Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D4BB2C1E7511F0B2040577C4F9AE02.roa
File:                     27D4BB2C1E7511F0B2040577C4F9AE02.roa (raw, json)
Hash identifier:          Q/2x0GOSaFShUU3/RsjGuActmWdfyiu07sP+q1Kl3Dc=
Subject key identifier:   6D:25:23:97:C8:F1:E6:EB:DF:4C:65:C8:8E:23:9E:ED:04:28:CD:A3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E86A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D4BB2C1E7511F0B2040577C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:27:06 +0000
ROA not before:           Sun 31 May 2026 17:27:06 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149181
IP address blocks:        103.185.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59498 (0xe86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:27:06 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6f6a-50f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:01:bb:61:85:86:55:60:df:97:d5:2f:35:
                    ef:98:d4:88:54:a1:0f:60:a4:5c:dc:40:d2:80:cc:
                    e8:a7:64:5b:4e:64:f8:59:2d:0d:45:b3:8a:c0:08:
                    4e:0f:4d:27:ad:21:c7:fc:74:08:f9:8c:0e:1f:c5:
                    46:2c:9c:ff:91:40:5f:2b:4a:69:c9:0d:a2:f7:7d:
                    e3:30:6b:85:92:4b:fc:28:0a:42:a6:bb:a2:e2:33:
                    d0:4b:b0:5a:9a:1d:9a:6f:5d:fe:20:c9:de:9e:bf:
                    b0:ce:c5:d6:37:cb:1a:65:7c:d8:df:69:27:86:1d:
                    d7:48:8c:3f:a8:52:b8:3b:e5:1b:bc:1a:32:ec:ff:
                    76:2a:03:88:dd:36:3c:52:5b:7b:98:b8:d4:32:c1:
                    70:d5:40:0f:d1:b4:a9:78:d7:e7:da:78:cc:61:f0:
                    0f:f4:b8:cd:5e:cf:9e:da:ce:86:27:da:e3:dd:18:
                    78:b8:89:4c:fa:b0:d8:c9:c8:68:ce:31:f6:3c:6b:
                    bc:8c:76:d7:f0:0f:08:48:8c:b7:28:1a:f3:85:09:
                    d8:99:fb:8e:18:cb:5e:5b:6d:c8:04:b4:3d:39:a8:
                    f5:13:5d:3d:3c:dc:8e:8b:b7:23:86:a8:9e:d1:6d:
                    de:c8:00:dd:ff:c0:1a:37:7f:3e:85:41:66:53:48:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:25:23:97:C8:F1:E6:EB:DF:4C:65:C8:8E:23:9E:ED:04:28:CD:A3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D4BB2C1E7511F0B2040577C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:16:5e:7c:31:fc:0f:69:60:63:19:8f:56:1c:c7:a6:db:84:
         26:3e:6e:0d:ea:c2:21:28:16:0b:fe:7f:06:60:65:4a:ba:6b:
         13:0b:84:45:30:2d:0e:44:3f:8c:8d:8c:4b:66:2b:f9:0d:4e:
         79:ca:3d:27:04:50:79:a8:05:fc:d0:af:6e:dd:a5:11:db:8e:
         47:d3:79:2f:63:11:bf:60:2b:50:f3:2a:f0:d8:1f:65:6b:c3:
         0d:ca:14:01:d2:66:3c:57:ae:ca:fc:11:a8:2f:75:02:7b:c8:
         86:bc:4a:2f:37:6c:94:e5:f5:dd:7d:ec:79:12:89:e5:a6:2e:
         8a:49:13:12:65:71:f4:ed:28:4f:48:2d:11:99:62:c6:b0:2d:
         e5:de:67:74:e5:03:ca:d8:6c:a4:0f:db:26:b3:79:91:ae:6c:
         45:89:f5:cc:7a:ca:a2:c2:1d:d5:2f:7e:91:12:82:6d:59:12:
         8f:75:a2:a0:99:09:2c:38:a0:e6:3c:ab:52:29:6e:27:7b:c1:
         8e:d6:44:28:5e:24:9f:01:a5:ee:32:e5:45:04:b9:7f:76:74:
         0d:2a:50:3e:25:bf:4e:7c:08:a8:03:0a:d4:2e:4e:96:62:e3:
         0f:a6:7c:06:20:b3:42:28:e0:85:1b:44:5e:92:82:f7:44:ac:
         1c:7d:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:19 2026 by rpki-client