Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/7EBC5A18700311F18820273A93A30FBC.roa
File:                     7EBC5A18700311F18820273A93A30FBC.roa (raw, json)
Hash identifier:          DtLfgJelfww9oIvfomUx8toqllrQvLO5uOciU7srb3E=
Subject key identifier:   8E:1C:F7:8D:20:95:89:FE:98:0D:23:F7:CA:19:40:60:F8:AA:CB:E6
Certificate issuer:       /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial:       026F
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/7EBC5A18700311F18820273A93A30FBC.roa
Signing time:             Wed 24 Jun 2026 19:32:54 +0000
ROA not before:           Wed 24 Jun 2026 19:32:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151054
IP address blocks:        103.121.184.0/24 maxlen: 24
                          2001:df3:bf40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
                          rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
        Validity
            Not Before: Jun 24 19:32:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a3c30e6-7d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:26:52:dd:fd:a3:fe:5b:93:f5:05:d0:47:
                    2e:13:1e:ed:58:b0:df:5a:bf:99:b7:bf:48:43:80:
                    bb:22:09:ee:c8:7e:ac:44:59:05:41:35:62:2b:f9:
                    c6:c9:e6:9c:0e:11:d0:1c:3d:e5:00:d2:0b:54:1f:
                    1c:9c:57:02:ce:d2:c5:a4:5b:f0:02:c1:3b:28:72:
                    7e:0f:5a:d0:29:11:43:06:22:8e:a6:2d:26:52:6a:
                    50:57:3f:74:53:fb:e7:a8:97:a0:17:ad:13:37:56:
                    2d:2f:1c:21:b5:f9:b8:70:c7:8c:d3:1f:f5:08:95:
                    ad:1b:26:6e:d6:5d:df:b6:4b:5a:17:d9:74:b1:b2:
                    00:61:02:69:9d:df:30:46:61:23:74:b1:fd:75:25:
                    59:43:4a:93:3b:53:89:d2:e5:24:fe:ed:84:a7:c1:
                    ad:86:d7:d8:19:25:21:70:cf:2b:ed:b7:51:31:7d:
                    18:0a:e3:d0:8c:46:f7:78:0d:46:5e:59:19:e1:04:
                    0b:54:94:02:14:38:ba:82:18:58:7a:ab:e7:94:aa:
                    2b:5d:83:f1:ec:d4:e4:38:5f:c0:c3:a7:23:60:b6:
                    3e:89:73:14:e3:c5:fb:96:dc:b5:55:9c:99:0a:a8:
                    93:36:88:97:74:fe:2f:3e:e0:3c:93:c3:a7:31:c3:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1C:F7:8D:20:95:89:FE:98:0D:23:F7:CA:19:40:60:F8:AA:CB:E6
            X509v3 Authority Key Identifier:
                keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/7EBC5A18700311F18820273A93A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.184.0/24
                IPv6:
                  2001:df3:bf40::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:b1:6b:3f:a6:0b:2c:4f:26:7c:5a:48:4c:7e:ed:76:7e:02:
         4d:a0:60:c6:a0:b1:3d:dd:e4:f5:13:d7:83:c5:23:f0:9e:9b:
         6f:45:86:be:20:23:94:53:33:89:3f:d7:ab:75:a4:28:c5:83:
         97:73:0d:8f:86:59:d5:53:b4:e5:c7:ac:98:8e:38:0c:0c:14:
         35:ab:f2:9e:1f:79:f0:6b:2a:fe:12:b4:3d:7b:c9:20:86:96:
         49:47:12:fb:c4:b1:49:d0:03:01:de:85:6d:3e:a4:17:a1:e0:
         17:49:15:88:0d:d0:be:78:bd:b0:5a:3f:59:ff:cd:d5:06:71:
         bc:ca:ec:d1:04:0c:e4:31:68:35:af:97:78:bd:aa:16:77:cb:
         67:ae:68:2d:f5:17:07:67:b3:31:1f:e3:4e:55:cb:3d:f3:ad:
         39:da:7a:e9:68:11:89:81:e1:0e:cd:92:f0:98:4d:50:1e:1d:
         e9:cf:b0:01:e0:e0:e6:02:d2:12:c2:8e:89:6c:c4:ae:ae:9b:
         c0:16:21:9c:57:11:40:c7:da:83:7a:ac:75:70:2f:1d:5e:8b:
         cd:74:35:f4:fe:4d:7c:db:e5:b7:69:33:f1:3c:d3:20:59:14:
         fa:bb:4e:e2:f3:d8:17:c3:66:8a:10:91:47:d8:a3:19:e9:d2:
         16:99:97:2c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF
MkZCMzFDMTgwHhcNMjYwNjI0MTkzMjU0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNjMzBlNi03ZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtA0mUt39o/5bk/UF0EcuEx7tWLDfWr+Zt79IQ4C7IgnuyH6sRFkFQTViK/nG
yeacDhHQHD3lANILVB8cnFcCztLFpFvwAsE7KHJ+D1rQKRFDBiKOpi0mUmpQVz90
U/vnqJegF60TN1YtLxwhtfm4cMeM0x/1CJWtGyZu1l3ftktaF9l0sbIAYQJpnd8w
RmEjdLH9dSVZQ0qTO1OJ0uUk/u2Ep8GthtfYGSUhcM8r7bdRMX0YCuPQjEb3eA1G
XlkZ4QQLVJQCFDi6ghhYeqvnlKorXYPx7NTkOF/Aw6cjYLY+iXMU48X7lty1VZyZ
CqiTNoiXdP4vPuA8k8OnMcNiUQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFI4c940g
lYn+mA0j98oZQGD4qsvmMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1
MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjJCMEQvOTA5Qjc5RjBFNTJCMTFFREIyRUI2NTg1QzRGOUFFMDIvN0VCQzVBMTg3
MDAzMTFGMTg4MjAyNzNBOTNBMzBGQkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ3m4MA8EAgACMAkDBwAgAQ3zv0AwDQYJKoZIhvcNAQELBQADggEB
AIexaz+mCyxPJnxaSEx+7XZ+Ak2gYMagsT3d5PUT14PFI/Cem29Fhr4gI5RTM4k/
16t1pCjFg5dzDY+GWdVTtOXHrJiOOAwMFDWr8p4fefBrKv4StD17ySCGlklHEvvE
sUnQAwHehW0+pBeh4BdJFYgN0L54vbBaP1n/zdUGcbzK7NEEDOQxaDWvl3i9qhZ3
y2euaC31FwdnszEf405Vyz3zrTnaeuloEYmB4Q7NkvCYTVAeHenPsAHg4OYC0hLC
jolsxK6um8AWIZxXEUDH2oN6rHVwLx1ei810NfT+TXzb5bdpM/E80yBZFPq7TuLz
2BfDZooQkUfYoxnp0haZlyw=
-----END CERTIFICATE-----
Generated at Sat Jul 18 09:18:30 2026 by rpki-client