Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0482EA4649B11F1AA20FC928647A888.roa
File:                     B0482EA4649B11F1AA20FC928647A888.roa (raw, json)
Hash identifier:          KNd0dCe4YSGCKzRNt1fPwnp/sfYRjagA3hGpYbx+Fg0=
Subject key identifier:   99:85:0E:31:24:BE:B7:60:27:80:53:2F:C8:A3:F5:57:20:D4:DE:C9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       ED6E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0482EA4649B11F1AA20FC928647A888.roa
Signing time:             Tue 23 Jun 2026 13:13:27 +0000
ROA not before:           Tue 23 Jun 2026 13:13:27 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141280
IP address blocks:        27.0.145.0/24 maxlen: 24
                          103.207.183.0/24 maxlen: 24
                          175.111.136.0/24 maxlen: 24
                          210.16.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Jul 2026 07:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60782 (0xed6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 23 13:13:27 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a3a8676-d439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:6a:3e:2c:98:d0:aa:dd:1d:40:fb:c3:3c:
                    e8:bd:30:c8:68:c7:07:37:17:92:ab:23:bb:bd:f9:
                    5a:7d:19:50:70:84:b7:0a:23:43:17:83:66:cf:97:
                    7e:6f:3f:57:ae:27:2d:74:1b:eb:3b:d2:77:ee:19:
                    20:3a:8f:75:96:94:bf:ff:51:ff:69:2a:66:ab:5a:
                    4e:d4:0d:2c:64:d1:7d:e0:22:10:0a:14:90:c2:3a:
                    50:78:d8:5a:13:89:6d:fb:d0:72:4c:23:68:2f:f3:
                    1e:40:41:ce:1c:5a:3d:94:14:73:7b:2f:43:3f:9b:
                    e6:0a:ca:09:99:25:1d:55:73:0d:7f:62:80:29:06:
                    d8:8f:4f:99:69:20:61:4f:6b:95:53:46:74:11:bc:
                    aa:ab:38:76:4d:9f:eb:92:74:b8:b4:51:3f:b2:6e:
                    b2:ec:0f:21:1f:e4:f3:1a:5c:72:56:f9:ee:51:77:
                    e3:90:a7:a4:91:76:9e:dc:b2:73:32:45:5d:87:bd:
                    7f:ba:4a:ec:bc:af:ee:29:35:7d:e2:8b:9a:1b:dc:
                    bf:f6:33:d7:0e:eb:b5:da:7d:df:83:43:c0:38:0c:
                    82:5f:19:82:2b:00:39:ee:8f:61:af:6f:07:cc:01:
                    1e:a6:61:61:5d:cc:32:30:32:9c:9f:bf:d6:dc:8b:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:85:0E:31:24:BE:B7:60:27:80:53:2F:C8:A3:F5:57:20:D4:DE:C9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0482EA4649B11F1AA20FC928647A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.145.0/24
                  103.207.183.0/24
                  175.111.136.0/24
                  210.16.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:5f:6b:d2:50:e6:24:38:20:34:14:05:1f:36:7b:5d:0b:7b:
         3f:65:01:98:e2:08:b3:88:6d:4d:f8:ec:81:cb:57:43:98:25:
         17:bd:f7:fa:9c:59:b0:53:53:0a:86:27:40:25:96:fc:22:db:
         1c:00:46:4a:03:ec:a2:bf:73:0d:ab:27:ff:b3:1c:1e:c9:45:
         3d:4f:f7:2f:66:7b:c5:26:c1:ad:41:dd:b7:db:56:d1:b9:d1:
         37:71:b9:7f:b4:67:3d:8c:1c:91:94:9d:03:68:34:a7:61:c5:
         5e:46:7e:bf:2f:4f:8d:c2:85:04:b0:81:75:43:ed:7e:df:36:
         d9:8d:82:13:50:de:7d:79:b4:3b:fc:c4:c9:27:25:04:8d:47:
         91:9b:fd:cc:82:a0:dc:15:31:bd:cd:b3:51:fc:41:5f:d8:56:
         1f:1d:e3:7c:74:2c:d4:8c:81:e9:53:fb:48:e1:f4:2e:85:eb:
         1d:00:0b:6f:21:e9:1f:86:c9:3f:53:bd:3a:e3:a7:91:dd:8e:
         98:6b:58:e6:f7:96:21:dc:9e:75:0e:e9:87:71:5f:91:e7:ea:
         4e:ac:22:50:a5:22:ba:c3:27:18:b9:1a:79:03:4d:f3:1c:cf:
         c6:b9:be:9c:e5:f8:46:92:49:4f:35:25:34:87:fe:74:3c:ab:
         f9:60:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:08:18 2026 by rpki-client