Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B301322BEE11F0A26D1537C4F9AE02.roa
File:                     F8B301322BEE11F0A26D1537C4F9AE02.roa (raw, json)
Hash identifier:          yBVBAUJQ9zuCMTewIXZQZ94iZSTEacBFoQj/ohOwVWU=
Subject key identifier:   BA:63:A2:43:C3:C0:87:45:29:86:EF:17:55:A0:31:31:DC:CF:E0:74
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E573
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B301322BEE11F0A26D1537C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:02:15 +0000
ROA not before:           Sun 31 May 2026 17:02:15 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137634
IP address blocks:        103.115.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58739 (0xe573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:02:15 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6997-29c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:b9:ba:67:1a:25:f6:9e:12:77:96:17:f1:
                    14:b1:ee:0e:52:d9:07:1f:0a:32:d8:55:5c:9e:52:
                    bd:e5:99:82:ab:3e:90:b7:d5:45:d1:42:4a:5a:67:
                    3f:13:d7:c4:15:71:e8:73:88:59:cd:ed:5f:09:a9:
                    e7:26:74:57:81:f7:3e:cd:d5:73:56:56:c2:c1:9e:
                    da:4c:83:cd:89:e9:79:59:5d:40:f0:3c:5a:9f:ce:
                    18:e2:6a:94:3a:3d:d6:86:18:57:73:47:95:d9:c1:
                    c0:d3:b9:80:72:f3:85:e7:e2:9b:13:b8:74:42:ac:
                    b5:ae:8a:32:d7:b7:00:e8:21:6c:b1:21:37:76:eb:
                    9b:10:2b:78:fa:41:f4:55:ed:c5:4c:98:7d:1e:7e:
                    7c:60:03:b3:cf:50:e9:78:ba:4a:26:84:86:db:8a:
                    02:3a:7b:9a:9c:a6:41:0b:6d:07:05:0d:4d:2e:86:
                    ea:09:da:46:86:87:5a:df:03:aa:cf:99:4a:5f:56:
                    98:de:5b:f9:ea:3c:39:a4:05:3c:ad:3b:13:ac:59:
                    ff:ac:f6:d4:0b:bb:8f:36:05:8a:be:3f:fd:6f:4e:
                    a3:ac:0e:a2:9a:f4:45:3b:11:a7:8f:c0:37:5f:28:
                    a0:fa:b9:c0:19:8a:45:0a:9a:d0:04:da:be:2e:db:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:63:A2:43:C3:C0:87:45:29:86:EF:17:55:A0:31:31:DC:CF:E0:74
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B301322BEE11F0A26D1537C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9c:68:43:3b:d4:06:32:50:55:77:84:59:02:16:b4:32:22:
         1a:6e:26:79:f7:72:7a:1d:17:8a:95:29:b2:fb:e5:5e:33:61:
         21:f4:0d:1c:e9:80:a4:96:43:28:b4:ab:bf:ad:fd:20:b2:f0:
         9d:88:03:09:87:42:5f:34:fd:03:7a:3e:88:37:6d:a5:c3:f5:
         54:0b:b9:d8:75:97:69:b7:8d:ec:a4:97:49:18:3d:c9:76:de:
         65:8c:df:98:87:37:e7:98:85:99:9e:4f:d8:0c:39:cd:7d:b4:
         0c:15:2c:b1:2e:4d:19:73:e9:d1:3e:e1:f2:1b:98:bd:6c:98:
         14:41:72:23:7e:d0:c4:26:73:24:0a:fa:97:f3:6c:fa:75:6f:
         09:9f:6f:2b:b1:ec:9c:ad:12:4e:91:e8:5e:d9:f5:7d:65:72:
         1a:f3:e3:d6:93:09:66:a5:91:92:f2:8d:80:5a:aa:de:df:d1:
         57:06:2f:7e:67:84:34:3c:d7:81:f9:bd:d2:7b:1f:5a:75:36:
         6c:c1:f2:99:41:b8:a2:bb:48:b6:34:eb:48:33:09:d8:bf:45:
         bc:80:03:4e:15:31:76:4b:4b:86:6b:73:8b:97:e6:aa:8a:66:
         80:86:f4:54:58:95:07:c7:2f:fe:6d:c3:09:11:1e:87:19:68:
         8c:67:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:43 2026 by rpki-client