Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEF10D746C6611F08FD6DE47C4F9AE02.roa
File:                     FEF10D746C6611F08FD6DE47C4F9AE02.roa (raw, json)
Hash identifier:          NwGlpaKWExl8BI2lRW9UKM2b/BBgw6K0x63czh9uDpM=
Subject key identifier:   72:C8:DC:8E:4B:18:ED:F1:51:BB:42:F8:3D:C8:A6:24:46:7A:2C:19
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EB03
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEF10D746C6611F08FD6DE47C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:48:44 +0000
ROA not before:           Sun 31 May 2026 17:48:44 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     17426
IP address blocks:        45.112.52.0/22 maxlen: 24
                          103.51.116.0/22 maxlen: 24
                          110.173.176.0/20 maxlen: 24
                          203.115.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60163 (0xeb03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:48:44 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c747c-3764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:4a:78:c9:17:d2:6c:9f:89:3e:c6:cb:24:
                    98:ee:35:6b:e7:a9:4c:9a:fe:3d:49:43:4a:e6:d8:
                    31:01:8a:96:f7:06:df:63:b4:4b:07:9f:2e:69:dc:
                    4a:aa:8a:c6:6b:5a:c4:89:ba:ca:85:ee:7e:54:5a:
                    7a:66:1d:e2:b9:4f:d3:37:14:35:bf:28:ff:ac:6d:
                    ee:e8:63:96:cd:9d:7b:e3:8b:b7:c5:52:48:a2:a9:
                    a7:1f:c9:c9:41:e1:3b:9f:81:bc:99:16:0d:3a:93:
                    9f:38:29:34:f8:0e:4f:d4:a4:a6:71:92:8d:7a:95:
                    e6:2e:88:0f:5a:7e:1e:e5:35:9b:91:59:30:a2:a8:
                    ea:6b:78:cd:94:2c:02:b3:a1:30:10:f7:e4:76:d2:
                    6d:1f:09:e6:70:05:8e:a9:87:2d:d2:f1:cf:09:b2:
                    bd:92:19:13:b1:86:3d:ac:5e:6c:a0:ab:6c:d0:78:
                    2c:d2:84:16:8d:88:ec:79:10:43:e0:12:95:c4:48:
                    5d:c5:f6:46:3d:0a:68:f2:8d:b3:58:2b:bc:b7:0e:
                    0f:00:a6:5f:de:0c:c3:1b:d4:43:ad:25:20:15:89:
                    53:b5:0c:7c:29:2c:c1:6e:ff:03:8e:c2:ce:9b:bc:
                    23:44:ab:8f:5d:26:90:a8:0c:4b:6f:59:50:75:5a:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C8:DC:8E:4B:18:ED:F1:51:BB:42:F8:3D:C8:A6:24:46:7A:2C:19
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEF10D746C6611F08FD6DE47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.52.0/22
                  103.51.116.0/22
                  110.173.176.0/20
                  203.115.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b1:70:19:ec:f8:d8:65:45:19:40:88:c6:1a:59:fc:e1:e1:c4:
         7a:52:5f:bd:ff:f5:43:3b:3c:05:b9:a2:a6:ab:e6:1a:fa:d3:
         9d:c2:3b:bf:9f:f5:bd:2a:0f:57:62:19:32:bd:96:ff:31:62:
         98:d1:1f:e8:cc:81:ce:92:cc:22:07:64:ab:77:95:63:a2:d7:
         35:c4:f5:01:35:ff:f3:71:c5:81:0c:27:b2:ce:29:91:a2:a0:
         2d:ed:4e:ec:6c:57:a4:99:c2:58:d8:bc:64:6f:66:6e:d2:1e:
         7a:ef:7a:33:1d:8a:fe:80:86:41:d5:13:83:f7:d2:5d:99:7c:
         b8:82:e4:10:70:d3:17:68:82:14:f4:fc:8b:bb:80:19:84:c6:
         48:72:52:5c:66:a3:c9:f6:ac:12:24:e3:58:fd:94:e2:72:0c:
         11:db:3e:da:5a:72:85:eb:55:1d:6f:14:fa:3a:4a:2e:1a:b6:
         61:03:52:80:b3:08:1a:cc:13:40:25:15:17:13:3c:41:35:3a:
         82:03:e0:98:c5:97:d7:d1:86:df:48:88:6c:65:d1:74:6e:1c:
         65:ac:34:5d:29:77:c4:95:fc:00:61:ed:46:c4:cc:4a:0c:95:
         1e:cf:3a:f1:84:97:e6:1a:8a:23:19:32:e9:46:4c:2b:f1:00:
         fd:67:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:49 2026 by rpki-client