Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F316CC261CE111EF99AB3C7AC4F9AE02.roa
File:                     F316CC261CE111EF99AB3C7AC4F9AE02.roa (raw, json)
Hash identifier:          YPASJC/2uRuUbp5I1SeXtWMqVtJryUJNum4vzCIK+eA=
Subject key identifier:   85:E4:D8:87:14:55:60:64:E2:F6:DC:69:CE:61:15:38:D6:C3:89:90
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E3F1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F316CC261CE111EF99AB3C7AC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:49:42 +0000
ROA not before:           Sun 31 May 2026 16:49:42 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135714
IP address blocks:        103.141.168.0/23 maxlen: 24
                          2001:df0:58c0::/48 maxlen: 48
                          2407:45c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58353 (0xe3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:49:42 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c66a6-d0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:fe:d6:a8:b0:e2:23:94:23:b4:41:3d:c1:
                    8a:ba:4b:48:70:69:3d:37:ff:28:b6:83:47:1f:d1:
                    e5:9c:e1:4d:5f:f5:5d:85:81:db:e4:d3:d3:79:52:
                    9d:c7:5f:22:b7:7c:8d:80:e3:df:6d:af:fc:cd:ae:
                    1c:80:4c:95:6a:b4:47:2a:12:76:ba:b9:00:4b:3d:
                    4c:85:d8:7a:65:30:da:83:68:4b:79:e0:68:4b:b0:
                    32:86:2a:c6:3e:ad:00:df:31:07:8b:41:7d:7e:5b:
                    8c:36:f8:25:2e:d1:1c:49:5d:3d:cd:4b:83:bd:62:
                    4f:56:37:6d:81:cf:f9:b6:0e:ea:7c:26:a0:94:50:
                    13:b9:86:50:f8:ac:c4:1c:fe:2b:f4:3f:48:04:7f:
                    c9:a7:bd:13:10:0d:7e:e4:3a:cd:bf:c3:2c:c3:de:
                    e3:38:46:fe:86:a4:47:c3:ae:32:96:5d:fe:26:5b:
                    76:43:5d:f6:45:07:a1:33:d3:d2:b9:6d:f1:d9:da:
                    e3:82:18:b7:7b:eb:61:3e:63:47:3d:35:0b:5f:19:
                    a5:72:4d:49:57:81:e2:55:a7:78:3a:e7:c1:69:72:
                    e3:6b:ef:f3:e5:fe:cf:ca:9e:9a:1d:4b:35:6d:9d:
                    b8:e3:13:1e:dc:8d:42:8e:27:cd:8c:87:e4:34:13:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E4:D8:87:14:55:60:64:E2:F6:DC:69:CE:61:15:38:D6:C3:89:90
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F316CC261CE111EF99AB3C7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.168.0/23
                IPv6:
                  2001:df0:58c0::/48
                  2407:45c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:3a:d8:2e:6b:0f:25:de:93:5b:26:65:aa:61:75:13:30:dd:
         d4:0b:52:3f:b0:e4:91:5a:ef:84:1a:ff:48:16:63:f0:1a:c1:
         9f:5a:54:25:04:5d:ff:3c:ee:ba:4b:78:81:ee:78:72:24:5a:
         10:81:55:8f:54:77:c8:4d:e2:0f:1e:db:ae:9d:df:bd:40:a0:
         3e:df:e5:0a:07:55:1d:8f:a9:55:ee:c1:10:96:76:7a:6d:96:
         ca:5b:56:44:f7:89:56:46:81:8d:55:b9:ef:a3:79:31:ec:7b:
         5c:b7:1b:a2:2d:34:11:2d:b1:09:41:fe:2e:4c:05:fc:14:8f:
         7f:d3:75:3e:a9:20:06:68:27:a6:68:eb:27:e6:df:e4:16:d5:
         c3:cc:a8:8b:ca:a1:87:d7:2a:c7:f4:f2:b7:8f:8d:76:d1:26:
         71:ab:e3:2e:82:5a:61:e0:6a:eb:1d:22:61:27:48:3e:29:a7:
         9e:8f:bc:3c:24:bf:55:24:b0:a3:c4:72:b9:f3:c0:01:a8:b0:
         0a:37:36:04:ad:51:86:12:15:e4:45:5e:34:cd:93:46:56:c9:
         80:a7:7f:be:01:bf:d7:7b:3b:12:e0:1c:a1:e0:26:3c:45:e2:
         5c:e0:b7:21:c8:f0:14:1b:58:f1:9d:41:dd:cf:67:06:c4:73:
         c0:5c:40:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:09 2026 by rpki-client