Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC929F26F59611EFBE15FE54C4F9AE02.roa
File:                     FC929F26F59611EFBE15FE54C4F9AE02.roa (raw, json)
Hash identifier:          J6LY3d+8NZ8QT587HCTg0eb8DBiTdyrpxBBb83ni3Cs=
Subject key identifier:   E6:95:96:D7:D3:2E:61:E4:19:C4:CF:59:67:BC:A1:19:DD:6A:95:B4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E413
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC929F26F59611EFBE15FE54C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:50:52 +0000
ROA not before:           Sun 31 May 2026 16:50:51 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135760
IP address blocks:        103.67.96.0/23 maxlen: 24
                          103.75.160.0/22 maxlen: 24
                          103.85.210.0/23 maxlen: 24
                          103.155.194.0/24 maxlen: 24
                          103.189.130.0/23 maxlen: 24
                          2001:df0:d040::/48 maxlen: 48
                          2404:9740::/32 maxlen: 40
                          2404:9740::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58387 (0xe413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:50:51 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c66eb-77c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:7d:76:61:ea:bd:ea:6e:b3:54:ce:d6:78:
                    c0:8b:c9:cd:9f:8c:52:3e:ca:e2:ec:8e:3c:81:6e:
                    e2:08:bf:81:6e:45:85:0f:e3:40:b8:a7:52:e0:48:
                    3d:21:ff:90:4a:c5:5a:55:b7:7d:ce:47:59:8d:07:
                    d4:b7:9f:b3:d8:6b:06:50:24:4d:e6:fb:a4:d6:95:
                    9c:3b:af:22:07:fb:8a:3b:f8:e6:ec:23:33:1c:43:
                    3b:cd:47:32:46:aa:40:a3:dd:a4:60:06:c7:59:ae:
                    ed:4e:59:bf:fc:9b:ff:91:9c:6f:5e:02:7e:8d:42:
                    18:35:b6:58:23:b3:52:bc:a4:46:19:c5:6c:98:6d:
                    7a:5a:22:88:fc:f3:f5:18:58:72:9f:34:c9:56:c6:
                    3e:9e:8c:96:b1:e2:5b:64:63:c5:c5:5e:98:2e:67:
                    f5:63:93:05:4c:53:28:9c:ec:f3:2a:32:bb:b5:fd:
                    ec:02:fc:3b:38:65:3b:19:02:3f:b3:b6:d7:96:ab:
                    3e:3c:1d:11:ad:bf:a3:a4:88:3d:50:c9:34:d6:75:
                    84:b1:0f:cd:11:09:0f:e6:87:8c:dd:2b:9f:fc:40:
                    fa:d5:12:b2:4a:5f:a3:d1:47:18:91:06:8b:82:56:
                    45:20:c0:e7:7c:a8:d9:d7:d1:5b:ac:89:fb:0a:95:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:96:D7:D3:2E:61:E4:19:C4:CF:59:67:BC:A1:19:DD:6A:95:B4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC929F26F59611EFBE15FE54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.96.0/23
                  103.75.160.0/22
                  103.85.210.0/23
                  103.155.194.0/24
                  103.189.130.0/23
                IPv6:
                  2001:df0:d040::/48
                  2404:9740::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:65:ca:2c:6a:06:4c:ba:cd:18:e9:09:bc:93:45:07:3c:17:
         4e:f7:02:11:46:a5:2f:51:f9:bc:16:9b:4e:20:3e:3b:96:4f:
         94:24:55:5d:af:60:04:e2:13:4b:c3:c4:24:2b:65:4f:ed:72:
         9c:40:67:61:56:a6:6f:6c:8d:08:86:c5:9d:c9:d8:89:93:e9:
         8b:a5:77:a3:2a:e5:0d:d8:91:6c:79:70:c7:1a:bf:d7:52:67:
         79:3b:58:49:70:06:14:c4:44:b2:c9:06:bf:f3:6d:a7:85:d8:
         4a:b3:06:84:7b:6d:ba:5f:2a:94:8d:f2:91:d2:1b:70:30:dd:
         91:56:3d:95:ea:aa:fd:bd:0a:ec:3b:6e:9a:b9:24:fc:6a:77:
         fb:43:79:24:28:e1:20:e4:e6:c2:80:51:48:ab:a9:60:f4:02:
         8b:5b:42:59:33:b3:8a:59:b2:45:6c:a3:ee:96:04:8d:8b:9c:
         9a:20:76:6e:fe:51:5c:48:55:51:bc:9b:7e:34:de:1e:77:ca:
         7b:7b:a7:00:4f:86:90:a1:33:74:4e:62:1d:55:68:47:ca:76:
         3f:a8:a8:e2:97:63:e7:fa:0f:be:b2:ee:45:e5:23:e2:c6:29:
         65:56:48:ff:b3:65:3f:2e:61:37:25:99:d2:34:0c:6c:2f:ef:
         96:14:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:26 2026 by rpki-client