Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa
File:                     F3301DF6D28411EC9C3B000EC4F9AE02.roa (raw, json)
Hash identifier:          ERpqrZF7cXwLWBoDWvQDofrEe2vOSr6Sb67b0xj3BLM=
Subject key identifier:   3B:C2:3B:E6:A9:5A:4E:0D:49:22:B4:E9:7F:07:6E:84:55:6E:22:DA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8B2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:29:32 +0000
ROA not before:           Sun 31 May 2026 17:29:32 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149531
IP address blocks:        103.182.164.0/23 maxlen: 24
                          2001:df2:a4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59570 (0xe8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:29:32 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ffc-6404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:94:6f:d0:9b:db:8f:0c:1a:dd:5d:64:ca:
                    a8:1a:a4:48:ff:98:7a:af:03:74:02:9c:bf:8f:bd:
                    42:34:d0:a4:b4:8c:6b:0c:d4:86:30:4a:41:ae:c8:
                    62:3c:d0:bd:0c:f9:9e:02:6f:b7:52:f5:78:ff:65:
                    8f:04:54:e2:52:55:b6:17:a7:64:40:11:ce:ca:11:
                    e3:3f:26:4d:aa:fb:17:d9:51:b7:35:19:5d:e6:65:
                    ea:be:1c:3a:ee:28:03:4a:d6:eb:68:11:80:32:74:
                    cc:59:b3:98:82:b0:8a:41:14:48:50:08:2e:b3:53:
                    91:44:08:48:66:b7:6f:91:6a:67:80:1d:18:33:e7:
                    44:aa:a1:3d:9b:8b:71:e7:15:4d:01:fa:be:e8:41:
                    47:c7:d2:3b:b3:a1:5d:0d:52:a5:7c:ef:f3:f0:14:
                    6c:19:fa:a9:0e:24:c2:42:1c:23:52:83:1b:e3:e4:
                    a8:b9:b2:e6:7b:c0:1c:db:79:21:28:ef:23:98:b0:
                    d0:09:0f:a9:ff:ad:44:d9:88:eb:80:8f:d4:8e:9e:
                    63:bf:25:6c:0a:14:08:33:e9:50:49:31:47:30:de:
                    fa:9b:60:78:42:24:87:1f:d1:bd:b0:7a:8c:ed:d1:
                    eb:dc:1c:dd:1e:1a:8b:1d:43:57:77:22:3e:7d:ac:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:3B:E6:A9:5A:4E:0D:49:22:B4:E9:7F:07:6E:84:55:6E:22:DA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.164.0/23
                IPv6:
                  2001:df2:a4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:82:24:a2:d9:5c:45:1a:86:ca:92:76:3c:90:d7:4b:b3:4c:
         0a:00:10:c7:04:fc:79:15:45:fa:6c:fa:fe:ff:98:19:db:67:
         a1:8c:d3:1a:9a:9e:c7:2c:67:21:c8:d1:9c:5b:ae:3b:41:86:
         88:3a:1f:67:6b:cd:93:92:f0:c7:3e:d6:6b:f7:1f:b2:f0:06:
         64:81:59:14:c4:47:d3:2f:f9:f2:a5:8a:6d:9b:6b:68:ac:b9:
         39:c5:58:ea:b1:9c:8b:c3:d4:52:91:23:41:8e:18:33:22:fe:
         30:6d:d3:42:f5:11:17:18:4b:5c:7a:ad:b7:a9:3a:c9:db:97:
         42:5b:b5:85:f6:ff:c1:9a:89:60:4d:b4:03:98:4b:be:a3:58:
         43:9a:7a:62:88:01:bd:a6:63:02:88:53:c9:7f:77:d1:93:48:
         03:4d:59:b1:da:0b:9c:ff:fa:7d:ba:09:4c:d0:47:b1:69:bf:
         fd:8a:10:9d:a3:96:f4:ab:1b:37:0a:29:b1:59:a7:12:14:47:
         ce:9c:20:26:52:c8:18:25:a7:cb:2f:28:2d:cb:1e:ff:20:b6:
         00:ab:27:79:1d:3e:00:37:e8:fe:2a:aa:89:50:f1:07:6b:62:
         f3:35:17:10:45:5c:e0:00:08:fd:18:d2:81:3f:e8:5a:cf:49:
         50:3e:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:44 2026 by rpki-client