Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E7DE410F3ED11EA99477A4DC4F9AE02.roa
File:                     7E7DE410F3ED11EA99477A4DC4F9AE02.roa (raw, json)
Hash identifier:          LyAaRCVhNp3T51y/6hPtgwgcvSAkyGbZ4Rmb7zD5zyQ=
Subject key identifier:   3C:4C:1A:E4:5C:64:C5:0A:A6:D6:0B:E1:BB:BE:E6:CB:8D:D9:F8:3E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E6A1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E7DE410F3ED11EA99477A4DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:12:13 +0000
ROA not before:           Sun 31 May 2026 17:12:13 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140200
IP address blocks:        103.155.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59041 (0xe6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:12:13 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6bed-c769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:b9:f3:af:54:12:21:15:97:e2:0f:57:45:
                    d1:79:67:d2:bb:ac:38:b1:1a:83:43:f6:24:66:34:
                    03:af:a2:e2:2c:d9:64:25:76:4c:b8:72:a1:74:e2:
                    38:c8:10:a3:c0:ea:8e:3a:87:d6:74:7c:c8:0d:c4:
                    ba:16:15:63:41:79:89:bc:e0:20:0d:19:a3:ba:17:
                    1b:56:e7:78:f1:66:6f:0f:20:2b:f4:4c:32:22:5f:
                    d4:ce:e7:19:6c:de:ed:bd:fa:22:ef:d9:54:b2:84:
                    c6:f5:39:e8:20:98:3a:5c:11:c8:08:48:93:36:e9:
                    d4:91:ab:dd:47:8f:26:11:ae:59:55:c6:33:e4:be:
                    98:c1:33:c1:45:41:86:d4:53:df:37:92:c4:dd:33:
                    e2:83:45:0b:47:9b:ab:77:a6:d6:c5:aa:90:89:d7:
                    c6:04:8f:35:c6:c6:5d:5c:e8:5a:20:26:0a:92:a8:
                    c4:9a:f1:cf:7e:7b:c2:76:00:57:6e:52:3f:b1:2b:
                    4f:25:bc:1a:66:53:97:67:ed:4b:7a:68:d8:73:c8:
                    69:f1:66:90:70:d1:24:eb:91:dc:34:82:6e:52:4a:
                    33:2a:7f:0b:34:e8:11:d2:0b:2d:78:5a:8f:26:48:
                    04:3d:a1:4e:26:ae:c9:f4:8e:7c:15:54:a6:c5:a7:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4C:1A:E4:5C:64:C5:0A:A6:D6:0B:E1:BB:BE:E6:CB:8D:D9:F8:3E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E7DE410F3ED11EA99477A4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:8d:06:d3:2e:07:71:e3:3b:60:73:f1:4c:5a:4b:a1:05:
         ae:7b:e2:39:db:4d:95:c2:b2:96:d5:4b:aa:76:20:09:90:eb:
         9a:e1:cd:f0:4e:5a:19:df:fd:be:16:8d:a5:ea:5a:f2:f9:d8:
         50:b2:b5:c8:6c:cf:6a:94:30:37:4b:46:22:bf:a9:5a:0a:fe:
         9a:5e:cd:f2:69:a0:9a:dd:a0:be:2b:f9:f7:89:21:0c:69:90:
         13:94:a3:08:51:3a:49:2d:06:a9:5a:cf:68:d8:9f:64:fd:cc:
         0f:92:04:1e:c8:93:3c:79:c9:02:d4:ae:63:e5:6b:60:6b:b5:
         4e:09:d0:db:47:d5:b8:d4:74:eb:d8:69:33:a4:b5:da:f1:fc:
         f4:a5:3f:4c:bd:52:8f:85:00:db:1c:91:e4:dc:fb:16:75:25:
         c9:82:d7:63:c6:aa:2c:5f:12:3f:a0:f8:ab:ae:3c:c5:bd:3c:
         3f:d8:70:0d:b9:7a:fc:0b:db:05:f3:09:c1:b5:3b:1a:91:ba:
         47:67:72:68:0d:5a:2e:0e:5f:4d:2b:72:23:ea:74:85:0e:03:
         f8:a5:3e:ed:c4:f5:11:5f:b3:dd:ac:6c:4d:01:a0:e5:f2:80:
         e2:15:50:b5:d2:6a:24:32:8e:f7:c1:f6:db:df:f8:8a:46:97:
         c3:72:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:40 2026 by rpki-client