Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa
File:                     ED69316EE56711ECBF1FA967C4F9AE02.roa (raw, json)
Hash identifier:          pZYy0Evntsdeinb25gTxPNHrrb8pRiUwHu9PIC+Jet0=
Subject key identifier:   32:47:F2:F6:59:98:91:72:49:32:B5:EC:A4:EB:C0:6E:5C:40:AF:83
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E47D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:54:16 +0000
ROA not before:           Sun 31 May 2026 16:54:16 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136307
IP address blocks:        103.188.220.0/23 maxlen: 24
                          2001:df0:c740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 09:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58493 (0xe47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:54:16 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c67b8-a560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:b7:54:45:a6:13:0b:9b:a6:41:b2:25:ca:
                    3a:bb:36:63:b0:89:aa:c6:e7:84:d3:f8:d5:7a:a0:
                    6d:68:92:30:1f:48:a5:0c:a7:62:a8:75:12:fb:0d:
                    9a:17:b6:5a:37:e6:5c:7c:3b:11:52:eb:67:08:e6:
                    ef:b9:90:b2:f8:97:6d:3f:14:bb:1e:65:ec:ef:4b:
                    7b:82:b3:e4:59:84:eb:1e:8a:df:ea:a6:b3:3c:2c:
                    95:6a:d8:ad:cc:b5:10:3e:c5:c5:48:ea:dc:1b:4d:
                    b3:cd:f6:6d:53:a0:70:e4:3d:47:32:95:5f:72:db:
                    2e:3f:ea:2d:af:1a:56:20:a8:4b:25:3e:12:13:cb:
                    82:f7:bb:94:31:35:66:8c:c2:f2:6a:c8:bb:59:9b:
                    d0:1b:6a:7a:ad:b6:cb:b6:ae:db:9a:17:18:f3:40:
                    df:db:d3:be:8b:ae:76:04:66:69:59:7a:57:ce:41:
                    90:5e:ca:4d:2e:9e:cf:fb:9b:c3:38:fa:f4:28:ba:
                    3c:21:a3:04:11:0a:cd:38:c6:21:32:8d:56:55:70:
                    0b:14:24:59:87:9e:01:a3:09:50:d6:a9:a6:e8:75:
                    ec:fd:10:99:74:cf:77:31:15:f6:fc:6b:f8:7c:b3:
                    ec:ab:ce:fd:f6:11:6e:38:66:0d:11:fa:04:fb:96:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:47:F2:F6:59:98:91:72:49:32:B5:EC:A4:EB:C0:6E:5C:40:AF:83
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.220.0/23
                IPv6:
                  2001:df0:c740::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:34:14:3d:3b:9a:b8:2d:52:9e:16:ff:a9:f6:f1:b4:90:
         fc:d0:e9:29:7d:ca:eb:30:24:cd:d3:32:26:c6:06:2d:48:03:
         c6:4e:69:c0:4f:68:7a:63:77:43:c3:04:d7:e3:cb:0f:37:0d:
         be:45:c8:73:46:0f:9e:72:6b:25:1f:e5:38:4b:6a:96:ad:46:
         db:df:27:2e:17:6e:fd:fb:8a:c6:c8:74:1b:ba:28:ef:c6:04:
         63:30:f2:d8:01:3a:64:a9:cd:ff:ba:e6:7d:da:56:dd:64:ac:
         ea:89:9b:a1:9a:07:6f:32:95:c8:40:36:c1:9e:c8:fb:bb:0a:
         3d:80:cd:fb:ce:1d:7a:f5:45:4b:7f:59:6d:73:05:40:76:14:
         cd:eb:e8:28:d3:d9:76:6f:b8:64:7a:cf:c3:81:cd:fa:dc:cb:
         51:8e:fc:b1:6e:ac:2a:1f:ed:e3:f9:24:8e:cb:86:ae:a2:be:
         5b:b8:1d:88:57:3e:87:a5:bc:52:07:98:de:3b:86:4c:01:cc:
         4f:8c:7b:43:dc:f0:af:32:ad:83:1e:3e:36:de:10:10:d0:c4:
         64:64:b8:2a:48:91:f3:48:a9:4a:3a:38:64:d6:1f:54:4c:01:
         6a:60:d7:f2:bd:b8:bb:3b:db:8d:81:d0:71:71:49:fe:3d:3e:
         cc:3a:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:19 2026 by rpki-client