Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E3DA476892D11EEA57F6C6EC4F9AE02.roa
File:                     7E3DA476892D11EEA57F6C6EC4F9AE02.roa (raw, json)
Hash identifier:          HrGRGMjJP0qwaQfSZEe1fJcAaM1rskWxrKv+gpusPZk=
Subject key identifier:   EB:71:10:D1:DD:7E:64:50:42:31:34:41:4C:57:E9:F1:5E:65:BB:23
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E835
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E3DA476892D11EEA57F6C6EC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:25:25 +0000
ROA not before:           Sun 31 May 2026 17:25:25 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     147230
IP address blocks:        103.173.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59445 (0xe835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:25:25 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6f05-a306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:1b:0d:e3:89:6d:41:c2:e7:15:de:87:71:
                    ab:b8:6d:f5:8f:45:3f:19:31:75:3a:89:a3:ad:c2:
                    55:2d:04:95:9a:5d:25:5a:c6:52:be:30:cf:51:5b:
                    13:47:7e:23:26:48:4c:94:d9:a3:c1:27:6d:20:2a:
                    73:a8:f8:d3:d4:76:8e:3e:22:f9:aa:1d:72:5f:04:
                    2b:55:8e:ae:94:d3:a1:64:6b:b9:4d:77:18:6b:8e:
                    b8:cc:41:9d:6d:8f:d1:a0:cb:f4:32:83:64:6f:c7:
                    01:0b:61:2f:e1:1d:08:12:ba:c9:cb:9b:21:45:2b:
                    cf:85:bc:49:fe:a4:f4:f6:e7:ef:93:3c:85:ca:60:
                    4a:12:03:30:13:a1:ef:26:9b:2b:ad:32:e9:04:32:
                    d6:57:11:27:fa:79:4d:68:c9:1d:1a:05:a0:a5:39:
                    a8:e9:d1:56:43:11:81:ba:88:d5:9d:3d:2a:8f:7b:
                    27:a1:12:ff:ce:a1:59:36:b1:ca:7b:b0:26:3d:da:
                    53:cc:2c:c5:5a:84:d7:b1:f1:06:90:f7:02:54:4a:
                    a8:0a:f1:e8:6c:48:07:59:71:e6:85:8a:47:11:d9:
                    ae:a5:7b:bc:c4:a9:97:c4:02:a7:1a:be:b4:47:b3:
                    9b:e5:f9:41:a1:c8:ea:e5:b9:4e:95:ba:49:40:96:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:71:10:D1:DD:7E:64:50:42:31:34:41:4C:57:E9:F1:5E:65:BB:23
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E3DA476892D11EEA57F6C6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ce:6a:ac:b8:a8:8e:a4:cc:0d:08:d4:48:79:23:73:32:3c:
         e5:46:33:56:50:e2:87:f3:b4:41:d6:c9:7a:6b:93:34:b0:b2:
         09:9d:f2:9b:69:72:71:10:a4:1f:3b:aa:88:c1:7d:87:9e:3f:
         4a:85:2d:90:d3:47:eb:54:aa:6e:6b:cd:bd:bc:b4:f4:3a:1c:
         36:c1:3c:88:35:36:1f:e6:13:d4:68:fb:91:c2:39:30:26:40:
         bf:da:ef:73:5a:65:ba:f7:b5:04:fb:49:36:32:af:c5:4d:e9:
         9d:d1:e8:7a:2e:55:9d:a3:0c:24:57:8c:96:ce:31:07:43:a7:
         84:22:71:7b:dd:68:18:24:a3:79:6d:5d:84:6a:01:e2:44:8b:
         a5:5c:21:d8:6f:98:c1:e0:df:7f:2a:a3:6d:16:74:95:38:f8:
         89:e0:ad:b2:d9:5f:ef:c9:f4:00:de:af:b8:a6:38:53:7b:c8:
         f7:e8:86:b2:ac:f5:1d:e0:e8:35:51:93:31:bb:bb:35:b3:de:
         44:52:74:7f:e4:03:05:d0:d5:61:a5:21:c6:17:dc:42:7d:3f:
         51:75:97:ee:87:5c:5c:c9:ca:55:3e:94:b7:e1:e4:ef:78:72:
         51:24:cb:d3:1f:4a:c2:77:d3:e2:cb:8c:83:2f:a5:35:5c:ca:
         21:c8:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:11 2026 by rpki-client