Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F7FD7ABDCD11EA8E393E09C4F9AE02.roa
File:                     F4F7FD7ABDCD11EA8E393E09C4F9AE02.roa (raw, json)
Hash identifier:          g5DSTuo7SdU2cINeeWgBvNv5BgkzVXDUt6Sm2XasnB0=
Subject key identifier:   3A:2D:25:D8:60:11:95:11:D9:DB:AF:97:F9:C7:B5:C1:71:AF:90:CF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E56E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F7FD7ABDCD11EA8E393E09C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:02:05 +0000
ROA not before:           Sun 31 May 2026 17:02:05 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137627
IP address blocks:        103.129.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58734 (0xe56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:02:05 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c698d-7243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:dc:e6:b6:f3:34:16:b4:68:71:e3:67:f1:
                    53:31:12:db:a2:ea:b4:88:68:54:d7:c3:51:b5:74:
                    ff:af:73:87:1c:08:75:7b:9f:f6:12:bc:56:c7:ea:
                    5d:8f:59:ed:24:9d:94:17:3a:80:6b:48:94:4c:00:
                    66:49:d4:87:48:7a:92:ad:d5:b4:bd:e5:3d:66:e4:
                    e0:14:ac:11:61:f9:95:77:9a:e4:2a:ed:d8:1f:14:
                    1e:e3:b2:8f:c0:07:9e:56:bb:2e:b0:58:11:dc:48:
                    6f:d5:7c:b5:42:33:fc:61:8d:4d:50:1d:4b:5b:96:
                    ab:5f:7c:0e:5c:cc:4c:09:32:b5:7e:0b:af:21:cb:
                    ec:bb:8a:4c:ba:f1:22:78:ed:4d:8b:17:9e:90:7e:
                    9f:53:f5:bf:4c:72:b8:38:df:23:6b:0e:73:59:b3:
                    23:9b:df:12:49:55:fc:a4:94:e6:f3:3c:54:74:dd:
                    3f:38:98:1c:fb:ba:83:48:0d:e0:c2:61:73:2e:99:
                    63:33:46:d6:a5:b3:41:6e:3c:a2:de:48:d9:de:3c:
                    a7:97:83:80:46:74:30:7d:0c:b8:e3:62:cd:8a:94:
                    a6:11:e6:f5:0a:cc:58:3e:b4:39:d7:db:c6:a4:e6:
                    df:ae:3f:ae:61:21:a6:e1:03:64:87:bb:d9:58:b5:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2D:25:D8:60:11:95:11:D9:DB:AF:97:F9:C7:B5:C1:71:AF:90:CF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F7FD7ABDCD11EA8E393E09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:fc:cb:3e:41:d1:44:df:c0:49:53:8b:81:2c:bc:59:11:bd:
         67:bc:8b:79:03:a9:c4:06:b7:cb:df:86:9f:5e:3a:4e:5d:a5:
         8c:aa:7d:c1:fe:cd:b8:a9:24:c2:57:2b:b1:ef:7c:28:c1:b0:
         f9:a4:68:af:b0:14:83:c7:c3:87:d9:6c:72:dc:0b:99:f7:7a:
         55:1d:40:2f:92:7e:99:60:34:21:45:94:8a:65:8d:4d:d8:e9:
         e8:e6:e5:60:cc:76:e5:4e:31:fa:f6:ae:53:83:17:19:1e:61:
         75:4b:36:6b:cc:82:fb:02:a3:ac:14:7d:2e:d4:12:d2:a9:37:
         f0:0d:4f:f1:31:1f:04:02:1a:ac:16:7f:9a:66:9a:f4:81:37:
         bc:14:c2:c6:c7:42:37:51:35:7d:f9:b3:a5:c1:e6:ac:47:1a:
         ff:86:81:60:47:29:99:81:1d:dd:85:a2:3b:ae:c4:b1:2d:4f:
         09:9c:a3:d7:56:82:26:96:4c:a0:e2:19:09:7b:ec:1e:14:a4:
         6c:e4:de:53:70:32:dc:1d:0f:c1:a4:52:87:9c:ed:83:e8:da:
         3a:2e:5b:7a:55:45:20:15:bb:86:56:16:01:9c:c1:a5:af:b9:
         1c:5d:d0:fc:b7:c3:a0:4e:11:a0:69:19:d1:b4:a9:a5:ed:53:
         59:c8:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:42 2026 by rpki-client