Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
File:                     EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (raw, json)
Hash identifier:          mfGpq2l6P6Du6yh8xtxZiRodWGJkY3g1sUuNdRZnhrQ=
Subject key identifier:   29:A8:14:D5:83:A9:95:73:AF:AB:8D:C0:4A:62:D6:89:52:CD:1D:0F
Certificate issuer:       /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial:       022C
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
Signing time:             Sat 30 May 2026 10:10:36 +0000
ROA not before:           Sat 30 May 2026 10:10:36 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140594
IP address blocks:        103.251.254.0/24 maxlen: 24
                          103.251.255.0/24 maxlen: 24
                          2001:df2:cec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 03:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BFAB, serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
        Validity
            Not Before: May 30 10:10:36 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a1ab79c-e903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:94:cd:27:fc:bd:55:da:60:48:f8:6d:e2:
                    10:b4:48:3a:ae:a6:88:52:18:6e:58:05:94:d7:27:
                    61:cc:28:b7:3b:86:7c:90:f7:77:84:d1:b6:c6:dc:
                    8f:8b:4f:8f:01:df:90:96:9d:34:d3:c2:33:77:49:
                    51:d2:1a:e9:92:5d:1a:fb:76:ac:2a:c4:e1:36:83:
                    9f:71:5f:35:16:84:94:17:43:49:db:45:8c:3c:48:
                    3b:99:e1:54:10:50:e8:2e:fe:9b:f2:35:12:4a:23:
                    f1:5e:c2:33:0d:21:60:8c:cd:1f:47:22:af:01:4a:
                    71:51:24:c3:54:c3:04:4e:5a:37:1c:09:8f:48:fb:
                    a3:4a:45:14:6d:3c:1a:ae:15:b3:b5:8b:d5:aa:9a:
                    c9:95:3f:17:bc:2a:b4:ee:24:7e:da:71:ae:24:c3:
                    85:ed:44:f5:f8:5a:70:ec:5c:59:4c:a4:e2:05:1f:
                    05:43:65:75:8b:6f:6c:90:ec:05:35:8d:dd:be:ca:
                    0f:50:09:a8:2d:cf:d5:7a:73:7c:b5:8a:12:a5:5b:
                    1f:ef:5a:71:72:52:90:55:00:82:08:e7:7c:48:6f:
                    11:2a:6b:4f:c2:d3:8b:e4:2c:b0:9d:fc:22:2f:bc:
                    9d:e8:a4:64:d9:f9:24:93:73:84:aa:0e:7a:dc:f7:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A8:14:D5:83:A9:95:73:AF:AB:8D:C0:4A:62:D6:89:52:CD:1D:0F
            X509v3 Authority Key Identifier:
                keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.254.0/23
                IPv6:
                  2001:df2:cec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:9d:aa:57:5c:23:a2:4c:3e:92:db:9a:02:65:e9:57:25:1b:
         2e:5f:4b:4a:33:4e:55:09:60:8d:93:a0:78:20:4e:00:80:47:
         08:6f:a2:45:ce:ab:f5:0e:55:3a:7c:d7:0f:93:7b:75:cc:cc:
         a8:3a:b8:28:e2:32:d9:e1:8b:26:b7:14:eb:2e:88:3a:1f:43:
         0b:a0:fb:91:86:90:4e:3b:8b:84:e2:58:c8:f4:95:73:c6:6b:
         76:8d:90:9c:ce:32:62:84:5c:57:1e:23:75:41:c1:5b:5c:c6:
         23:e0:7b:e4:8c:19:ac:ac:b6:a8:b0:73:75:5c:d5:ba:c8:d4:
         e9:32:a2:8b:58:b5:a9:aa:fc:fe:c1:2c:82:5c:85:f0:63:de:
         fb:9b:e5:2e:7e:18:76:02:75:6e:47:58:d6:2b:95:fe:75:ca:
         65:e2:5c:24:a2:4a:fb:0a:2e:df:14:97:b8:04:93:fe:f6:c7:
         c2:32:72:4f:fc:8e:ec:c2:b8:c5:59:0c:32:91:bc:6d:ea:a3:
         c4:69:46:50:ea:a0:02:53:a3:97:75:8e:92:c4:34:25:e0:15:
         08:73:cc:f3:bb:fc:d5:c4:34:f5:34:03:d9:69:88:bc:ba:f3:
         48:77:5e:9f:5f:96:2d:27:e6:92:82:48:8a:a4:67:09:c2:ed:
         8e:4e:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:36:00 2026 by rpki-client