Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E83CD68CABF711EBAC192B83C4F9AE02.roa
File:                     E83CD68CABF711EBAC192B83C4F9AE02.roa (raw, json)
Hash identifier:          FJPOrSNeG66ZFDJtytWX4AA8EWQT384ptHVHSoqcVgg=
Subject key identifier:   E9:34:F8:9F:97:2A:51:4F:D3:6F:7C:4A:CB:B6:41:35:FC:89:7D:9F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E323
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E83CD68CABF711EBAC192B83C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:43:00 +0000
ROA not before:           Sun 31 May 2026 16:43:00 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134308
IP address blocks:        103.134.100.0/22 maxlen: 24
                          2407:50c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58147 (0xe323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:43:00 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6513-2b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:07:e9:2e:d3:01:33:9a:2d:6e:89:40:fd:3d:
                    3c:20:8f:20:e8:cd:6b:b1:51:ae:7d:37:b0:5f:10:
                    44:a0:3b:63:a5:3b:6f:61:c7:f8:b2:c8:73:65:53:
                    b9:27:47:92:fb:ef:ad:cf:5f:71:d7:da:a0:fc:40:
                    35:ba:3a:e0:d7:d8:e6:67:6c:97:c2:70:16:d4:d8:
                    af:c3:ae:97:c4:77:1f:13:73:d2:bb:62:85:4f:74:
                    fe:49:ae:a4:78:18:78:d7:e4:cc:0d:1b:27:72:48:
                    92:0b:83:b4:75:7b:60:5d:4e:25:5f:5e:03:a4:3f:
                    56:c4:9a:59:83:ce:5e:6f:93:d3:05:6c:44:37:0c:
                    6d:e8:01:1e:c9:f2:9d:e9:92:48:56:34:d6:45:46:
                    db:b5:ca:0b:b6:5f:6f:50:37:ca:77:f9:eb:b8:af:
                    67:77:ca:fd:ef:ca:ae:be:ff:e0:24:89:2e:58:59:
                    6d:b2:a8:3f:94:90:f9:6b:36:bf:18:fe:ed:4a:b1:
                    95:29:26:f0:47:85:1b:45:2d:8e:70:b8:ac:b8:4e:
                    82:cf:22:e1:b2:e5:82:da:00:da:22:4f:89:ca:00:
                    63:a3:f4:a5:c9:71:7a:c8:ff:fa:7d:2d:3b:c5:59:
                    9c:8b:cb:ed:fd:cc:3a:05:66:5d:b5:c4:91:f7:5b:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:34:F8:9F:97:2A:51:4F:D3:6F:7C:4A:CB:B6:41:35:FC:89:7D:9F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E83CD68CABF711EBAC192B83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.100.0/22
                IPv6:
                  2407:50c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:19:c9:22:a1:9f:5d:dc:0e:cb:26:16:bb:1c:f8:15:ae:
         c3:de:5c:b8:5c:55:14:4a:74:ad:ee:1e:64:5d:69:7e:d6:90:
         5a:e5:9b:9a:56:98:b9:0a:e1:4d:19:12:97:eb:cf:c4:22:97:
         9d:e1:2d:4b:71:53:d1:38:00:e5:4a:7a:45:1a:b1:45:d6:e4:
         44:10:9a:d7:99:f4:c3:3b:58:6c:7a:ce:31:35:9f:df:da:83:
         36:4b:a0:16:77:8c:53:d9:72:51:91:b7:c6:09:aa:6b:dc:44:
         4e:47:8f:31:e0:5e:79:43:63:2b:6d:bd:e8:5f:63:82:8a:b0:
         2b:16:5d:fd:a8:49:db:c8:bf:ab:cf:c0:4a:a7:eb:eb:ef:80:
         c8:9c:ea:c0:25:ff:f3:8a:7a:c7:71:55:ad:80:87:70:e5:fd:
         f0:89:eb:f5:73:42:49:0b:e3:1e:61:46:74:33:e4:85:01:7b:
         56:aa:06:7a:56:ff:1c:87:4b:da:ce:7d:ea:a1:02:69:a0:f5:
         52:1a:33:ec:89:f5:99:9c:2f:b4:e9:4c:dd:c8:f4:f8:cd:b4:
         0c:98:70:60:3e:80:21:a1:5e:42:b1:fd:50:3c:f8:94:b0:51:
         64:9b:d5:55:43:e1:67:dc:bf:4b:d3:ae:2a:e5:d2:2b:22:63:
         97:aa:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:46 2026 by rpki-client