Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F632182A67B211EC9EB0B015C4F9AE02.roa
File:                     F632182A67B211EC9EB0B015C4F9AE02.roa (raw, json)
Hash identifier:          9IQgcDVfn11cuKxB46MthoTde/30ZJfuAPmdDbOtN54=
Subject key identifier:   C1:BE:72:17:BD:99:EE:38:C1:61:35:DC:6D:7B:FB:67:58:0F:9B:A8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F632182A67B211EC9EB0B015C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:20:47 +0000
ROA not before:           Sun 31 May 2026 17:20:46 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142484
IP address blocks:        103.171.64.0/23 maxlen: 24
                          103.205.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59307 (0xe7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:20:46 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6dee-d142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0f:ce:16:03:8b:a1:88:17:d0:2e:c2:3c:77:
                    b9:c3:81:b1:26:12:62:fb:4d:66:e6:1d:16:3d:98:
                    49:85:23:20:66:32:e3:4d:fa:1b:19:af:74:28:dd:
                    a8:3d:5e:c8:66:86:9a:16:bc:32:6d:3c:0a:d3:e6:
                    d2:bc:c3:3a:be:c1:89:b7:5a:7e:e4:ce:55:da:49:
                    55:71:e1:ca:a0:d6:54:96:bc:9d:ca:99:4d:32:11:
                    62:77:d4:bb:a4:b5:34:be:1a:ec:69:eb:0d:75:1c:
                    e4:c7:37:83:89:49:92:98:96:1e:d2:8d:f1:dd:ed:
                    a6:c4:38:f6:30:f6:e8:bc:de:8e:06:b2:5a:d9:3e:
                    ac:65:ea:73:5b:55:12:f7:cf:ca:95:6c:d5:23:8f:
                    34:f2:ce:d1:0e:c1:c5:09:59:b0:c4:be:61:a0:28:
                    e5:c3:a6:93:bf:a8:c6:66:91:6a:0a:a1:96:87:32:
                    81:d7:06:bd:88:6b:3f:b9:de:aa:c0:9c:9a:2e:a3:
                    0f:5b:c2:4a:1d:42:5f:0c:b8:c6:e9:cf:cc:95:d0:
                    86:c5:6f:4b:b7:b9:87:a7:2e:79:dd:73:e8:11:6c:
                    80:55:d9:d6:2e:2c:d5:02:c4:23:d2:6a:1d:f3:e7:
                    60:15:40:7b:7b:18:b6:70:03:af:06:b9:88:ad:ee:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BE:72:17:BD:99:EE:38:C1:61:35:DC:6D:7B:FB:67:58:0F:9B:A8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F632182A67B211EC9EB0B015C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.64.0/23
                  103.205.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:f9:e3:79:d3:f7:6b:bb:b5:f3:a9:ed:00:88:41:dd:b3:a5:
         97:39:f2:8d:eb:55:a8:ca:b3:7f:fd:2b:48:4e:b8:66:38:dd:
         75:0f:38:79:a0:2f:a6:bf:cc:14:2d:27:30:4c:04:e4:e3:d0:
         31:38:a8:1b:bd:cd:65:6b:9f:f7:8b:cf:fd:23:b6:61:87:81:
         b5:93:d7:d2:af:0e:58:8d:c7:41:4f:c1:7b:79:ba:5b:2a:54:
         2a:6e:e8:68:92:76:0a:ce:9a:e4:bb:64:a2:d6:ac:d8:df:83:
         e1:5a:b2:26:20:af:8b:37:16:50:7a:9b:e7:82:28:6d:72:91:
         eb:5a:25:36:ca:77:0f:82:6c:15:82:9d:2e:55:3b:fb:10:2d:
         28:b9:2d:d2:e5:f8:07:43:2d:0f:ed:0f:24:8e:ce:c5:02:f7:
         ee:9a:a0:b0:03:9b:5a:15:5c:d7:f4:69:7e:7d:57:29:ac:c2:
         10:49:ea:1f:c5:ad:a7:6e:74:bd:08:3b:23:40:73:8f:a0:39:
         70:1a:0c:a5:bb:ed:8f:39:b1:d5:c3:b2:63:7c:c0:6f:bc:69:
         f6:8e:bd:38:36:45:d6:63:ea:26:06:41:8c:f4:0a:98:f2:aa:
         27:e7:de:51:33:1f:15:ee:e8:d2:2c:b8:ab:5e:aa:4d:20:e5:
         a5:cc:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:40 2026 by rpki-client