Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EB8FCAE9EAD11F0A2057977C4F9AE02.roa
File:                     9EB8FCAE9EAD11F0A2057977C4F9AE02.roa (raw, json)
Hash identifier:          dKdun7ZmEKqBVkmjPBs+DokjiMr70dtKUAnvDTVN9MQ=
Subject key identifier:   B8:B6:BD:C7:3D:06:D6:FD:4A:23:1D:3D:6B:23:88:19:5C:28:3D:CF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E1F2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EB8FCAE9EAD11F0A2057977C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:33:10 +0000
ROA not before:           Sun 31 May 2026 16:33:10 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132763
IP address blocks:        103.249.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57842 (0xe1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:33:10 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c62c6-331a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:44:df:46:b6:56:4b:d3:72:1e:8c:08:e1:
                    ef:1f:c3:0d:64:d7:ea:e0:89:03:66:69:38:ad:b7:
                    73:63:de:18:8b:db:bf:d9:cc:2c:85:db:f9:88:e9:
                    3a:7a:93:86:e6:ad:0e:2c:9f:15:49:ad:b6:55:c3:
                    1b:79:53:69:d9:0b:01:05:52:9d:e0:56:9e:51:5a:
                    24:99:75:c0:75:25:ac:ac:ad:4c:5f:21:18:d5:7d:
                    f7:d2:e1:f4:0c:9d:27:ba:da:f2:f7:b3:fe:ad:4e:
                    c7:f5:ec:71:15:67:64:fd:11:d8:b1:73:a6:b9:08:
                    05:c2:44:61:f7:4b:67:3f:88:c5:49:a2:2a:60:f9:
                    26:6e:6d:8b:66:99:4f:76:92:70:6b:cf:e9:41:e8:
                    68:85:8e:dc:5b:b5:f8:f4:c6:08:d8:89:7e:09:02:
                    e9:64:07:d2:10:5f:ac:8c:7a:35:77:74:8e:8d:ae:
                    81:7d:36:7e:2b:a5:50:18:1e:74:de:76:e2:08:fb:
                    57:7c:0b:6f:bc:27:a9:4a:91:ba:d3:81:44:a2:0e:
                    49:fa:10:05:74:a6:91:c8:b7:6c:bc:03:f2:af:2e:
                    fc:2e:b4:cc:d0:22:3d:32:9b:ea:60:78:9b:7b:ac:
                    62:91:ed:7c:04:86:bf:4d:d0:44:49:ad:a4:61:56:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B6:BD:C7:3D:06:D6:FD:4A:23:1D:3D:6B:23:88:19:5C:28:3D:CF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EB8FCAE9EAD11F0A2057977C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:6f:71:95:7d:2b:ae:5d:cf:1a:97:e6:a5:0c:7f:d4:61:
         ce:d0:7e:b6:c5:42:7b:a2:51:26:71:07:46:9f:24:91:35:25:
         90:bf:f8:88:26:06:4f:70:4d:fe:a4:70:c8:67:b9:3d:8b:a7:
         c4:c5:fe:63:f5:24:58:f0:9f:2f:6f:34:47:5c:ef:c9:aa:49:
         70:5d:37:13:c8:a7:11:b4:78:73:83:9d:94:7b:72:36:1d:1b:
         b8:98:3d:25:36:42:38:15:0c:4f:ec:13:b1:5b:07:5b:2d:fe:
         d7:b8:63:ed:7f:2d:6b:68:e1:ef:96:57:43:9d:3b:c4:11:6f:
         2e:89:e9:4e:0e:04:de:2b:6e:fc:24:36:fa:3d:9b:b7:d6:36:
         07:02:67:d6:c7:94:78:b5:24:9a:be:b1:71:99:2b:ec:f3:eb:
         8a:1a:8a:0f:2a:7b:c6:4c:fa:3a:36:70:f5:64:9d:e7:64:16:
         87:2f:45:6e:ad:ac:91:f1:5a:b2:1a:62:28:85:22:08:81:aa:
         b5:29:ee:6f:d9:02:d3:2a:53:fe:9f:44:32:d9:e0:f9:65:09:
         51:fa:6f:ef:68:73:44:57:50:a2:4a:5a:bb:da:b6:d1:7e:08:
         aa:c5:e2:02:8a:88:48:e7:e3:32:c9:93:8e:8e:cd:c0:06:fc:
         dd:b3:74:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:37 2026 by rpki-client