Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
File:                     EF3517E8099311ECAD398842C4F9AE02.roa (raw, json)
Hash identifier:          uaoh5CFYZb26XVdVrWfq+LDihMBENqWm6FGrlr1tsmA=
Subject key identifier:   E0:4E:E3:D0:35:95:02:EF:18:3B:C0:08:AE:52:EC:25:39:A4:CB:EA
Certificate issuer:       /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Certificate serial:       05FB
Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 23:44:21 +0000
ROA not before:           Sun 02 Aug 2026 23:44:21 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142644
IP address blocks:        103.171.212.0/24 maxlen: 24
                          103.171.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
                          rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A341, serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
        Validity
            Not Before: Aug  2 23:44:21 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6fd655-b839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:44:13:57:f3:e7:24:98:79:77:53:68:bb:
                    8a:45:29:5f:d8:06:b4:38:ac:67:35:e1:c4:70:b1:
                    cd:9f:19:6f:3f:9b:79:75:99:c0:a8:43:09:40:dc:
                    d0:1e:51:dc:7e:4d:5e:84:74:ab:b0:ae:f1:87:7f:
                    1a:46:40:e1:92:8d:cd:7d:fe:1f:e3:3c:87:d1:31:
                    66:e8:ae:28:fb:ca:07:f6:16:3b:ee:f1:74:aa:45:
                    a5:fd:ae:b7:a0:cd:ba:9b:39:9b:ea:9d:99:8d:95:
                    ad:07:c9:a5:03:ec:27:b6:1a:ef:22:a8:5c:53:41:
                    d4:97:a5:3c:5b:e7:a1:75:e0:6b:78:51:22:d7:cb:
                    60:9f:60:bd:93:7c:5e:e0:0b:39:b4:b7:08:9b:87:
                    81:dd:76:9d:da:f6:17:c4:13:34:e4:77:76:96:01:
                    75:68:e4:e8:b9:10:01:9f:be:c4:f3:ae:f8:d2:66:
                    06:83:bd:aa:8e:77:75:76:c5:e2:6b:25:77:14:3f:
                    64:35:86:b2:32:6f:3b:7e:ac:6b:58:3b:72:ab:c8:
                    e4:92:b5:78:82:b5:5a:4a:25:ce:43:8b:0e:b6:02:
                    b3:ea:93:1c:0b:27:33:32:31:94:b9:26:7d:60:ec:
                    c7:68:e9:cd:ec:ef:5c:88:e0:43:89:31:e8:bc:38:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4E:E3:D0:35:95:02:EF:18:3B:C0:08:AE:52:EC:25:39:A4:CB:EA
            X509v3 Authority Key Identifier:
                keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:43:a4:7c:81:1d:31:77:b7:13:58:8c:97:ee:8f:ed:e4:
         8d:7f:ee:89:b3:ed:4f:d5:3c:a2:4c:8c:8f:6f:83:cd:d1:19:
         94:30:bc:c3:1f:84:7e:9a:f7:df:a6:00:b0:9f:a4:80:21:86:
         e8:cc:84:6c:c5:36:75:e4:22:c7:9a:a7:15:84:c7:54:b3:48:
         85:f2:63:7e:dd:c7:e5:46:a8:47:89:db:d6:3e:8e:70:2a:9a:
         27:60:83:69:d8:88:0a:f4:09:28:a6:bf:21:e5:d7:d2:d1:ce:
         14:b0:25:d3:44:eb:23:01:e4:a2:29:12:31:e3:e5:21:86:01:
         00:f5:e6:ad:fb:9f:98:8b:fd:96:5f:df:7f:8c:1e:f9:e8:4b:
         a8:e3:82:18:15:45:6b:1c:56:e0:88:48:ce:b4:de:93:c5:73:
         ed:c0:c4:d6:a8:22:3f:a1:c7:11:59:30:1b:17:2d:d9:95:2f:
         0b:d5:bf:6b:d4:52:a7:24:38:9d:21:b6:a2:56:59:6c:4b:89:
         65:ac:e8:f5:8d:52:e7:ee:27:e5:9b:f2:07:5f:bb:00:7d:46:
         a6:ec:05:78:4a:93:2e:8a:49:c2:80:54:5f:22:de:bf:18:53:
         81:c0:5d:3d:9d:27:74:0d:3e:4e:a6:6f:dc:8b:0e:f5:33:dd:
         af:43:b1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:44 2026 by rpki-client