:c3:10:17:0f:f5:84:f4:23:2e:ed:5b:13:fa:19:09:f4:34:
         c9:3e:ad:f6:13:5f:37:f5:ca:30:89:39:8e:d0:a2:06:21:3e:
         31:69:5b:bc:36:b0:ed:ae:52:bf:f9:c1:57:cf:d2:26:ba:fc:
         cb:b7:c0:24:df:5c:39:b1:63:15:b0:41:f6:d9:43:94:bd:db:
         df:4d:55:d8:93:45:e0:2b:dc:88:01:82:a0:40:54:35:ba:ee:
         9f:77:d2:bc:f0:10:e0:6f:4e:93:b3:92:e3:ab:86:3e:28:fb:
         70:ee:50:1a:19:3d:96:8e:22:66:8f:bb:c4:1e:67:11:d9:75:
         1f:98:7e:c4:d9:fe:92:65:a9:1f:3d:db:b4:b1:dc:4e:37:db:
         41:76:a4:96:49:ce:24:ad:cf:c6:1e:dc:f3:fc:b6:42:85:36:
         b8:f3:68:47:bf:d2:61:da:b7:9b:f4:17:8e:f7:d7:aa:51:63:
         76:7c:27:bb:b2:9d:7e:55:bb:5a:d0:a0:c4:e0:77:12:39:ed:
         af:c6:21:20:a4:fa:00:84:8b:82:35:27:d8:55:2d:14:40:5e:
         01:df:6d:5e:4c:fd:0e:40:98:18:8c:cb:71:1b:f3:9b:97:dd:
         d7:3c:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:15 2026 by rpki-client