Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAE4C8DA63F311F199D453C59047A888.roa
File:                     AAE4C8DA63F311F199D453C59047A888.roa (raw, json)
Hash identifier:          veFdQQOgsomOhy2/ntUnvN8d1n/t91/mHiRL7RzvjJs=
Subject key identifier:   CC:3A:58:6A:67:80:36:9E:E5:76:C7:64:DC:ED:8C:EA:F3:B5:4C:B0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F5B1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAE4C8DA63F311F199D453C59047A888.roa
Signing time:             Mon 06 Jul 2026 17:35:41 +0000
ROA not before:           Mon 06 Jul 2026 17:35:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150654
IP address blocks:        103.142.198.0/24 maxlen: 24
                          103.155.147.0/24 maxlen: 24
                          103.168.173.0/24 maxlen: 24
                          175.111.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62897 (0xf5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:35:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be76d-e982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:97:9a:66:41:61:c8:41:63:ca:93:a7:8f:bb:
                    6e:65:06:c8:1d:8e:72:dc:34:55:eb:f5:8e:57:76:
                    8f:4a:37:21:6c:a0:39:92:1b:19:3c:0a:fa:61:79:
                    14:71:de:3d:55:d8:db:06:6b:f4:b9:44:1d:e3:92:
                    9b:45:62:18:fd:98:6a:bb:a9:b3:63:3a:b2:f9:96:
                    09:ea:0d:c4:b6:05:06:f2:fd:83:88:26:d2:e3:c3:
                    76:b6:8b:fa:9d:b1:08:ad:08:5a:4f:70:de:9f:06:
                    6a:73:33:1b:b1:d8:ba:f0:fd:16:d4:d6:9f:4c:08:
                    4c:bd:fa:f9:0f:77:23:79:e9:10:84:d4:a5:70:25:
                    4f:5f:be:a6:63:00:31:82:49:2a:ab:da:a9:59:7c:
                    aa:e6:0f:3f:b7:56:8f:55:22:cd:71:4b:20:f2:4f:
                    a0:a3:df:57:1a:37:c3:07:0a:58:33:cd:cc:77:59:
                    d5:f0:fa:eb:65:51:b8:3b:ee:43:ac:46:24:2c:83:
                    0c:ae:e6:7f:f3:4a:87:74:ff:78:59:a8:53:25:c6:
                    7a:cf:b6:5e:8d:99:d2:02:e5:3a:b7:2c:e4:14:9d:
                    1d:5b:35:f0:aa:b9:78:7f:3c:c7:b4:3e:72:72:b2:
                    52:97:18:66:9b:c9:80:3c:b6:1e:80:d7:35:03:53:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3A:58:6A:67:80:36:9E:E5:76:C7:64:DC:ED:8C:EA:F3:B5:4C:B0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAE4C8DA63F311F199D453C59047A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.198.0/24
                  103.155.147.0/24
                  103.168.173.0/24
                  175.111.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:f3:29:ab:5d:85:d8:20:3b:cf:89:cf:3b:3d:14:27:35:
         92:21:6b:ec:d4:b1:d1:e0:5a:be:bb:c1:d6:54:d0:92:f6:db:
         ba:44:07:65:89:b0:51:98:49:ba:b7:e2:36:2b:16:dc:fa:6e:
         75:dc:d5:e8:ab:13:8f:45:2c:8d:bc:ac:b8:40:fb:c6:54:4c:
         5e:36:c2:79:f2:2b:c3:f4:57:ab:db:c6:08:11:96:63:37:58:
         d8:90:36:48:7a:22:3c:a8:85:89:3f:76:ed:a6:aa:84:12:a4:
         f2:7f:86:84:f0:58:e8:a9:4f:aa:2c:45:38:11:7d:c9:9d:02:
         f1:fc:40:1e:cf:1f:8c:3e:08:42:d2:28:25:4e:1b:6c:ed:58:
         72:03:b6:0c:83:65:9c:bc:cf:6e:36:39:ca:e2:4f:4c:73:37:
         0d:f1:55:d5:58:34:ca:68:15:07:a6:d5:df:00:f2:20:90:b3:
         6a:29:3b:3a:00:25:62:3b:4c:c3:37:18:b8:be:6f:87:79:4e:
         d2:ed:48:13:b7:cf:91:86:db:f9:ba:36:72:10:d3:73:ed:94:
         b4:76:68:32:95:15:10:5b:45:c7:bc:55:1d:d5:37:2d:d7:67:
         19:5b:ec:e9:80:18:d1:df:ba:d9:01:95:c9:fb:07:a8:70:3c:
         33:d3:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:22 2026 by rpki-client