Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/0274EDA84F7E11F1BF198B9FCD833773.roa
File:                     0274EDA84F7E11F1BF198B9FCD833773.roa (raw, json)
Hash identifier:          2b1uQMF4FwcVSTC/yqeg7TBJVN4RXUpB0rp+hLS1BIw=
Subject key identifier:   DC:7E:04:05:32:6F:21:A9:C9:44:EB:8D:62:44:11:D4:B3:3A:F5:7B
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       193D
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/0274EDA84F7E11F1BF198B9FCD833773.roa
Signing time:             Thu 14 May 2026 10:16:45 +0000
ROA not before:           Thu 14 May 2026 10:16:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134512
IP address blocks:        43.239.143.0/24 maxlen: 24
                          103.71.173.0/24 maxlen: 24
                          103.71.174.0/24 maxlen: 24
                          103.71.175.0/24 maxlen: 24
                          103.194.168.0/24 maxlen: 24
                          103.194.169.0/24 maxlen: 24
                          103.194.170.0/24 maxlen: 24
                          103.194.171.0/24 maxlen: 24
                          103.248.52.0/24 maxlen: 24
                          103.248.53.0/24 maxlen: 24
                          103.248.54.0/24 maxlen: 24
                          103.248.55.0/24 maxlen: 24
                          103.252.220.0/24 maxlen: 24
                          103.252.222.0/24 maxlen: 24
                          103.252.223.0/24 maxlen: 24
                          2406:9980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
                          rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 16:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6461 (0x193d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: May 14 10:16:45 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a05a10d-965b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:58:6d:fd:88:1f:33:1c:ba:71:eb:ed:9d:bf:
                    75:2d:7f:24:59:9b:29:4f:4e:f5:aa:4c:71:8c:b6:
                    aa:47:87:42:b5:aa:eb:37:36:9c:3c:4f:13:b6:da:
                    74:85:31:79:de:7b:a3:a4:c0:5c:b9:a0:44:2a:05:
                    58:16:44:c5:4d:75:75:30:63:42:72:30:ec:d2:4e:
                    05:f4:07:10:8c:5c:97:75:d3:73:bd:2d:3d:4c:5b:
                    e6:52:7d:6e:33:35:92:29:f3:4b:68:a8:ba:be:9f:
                    57:1a:a1:8d:81:ca:f4:fd:3a:44:73:17:54:7a:69:
                    99:f5:69:41:a0:56:b6:f0:1d:6b:35:d1:25:a4:4b:
                    6d:19:9f:21:95:fa:90:28:8d:d1:2f:31:e5:4a:2f:
                    5f:d4:2e:c8:7d:25:1b:2b:3b:f7:13:74:9b:71:07:
                    5b:fb:81:7a:50:f7:04:70:ad:e8:5e:8d:2d:c2:ce:
                    32:b3:5f:c2:ba:61:68:ad:b0:1d:cf:69:5e:f4:17:
                    6f:dc:ee:99:cd:75:65:8f:84:eb:f7:1d:85:35:6f:
                    97:7c:d0:82:70:d8:13:3d:cc:ac:4d:88:c3:7a:38:
                    4e:5e:83:8b:b0:c4:b1:fb:3d:92:dc:ac:53:d4:8e:
                    31:ca:b8:50:95:38:c6:9a:6e:65:b7:2e:c7:20:6f:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7E:04:05:32:6F:21:A9:C9:44:EB:8D:62:44:11:D4:B3:3A:F5:7B
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/0274EDA84F7E11F1BF198B9FCD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.143.0/24
                  103.71.173.0-103.71.175.255
                  103.194.168.0/22
                  103.248.52.0/22
                  103.252.220.0/24
                  103.252.222.0/23
                IPv6:
                  2406:9980::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:b8:a6:91:43:d8:d3:4a:d0:18:1a:d5:d8:46:49:9b:1b:
         6f:bf:c6:52:d5:86:dc:84:c6:e6:5e:05:80:92:c5:0f:30:4c:
         90:95:17:cd:5d:88:7e:32:aa:d5:13:86:7f:72:62:22:b8:4f:
         38:48:b9:49:96:08:4f:d7:29:91:d3:20:25:2c:d6:1a:9c:49:
         5b:3c:52:6f:36:ed:8a:18:5c:05:71:88:cf:55:71:0a:81:bc:
         78:bc:81:2f:da:9c:c6:d0:11:7a:bc:55:a4:cb:59:29:b6:e6:
         b0:44:bd:30:d3:d8:88:7e:08:bd:35:de:46:36:39:52:db:e3:
         b9:d0:f5:b4:bb:de:82:28:01:a3:45:ce:57:92:a9:d6:67:f0:
         c4:8b:82:62:32:ff:60:b1:76:8b:1c:a2:f9:55:ee:8e:ea:41:
         b2:97:e4:b1:5a:9d:99:f0:53:d3:e1:a2:66:80:8b:75:75:a2:
         72:8d:2f:07:81:91:6c:a2:76:9d:17:d3:f1:b6:67:8f:b7:4a:
         a7:cd:95:44:1e:99:4d:eb:e8:38:22:db:73:2c:6b:fd:46:32:
         25:93:d0:76:50:c8:3f:13:1c:c5:71:9b:19:ac:86:33:5a:d0:
         78:71:69:44:51:5c:74:ee:cc:ed:b5:e2:88:08:ce:9d:9c:b3:
         19:40:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:07:11 2026 by rpki-client