Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa
File:                     B75C7B8E688111EC89ED595FC4F9AE02.roa (raw, json)
Hash identifier:          2l2xGhNBBEN09d5qX/8u+3Dbp7jfxGiWLPSaJtd5+L8=
Subject key identifier:   50:75:C1:8F:AD:11:28:E9:0D:25:9D:C6:09:CA:80:E5:2D:3C:9E:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E86F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:27:15 +0000
ROA not before:           Sun 31 May 2026 17:27:15 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149187
IP address blocks:        103.175.174.0/23 maxlen: 24
                          103.177.12.0/23 maxlen: 24
                          103.178.114.0/24 maxlen: 24
                          103.178.115.0/24 maxlen: 24
                          103.179.194.0/23 maxlen: 24
                          2400:4620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59503 (0xe86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:27:15 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6f73-28a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:6b:23:15:9d:5c:a5:56:eb:db:37:a2:e3:
                    ef:7e:eb:3d:5d:72:11:83:8e:a9:59:71:b5:1e:77:
                    46:f2:1b:98:c2:16:d2:3f:51:32:c7:ed:c3:98:68:
                    52:b7:9e:d1:92:5f:68:27:a9:98:7d:fd:ec:88:fc:
                    3b:64:75:d5:27:fa:9d:51:c8:57:3c:0b:1e:3d:bc:
                    79:5c:7c:72:63:49:1a:52:18:5f:6b:cc:e7:43:1b:
                    af:fe:73:f3:5d:24:78:66:f6:dd:57:fa:00:50:c0:
                    c3:2a:94:ef:12:dc:96:93:be:72:d8:ec:28:2d:a1:
                    bb:78:2f:87:7a:81:c1:c7:33:0a:2d:25:00:71:67:
                    d3:86:59:3b:64:73:c1:4b:d6:ad:11:f8:6b:86:0b:
                    12:4a:da:b0:12:c6:01:58:6d:bb:c6:9c:83:a7:f7:
                    f5:55:6a:a4:b5:1e:56:0d:59:52:bc:74:3a:f8:a8:
                    03:36:99:51:da:ce:ef:84:58:ee:ee:c1:40:0b:10:
                    26:93:9a:70:ac:41:b0:90:42:db:01:64:8b:39:75:
                    28:f5:14:3a:73:df:9a:a8:d6:11:59:ff:fe:b2:8a:
                    1e:b1:d5:d2:fe:a8:aa:88:7f:b7:be:2d:4c:70:8f:
                    a5:3d:2a:30:ac:de:98:ed:c9:15:0c:aa:a5:a7:e9:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:75:C1:8F:AD:11:28:E9:0D:25:9D:C6:09:CA:80:E5:2D:3C:9E:8A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.174.0/23
                  103.177.12.0/23
                  103.178.114.0/23
                  103.179.194.0/23
                IPv6:
                  2400:4620::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:ff:da:c5:89:60:2f:ce:a9:fa:34:d5:33:aa:74:03:9a:
         90:a6:04:d2:06:df:fc:34:3c:73:80:2d:31:fe:fa:d2:f9:4d:
         56:87:e8:54:f1:c2:c0:9e:75:c7:df:1c:b5:b4:8d:59:b2:22:
         00:28:90:c5:64:25:2b:72:46:39:49:5c:33:2b:aa:ce:4e:4b:
         78:19:5f:bf:b0:67:af:1b:20:e8:c7:1c:67:81:2e:61:7c:a1:
         dd:79:a8:bd:47:2e:36:20:e0:be:73:6e:0a:44:80:19:c1:d0:
         e5:32:d2:0e:b2:32:9a:52:26:ef:f1:95:35:5c:0d:cc:4d:65:
         bb:b7:f7:83:ce:a4:e3:92:2c:2f:d2:46:c8:22:40:23:1d:ac:
         32:bd:f2:03:45:88:7d:fe:a1:14:25:39:5f:00:ed:f6:35:03:
         12:04:e1:82:94:26:5f:b1:32:a8:e2:a9:04:a7:5e:5a:7b:2c:
         12:24:f7:35:bb:fa:cc:f4:60:c3:fe:c4:77:13:05:a0:db:89:
         04:49:20:13:8b:8b:3e:5d:68:b3:89:25:d4:37:3f:b0:d9:b4:
         9c:e9:d8:36:64:4d:f8:07:c6:fd:c1:d3:b8:da:cf:80:60:3d:
         c6:65:f1:3c:ec:8e:e8:a9:b0:71:8e:47:df:eb:1e:52:52:f7:
         24:cf:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:27 2026 by rpki-client