Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAC46796BDD011EA9702FC12C4F9AE02.roa
File:                     EAC46796BDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier:          fsLEQe7+qS50zoybFQgo7kkLhV7ILXzmR9eOhWnmQLo=
Subject key identifier:   89:9C:62:03:84:C3:71:15:4C:82:CC:5F:A7:0A:FF:6E:1E:F0:39:3E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E669
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAC46796BDD011EA9702FC12C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:10:12 +0000
ROA not before:           Sun 31 May 2026 17:10:12 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140110
IP address blocks:        103.149.122.0/23 maxlen: 24
                          2001:df3:2580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58985 (0xe669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:10:12 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b73-ba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:7b:3c:cb:91:71:21:46:da:0e:38:35:78:
                    30:3e:86:bf:a6:c5:5a:75:ae:b7:25:15:84:57:6a:
                    3e:b6:0d:82:2a:b7:9d:d0:2a:f9:cb:a6:1e:08:91:
                    bf:b6:ae:c3:1e:73:49:22:cb:a5:1a:28:2e:91:6a:
                    65:62:49:ef:54:ea:6b:25:ff:5b:9b:0e:65:41:08:
                    fb:5e:b4:cb:c9:40:d3:d1:80:da:1a:1b:2f:79:d7:
                    ad:49:9b:bf:7a:af:ef:31:86:71:a6:c0:3a:60:1c:
                    ef:fa:a4:65:9a:b3:68:75:66:70:0d:22:b8:d8:46:
                    eb:31:4d:ba:14:61:28:ca:77:34:ca:f3:e9:82:8e:
                    83:b7:6e:3d:2a:ae:18:b3:3f:a4:15:ff:b8:2b:f2:
                    46:07:2b:67:30:e9:e2:7e:75:7b:16:46:83:ef:82:
                    ec:df:78:3c:14:e9:e2:15:25:cb:f4:ef:f4:55:63:
                    fe:fe:41:05:75:94:a4:73:66:b8:13:56:aa:9d:cc:
                    d2:ec:96:69:b8:a4:bf:37:c0:ef:20:32:f3:b3:4b:
                    ee:f0:41:e0:04:88:73:43:c8:06:33:2a:85:87:56:
                    ac:76:e3:36:af:1e:9a:78:f9:d6:9c:a9:72:bc:7d:
                    70:5d:dd:59:f3:ff:f0:14:f9:16:02:bb:4b:b3:92:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9C:62:03:84:C3:71:15:4C:82:CC:5F:A7:0A:FF:6E:1E:F0:39:3E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAC46796BDD011EA9702FC12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.122.0/23
                IPv6:
                  2001:df3:2580::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:72:ce:85:9d:38:10:7a:86:fe:54:68:ba:d6:50:95:fb:
         6b:63:ca:f1:33:fe:9f:40:de:a5:89:79:4c:5e:50:e8:05:64:
         5d:25:36:da:c4:39:4c:5e:cd:e4:f6:0a:7a:16:05:20:7e:0a:
         81:cc:6d:24:0a:05:8e:3f:6d:a3:3c:60:9c:47:31:c0:3b:5e:
         77:56:a2:7d:b6:4f:f4:09:69:98:e3:2d:2a:f5:60:ea:55:7f:
         3c:6a:49:b3:cf:ff:94:6d:d0:9d:20:d3:65:c2:1b:bc:61:8a:
         5e:e7:04:e9:dc:ad:38:a6:2d:4d:f1:32:af:61:87:4a:6d:86:
         27:72:05:8d:41:a3:01:ae:e1:82:54:e1:86:32:a6:87:8f:59:
         4c:e2:d7:d2:d9:57:3b:59:59:51:06:1a:33:be:9e:53:05:86:
         61:dd:72:18:1b:4a:09:97:82:3e:88:42:52:fd:62:81:7c:ce:
         dd:6b:82:4e:ff:15:1d:6f:e0:78:60:bf:56:40:f5:6e:14:79:
         e5:72:5a:5b:47:53:db:57:35:a3:15:cc:16:ae:0f:f7:1a:79:
         79:52:fd:82:be:ca:e6:57:d6:d6:b0:fa:5f:e0:7a:aa:d6:2d:
         1e:9a:9f:05:8b:23:71:25:1c:09:0a:2d:ea:4e:31:f5:9a:e3:
         26:86:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:59 2026 by rpki-client