Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
File:                     EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (raw, json)
Hash identifier:          g2ZNylQcb8etPgpxOKMZxyMxotmSOP4baNAPXmd/M58=
Subject key identifier:   59:FE:A1:5E:B1:1A:BA:8E:63:3C:D8:14:D0:47:62:CE:67:52:D3:83
Certificate issuer:       /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial:       0244
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
Signing time:             Thu 09 Jul 2026 04:31:46 +0000
ROA not before:           Thu 09 Jul 2026 04:31:46 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     140594
IP address blocks:        103.251.254.0/24 maxlen: 24
                          103.251.255.0/24 maxlen: 24
                          2001:df2:cec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BFAB, serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
        Validity
            Not Before: Jul  9 04:31:46 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4f2431-5c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:a0:74:49:c9:53:77:ad:aa:dc:32:8f:25:
                    fa:32:62:62:b7:54:17:69:b1:cf:30:66:1c:d0:3b:
                    1f:e2:a9:92:73:bf:54:8a:cf:2a:c0:22:07:13:5c:
                    1e:18:83:df:28:91:40:8e:63:ff:c4:34:bd:88:ec:
                    fe:31:70:47:52:24:b8:31:54:5b:08:9c:a6:17:0b:
                    83:8e:2d:cd:5e:b1:04:79:d1:7a:52:0c:01:79:e3:
                    95:61:b7:85:76:48:c5:98:c2:2d:b8:b6:85:61:ed:
                    6f:31:75:9d:7d:5a:f0:6f:a5:a8:cd:6a:c5:9f:19:
                    d1:1e:5e:22:44:71:1f:a3:e5:6f:0e:09:a7:87:dc:
                    2f:ba:ed:f9:d1:b6:9d:94:10:aa:7a:7b:4b:b0:5f:
                    2f:28:dd:0a:91:db:9d:a3:1f:96:64:6e:e8:18:05:
                    d0:59:7d:95:f0:51:e8:56:d6:ed:99:f1:2b:70:07:
                    ff:bd:90:19:b7:e4:81:c8:22:73:8e:02:26:02:45:
                    de:05:a1:42:5a:49:97:55:09:55:65:38:8c:aa:33:
                    a6:b9:aa:3f:81:6c:7f:08:cc:9b:ad:07:8e:2a:1f:
                    01:54:ba:00:a1:7e:6c:cf:e3:4b:9f:16:18:af:5a:
                    1e:d4:20:e6:30:37:a2:8f:25:c1:74:34:9d:0b:2f:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FE:A1:5E:B1:1A:BA:8E:63:3C:D8:14:D0:47:62:CE:67:52:D3:83
            X509v3 Authority Key Identifier:
                keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.254.0/23
                IPv6:
                  2001:df2:cec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:47:04:ea:78:2b:52:4e:7f:04:44:82:d1:c6:40:bf:d1:
         02:5a:5a:c3:a4:40:10:84:44:22:39:bc:bf:99:7d:a7:64:05:
         f3:6c:5a:fe:92:65:62:d5:12:56:1e:e6:75:6f:3b:6a:66:9c:
         59:52:0d:ec:59:36:0b:d3:64:99:5e:b3:1f:d8:8f:35:46:c1:
         b8:d8:8f:2c:29:1d:ec:43:21:5a:89:96:ee:69:4f:c6:17:82:
         97:38:87:70:24:03:84:cd:7c:70:48:d7:f4:66:1a:cb:8f:07:
         71:71:e7:ec:ed:a8:4f:92:1d:f3:c0:08:d3:a4:0b:23:8f:87:
         ad:d6:f5:cd:e9:4e:35:76:bd:86:c2:76:b1:6c:65:ab:9a:a2:
         c2:27:e2:bd:47:6d:88:07:59:af:4a:47:6a:9d:0b:2f:33:49:
         13:9f:16:38:c2:d2:95:c7:f5:d2:bf:97:d3:d1:e6:c7:fd:f5:
         6f:07:50:9c:4a:21:51:39:3f:92:a0:2b:59:d7:9c:36:ab:51:
         8b:4f:f8:5a:02:7c:c1:90:78:27:76:11:3e:ef:02:6d:90:89:
         af:d4:e5:9f:27:e8:2a:ee:d8:61:8b:03:ae:49:47:34:75:46:
         98:da:fb:c8:3c:8d:9c:15:4a:77:b7:47:28:9c:6c:e2:d3:96:
         04:a5:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:35:54 2026 by rpki-client