Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAB71562FE811F08BA7456EC4F9AE02.roa
File:                     6EAB71562FE811F08BA7456EC4F9AE02.roa (raw, json)
Hash identifier:          GY5b+a49CmkrZz7iX6GKwcaUJlSmxUMivooqlESPjB8=
Subject key identifier:   AB:6D:09:E8:ED:53:10:82:46:51:3B:30:F9:61:E4:0D:C0:1E:42:81
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F256
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAB71562FE811F08BA7456EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:07:01 +0000
ROA not before:           Mon 06 Jul 2026 17:07:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139515
IP address blocks:        103.139.91.0/24 maxlen: 24
                          103.182.106.0/23 maxlen: 24
                          163.223.42.0/23 maxlen: 24
                          2001:df2:9bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62038 (0xf256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:07:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be0b5-ae07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:38:1a:5a:47:22:6c:45:fe:73:50:af:d5:
                    94:2e:83:f7:f2:c6:6a:23:06:ea:64:9c:13:15:3f:
                    6c:1f:52:0d:b6:f4:6c:5d:0a:32:b8:f2:49:31:b0:
                    84:3e:c9:32:ea:10:24:57:d8:d4:fc:2a:66:a3:81:
                    6f:dc:75:49:59:f2:0b:c6:42:7e:e6:99:c6:87:43:
                    0a:98:bb:b7:e9:74:98:40:2c:38:e4:0f:ce:ab:18:
                    ea:73:bc:47:b8:2e:e4:41:e2:e7:8e:ff:2b:99:c3:
                    71:fd:4d:c1:da:36:28:39:b1:6c:e1:e4:63:03:90:
                    0a:37:5d:a4:36:99:2a:9b:b3:01:da:84:8f:72:3f:
                    cf:00:94:b7:40:cc:99:69:14:e3:c6:a2:3a:4f:ed:
                    fc:ca:b2:2c:30:4f:92:46:c5:e2:1a:b8:50:21:b2:
                    de:64:17:17:56:40:dd:34:7f:6c:b9:d7:8b:f7:c2:
                    50:64:5b:29:ed:e8:cd:4d:69:2a:b3:52:9d:5c:d7:
                    cf:66:16:bc:cf:e1:74:9f:f0:e8:a9:b4:3b:39:af:
                    dc:08:e5:57:d7:87:ab:c4:cf:ab:ed:1d:0e:63:7d:
                    c5:1d:12:97:a8:5e:2b:15:66:41:1b:2e:46:f3:7c:
                    98:52:00:da:fa:51:95:87:e6:32:58:ea:df:00:0f:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6D:09:E8:ED:53:10:82:46:51:3B:30:F9:61:E4:0D:C0:1E:42:81
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAB71562FE811F08BA7456EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.91.0/24
                  103.182.106.0/23
                  163.223.42.0/23
                IPv6:
                  2001:df2:9bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:29:56:62:24:1e:77:9c:e1:47:3a:ed:ba:c3:3d:e6:c8:ec:
         d6:8a:04:f5:9b:84:b0:b8:d3:ea:a8:fe:22:c2:39:c2:f2:d5:
         98:1b:38:c9:93:5e:e2:86:6e:ba:e2:22:ed:5d:41:ed:99:d7:
         e4:8f:6f:a2:d0:ce:b0:62:82:66:82:60:df:1d:c1:8f:cd:78:
         e5:11:80:a6:8a:00:42:8e:4a:78:56:32:15:f8:7a:dd:53:c9:
         bc:1c:c5:a0:82:99:97:2e:25:8f:e0:87:f9:23:c0:96:9e:bc:
         0a:b8:b1:73:be:4b:5e:68:ba:d2:d1:52:19:fe:1f:23:6d:3e:
         61:6e:1c:13:74:19:0a:1b:99:c4:cb:3b:22:62:25:9d:53:b6:
         06:cc:9a:78:5e:2c:1a:76:af:b7:bc:33:7f:a2:70:1e:a1:7b:
         89:93:da:ab:03:89:9a:a7:69:34:a7:31:83:86:0c:af:9f:39:
         e7:da:4f:72:33:d7:3e:89:76:10:86:0e:b5:16:17:86:b8:ff:
         b7:10:f4:36:47:47:30:1c:f9:1c:51:d0:3e:8d:a7:9a:61:c2:
         05:9c:24:88:8e:52:71:db:c8:1b:7b:dc:fc:a2:41:e8:1b:82:
         e6:04:ec:7b:c4:c4:a2:17:dd:71:c4:2b:10:8c:7c:41:ea:3e:
         12:4b:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:10 2026 by rpki-client