Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa
File:                     E648A3D6F6D511ECA1D6171EC4F9AE02.roa (raw, json)
Hash identifier:          ee7kaOYuU1kCh8aAjCgSaNDjE+jU7KIL6dIj+suGrP8=
Subject key identifier:   3C:6F:3F:40:DB:E9:60:21:A4:08:DD:BA:2A:DD:7B:5A:4C:2C:DA:00
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EB22
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:49:44 +0000
ROA not before:           Sun 31 May 2026 17:49:44 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     21788
IP address blocks:        103.156.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60194 (0xeb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:49:44 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c74b8-bb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:3f:e0:1a:86:bf:5f:66:7e:3a:98:7c:b0:
                    c9:91:20:aa:a5:1e:bf:c6:2b:7d:93:52:60:b6:bd:
                    ad:85:aa:a6:60:9d:d1:66:79:e6:3f:74:14:8f:20:
                    59:65:32:55:a8:c5:85:0a:04:2f:66:a6:b4:59:91:
                    94:85:19:d5:4e:32:80:30:2e:1f:64:6f:29:3b:99:
                    b2:bf:c9:35:a2:c3:d2:0a:ef:5d:5c:50:1c:ad:7d:
                    20:77:bc:ab:52:2d:d7:1c:38:7f:6f:8c:1e:c9:6d:
                    fb:a2:f1:45:51:60:fb:8b:92:e2:6b:53:b2:8d:ec:
                    bf:0a:5f:aa:c8:02:05:6f:fb:ff:30:22:f5:42:cc:
                    f3:ac:cb:c1:db:03:4b:3c:e4:e1:4e:bd:61:99:03:
                    5e:d5:54:39:77:f1:18:95:a4:23:a1:c1:18:5d:26:
                    c4:89:ee:20:92:59:ce:dc:4a:39:a0:a0:57:41:0c:
                    4d:71:2c:2b:01:50:9d:1a:bd:01:03:a2:f7:12:b7:
                    0d:5d:36:4d:13:f7:a7:ef:ee:f3:e9:3c:91:ef:fe:
                    5c:80:3c:df:8c:68:95:23:3c:61:7c:8a:9d:16:08:
                    09:7f:2c:07:62:10:87:a3:75:4b:8e:19:f2:a2:82:
                    5f:a4:38:3b:a2:23:f6:dd:67:3d:fe:19:ae:8e:5b:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6F:3F:40:DB:E9:60:21:A4:08:DD:BA:2A:DD:7B:5A:4C:2C:DA:00
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:1b:18:bb:58:90:0c:39:7d:d9:e4:8a:97:2f:26:d1:5a:17:
         e2:90:fa:5a:87:e3:64:b6:bc:e2:ee:bb:75:ed:8f:5f:9f:9c:
         d0:11:73:90:3d:a3:2e:91:9e:5b:04:7c:50:a5:7c:ae:b2:f6:
         09:74:f0:b3:ae:95:cd:7f:80:af:ef:6c:ba:41:cd:b1:7d:7f:
         97:f7:f2:98:23:f6:a5:6e:1b:13:06:fe:61:37:e0:ce:e2:78:
         d7:23:08:2e:d4:d9:48:a7:a9:25:31:97:2d:24:07:cc:18:84:
         1a:bb:cd:0d:96:26:81:04:68:3b:e8:da:61:dc:d2:b7:49:06:
         4b:04:62:4d:58:4c:85:3c:bd:e7:3e:4f:a4:97:73:04:c2:36:
         fa:16:15:e2:5e:84:10:e8:d5:b7:1c:3c:d2:0b:70:ca:c5:69:
         8d:63:3e:01:aa:aa:64:5c:19:a9:6b:c2:77:ba:31:7a:32:dc:
         a8:f9:fd:23:e0:1d:c0:0a:5f:be:44:ca:d8:5e:bd:f4:1b:c9:
         79:70:c8:34:cd:e1:44:85:ed:25:52:5c:ea:34:33:dd:c0:f0:
         f7:c1:f9:c5:09:21:fd:e5:60:d7:ad:55:eb:d3:7a:37:bd:34:
         65:a0:f3:48:26:1d:3d:9e:ad:dd:3c:46:47:b3:db:93:05:42:
         2d:a5:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:25 2026 by rpki-client