Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F85154F41411EA80EEA916C4F9AE02.roa
File:                     49F85154F41411EA80EEA916C4F9AE02.roa (raw, json)
Hash identifier:          VHc5C00EWtDcSxSGu8vImc6GEZhc1r+M1RndRUxIaM4=
Subject key identifier:   F9:CE:9B:74:1C:BF:C7:32:74:27:AB:7C:A8:AA:52:DA:12:13:47:08
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E4C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F85154F41411EA80EEA916C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:56:31 +0000
ROA not before:           Sun 31 May 2026 16:56:31 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136653
IP address blocks:        103.148.120.0/24 maxlen: 24
                          103.148.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58566 (0xe4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:56:31 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c683f-6e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:e3:6f:42:4b:8b:c2:ae:bf:3a:7e:78:e2:
                    5c:da:89:e0:45:06:54:23:15:72:d5:bf:62:ab:fd:
                    9d:0f:73:a5:b4:56:54:b1:82:8f:3b:6b:58:15:d9:
                    f9:82:d3:d2:b8:d6:d9:8e:ca:cf:d7:d5:82:0c:82:
                    0e:67:ff:f9:89:c1:9c:a4:42:46:e7:9c:ef:29:30:
                    b3:b5:f6:cd:ef:3c:09:34:f5:cb:1a:31:17:3e:9d:
                    83:31:cc:14:3d:81:93:5c:4b:0b:77:8b:42:11:4d:
                    c6:78:99:14:fa:50:a6:63:40:d0:5a:0d:d7:d2:23:
                    c3:0a:ea:3e:31:03:62:e8:6b:78:c9:9f:05:e2:3b:
                    3a:b6:37:b9:5b:fb:d1:9b:7d:e3:88:7a:3f:3d:83:
                    9a:a2:1a:e9:27:f6:35:c5:d9:6b:a1:56:e0:de:b5:
                    1a:12:4b:c7:63:70:f4:16:6f:ff:3c:f2:be:4a:fa:
                    3b:c4:ce:ee:1c:46:f1:f2:5f:e9:58:66:60:28:51:
                    bc:15:b6:ac:34:df:63:6e:af:b6:ab:17:94:bd:9e:
                    3d:4c:ba:d1:ba:d3:88:98:e7:a9:48:53:c6:99:b3:
                    20:45:5a:39:4f:8b:3b:b6:d5:92:c5:8d:37:1f:ee:
                    c0:32:f8:08:90:3a:06:57:ca:47:ad:a0:55:cc:81:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CE:9B:74:1C:BF:C7:32:74:27:AB:7C:A8:AA:52:DA:12:13:47:08
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F85154F41411EA80EEA916C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:3c:e5:27:20:e4:1e:8b:cd:92:71:09:e2:94:7c:37:48:
         d6:d4:f3:c7:b9:55:d3:23:1c:0a:c9:f2:9f:6f:81:7b:5f:8d:
         36:73:12:b2:78:5d:b0:4e:ac:75:61:83:85:17:6b:42:3e:86:
         71:99:43:32:b5:4f:ba:fa:2d:37:bd:e1:2e:8c:94:1b:d2:94:
         e8:88:2d:b0:4d:06:10:27:b4:db:cd:70:56:9f:ec:3f:6d:2e:
         5d:cc:9b:fb:43:92:d8:7c:9d:de:19:ce:0c:37:7f:5d:3b:66:
         8e:ca:f7:c0:eb:5b:fa:69:e8:b5:56:3c:42:69:98:cb:68:a8:
         03:cb:da:69:84:85:9e:fa:5b:a9:77:b6:80:39:3d:a7:2d:c4:
         f0:ac:ce:90:cd:c6:cc:7e:33:2a:a9:96:d6:c6:c8:a0:e0:6a:
         6b:ce:37:2c:e2:d0:fe:e2:97:99:e3:84:ee:8e:e9:2e:64:2b:
         53:46:95:30:87:2d:a0:1d:60:bf:b7:58:e7:2f:03:d2:56:23:
         07:27:75:0e:16:4a:ef:97:85:8c:ae:d4:68:a9:e6:bf:4f:b6:
         35:b5:3a:7c:1c:eb:6a:e4:b2:88:2f:51:e3:51:6f:a4:50:b9:
         fd:8f:3b:78:fd:c7:94:c9:ae:f2:20:51:3b:fa:e9:b6:f2:ba:
         d1:e5:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:10 2026 by rpki-client