Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
File:                     012EAE068C1411EDA66E4F28C4F9AE02.roa (raw, json)
Hash identifier:          drSvdTOsbz0h/4mHqOhX/zMvngysDYjt/8XAXSRubvM=
Subject key identifier:   EA:A1:AB:5C:6E:20:36:EA:81:5A:7C:8B:D9:45:94:E3:89:7E:31:70
Certificate issuer:       /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial:       0610
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
Signing time:             Thu 18 Jun 2026 07:33:50 +0000
ROA not before:           Thu 18 Jun 2026 07:33:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140499
IP address blocks:        103.149.240.0/24 maxlen: 24
                          103.149.241.0/24 maxlen: 24
                          2001:df3:4980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
                          rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
        Validity
            Not Before: Jun 18 07:33:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a339f5e-aa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:ad:53:e7:cd:e5:4e:95:96:74:a3:66:21:
                    49:56:24:00:66:a5:f1:76:3e:11:74:b7:37:17:52:
                    2b:49:8f:0f:86:1b:7c:57:84:8c:54:3a:4e:5e:5f:
                    40:d1:d6:bf:a1:21:fd:f3:54:9f:ab:b2:92:c5:17:
                    b0:70:98:bc:96:26:c3:05:72:8c:b2:7b:6c:e2:ea:
                    75:55:d4:08:bb:8b:33:7a:05:cc:29:21:0a:7b:8b:
                    b8:cb:8f:7b:15:ae:df:3d:e1:2b:3f:a4:a6:eb:9e:
                    ce:ba:67:77:45:5b:d5:c5:86:86:b4:a8:9b:47:98:
                    9a:1b:94:ee:08:39:2b:cb:ad:b4:ff:3d:07:ba:5e:
                    a6:b8:ce:97:17:90:e1:6e:24:a7:a5:72:d2:18:30:
                    2d:05:32:1f:25:c8:40:58:51:c3:f1:24:9e:54:87:
                    65:51:b1:92:7c:0e:15:5c:ec:33:34:23:66:e2:36:
                    27:08:0f:68:cf:da:41:7a:dd:44:78:c8:76:fd:11:
                    bd:8d:e3:d0:f0:76:4c:6a:b8:9e:0f:51:8d:59:b9:
                    3e:38:67:b7:c0:e0:b0:ba:8e:08:94:15:4e:d0:b1:
                    96:15:54:17:41:b0:a2:00:fe:a0:ed:31:72:c7:11:
                    04:63:df:99:27:18:54:79:bc:8a:b1:8d:d1:5d:65:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A1:AB:5C:6E:20:36:EA:81:5A:7C:8B:D9:45:94:E3:89:7E:31:70
            X509v3 Authority Key Identifier:
                keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.240.0/23
                IPv6:
                  2001:df3:4980::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:3f:59:71:09:95:9a:13:c7:87:2d:7b:ea:8c:69:44:4e:
         c9:db:52:b9:07:12:81:bc:59:0d:f5:27:80:6a:b9:7f:e7:ec:
         40:51:ed:dd:ca:d3:5d:0c:4a:98:39:4f:e5:f5:68:54:9b:3d:
         85:c5:59:b1:63:2e:3c:b9:f0:96:c5:2a:7d:50:6e:b8:cf:36:
         97:b2:4f:24:4c:c3:10:dc:fc:fa:42:c9:5e:b2:13:7e:c4:57:
         fe:d3:f8:2c:85:b5:f3:cb:7d:ef:21:0c:8c:ea:11:1a:1a:ab:
         fa:a8:b4:08:79:ef:01:a2:19:92:c5:e5:1e:5e:f6:0d:d6:dd:
         0c:08:6e:fd:aa:28:fc:34:fe:37:1d:dd:4f:63:e9:d5:52:03:
         43:16:df:2a:6b:eb:e4:8e:d2:e8:7b:c7:50:14:9e:bb:99:db:
         2e:59:6d:32:fd:de:c1:f7:d2:ac:9f:63:c9:b6:91:f6:fe:06:
         85:b1:6c:1e:81:47:98:9b:ff:09:d8:21:3c:b6:43:e4:4f:54:
         94:15:b0:e9:e6:40:7c:52:3e:15:90:5d:b8:61:a6:2c:d4:10:
         f0:98:d8:39:8b:39:24:88:8b:2e:ac:6c:f9:72:69:c5:34:8b:
         a3:5a:a3:22:c8:27:f9:1d:84:b6:10:94:b0:85:46:94:64:d4:
         04:11:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:03:49 2026 by rpki-client