Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DCB28F036F711F1AE3C329ABA833773.roa
File:                     6DCB28F036F711F1AE3C329ABA833773.roa (raw, json)
Hash identifier:          Y2+zsiyn/MX6ydkqVTCuqSz2EusrDLuh+4H+QJ/SMi8=
Subject key identifier:   AF:56:9A:90:7F:BA:8F:3B:1D:C4:3B:17:D0:A5:4B:A3:F7:DA:1E:4E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DE2B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DCB28F036F711F1AE3C329ABA833773.roa
Signing time:             Mon 13 Apr 2026 07:16:15 +0000
ROA not before:           Mon 13 Apr 2026 07:16:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134026
IP address blocks:        45.115.104.0/22 maxlen: 24
                          103.55.88.0/22 maxlen: 24
                          103.70.200.0/22 maxlen: 24
                          103.92.112.0/24 maxlen: 24
                          103.131.27.0/24 maxlen: 24
                          103.140.219.0/24 maxlen: 24
                          103.177.174.0/24 maxlen: 24
                          103.184.70.0/23 maxlen: 24
                          2405:5c0::/32 maxlen: 32
                          2405:80c0::/32 maxlen: 32
                          2407:c8c0::/32 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 11:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56875 (0xde2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Apr 13 07:16:15 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69dc983f-3d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5d:71:a9:6c:aa:03:7d:1f:e6:8c:f2:7d:a7:
                    d5:a5:97:7f:db:8a:34:78:9c:f5:c1:77:4d:5f:64:
                    1a:de:76:6b:d7:1c:30:d3:ef:70:7e:cb:ed:fb:b3:
                    fa:bd:72:8f:2a:6d:35:a0:70:e9:d6:82:3e:92:20:
                    ac:c8:85:60:19:e7:c1:91:17:95:bb:36:48:65:fc:
                    64:c5:98:bc:07:71:95:a0:52:88:30:30:de:ef:0b:
                    c3:fe:46:3b:01:af:b6:a1:da:6c:70:0c:e3:86:a1:
                    f1:81:33:a7:3b:22:4c:91:17:1b:61:e9:36:6d:fe:
                    4a:79:bd:80:99:eb:50:a0:16:cc:6a:bd:24:c7:8b:
                    0e:5b:dc:84:8f:9f:3a:b8:b1:df:f4:91:1c:37:cd:
                    b4:fc:b0:8f:3a:01:5c:7b:32:f6:14:0b:b4:d1:c9:
                    68:dd:ed:c2:a2:c6:17:aa:cd:b7:27:0f:ff:30:ef:
                    96:c6:04:51:d1:cb:2c:83:b5:a9:b9:ee:74:f8:53:
                    3c:22:bd:eb:64:d7:a6:c9:d3:e9:87:5d:0b:25:e2:
                    1d:04:5b:27:c1:59:e6:e4:03:a0:bc:df:ac:01:c9:
                    8d:b4:eb:32:4c:2a:e9:ec:ac:f0:0b:e2:fc:88:a7:
                    aa:9d:1c:81:9e:e7:34:cc:6c:86:be:7f:42:ae:ac:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:56:9A:90:7F:BA:8F:3B:1D:C4:3B:17:D0:A5:4B:A3:F7:DA:1E:4E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DCB28F036F711F1AE3C329ABA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.104.0/22
                  103.55.88.0/22
                  103.70.200.0/22
                  103.92.112.0/24
                  103.131.27.0/24
                  103.140.219.0/24
                  103.177.174.0/24
                  103.184.70.0/23
                IPv6:
                  2405:5c0::/32
                  2405:80c0::/32
                  2407:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:2a:22:a8:a9:ff:09:87:26:7d:5f:bf:be:0f:bb:af:eb:18:
         47:44:fc:e4:bb:1b:7a:6a:be:1c:67:89:cd:a1:4e:8b:cf:db:
         73:99:5f:8b:dd:4b:71:ba:49:45:e9:2d:b1:72:9b:44:d8:e8:
         56:23:0e:91:4a:fe:5d:ba:b2:ee:34:14:77:8e:3b:2c:67:1b:
         95:bb:ad:6b:a9:b5:12:ec:1f:33:92:77:56:fd:6c:51:71:e0:
         16:64:9d:60:ac:c9:27:b3:56:ff:1a:d8:92:a0:f9:ae:7f:c0:
         85:bc:a2:68:d4:db:e1:0f:08:69:c4:fb:5e:6b:e9:e4:7a:0f:
         4e:77:84:1c:7e:7a:7f:b9:71:16:a4:82:1a:2b:ea:8a:4b:f3:
         9c:d7:dc:d2:73:ff:eb:fb:03:37:f6:63:44:72:68:67:91:cf:
         dc:dd:2f:9c:c0:66:60:a1:8f:11:31:9e:24:1e:9e:9a:68:ba:
         d0:4e:c4:a4:40:c9:63:38:b5:df:11:1d:ec:7b:03:cb:96:d1:
         19:aa:97:cc:89:75:17:c9:46:3d:5d:8c:cc:cf:24:5c:aa:a9:
         32:bd:cf:c9:2f:5b:6d:51:88:e6:a1:39:96:da:99:93:38:84:
         34:31:92:52:c3:4f:65:33:c0:49:b6:49:69:41:8e:23:fc:be:
         68:52:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:50 2026 by rpki-client