Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E057B2EEF60E11ED9440470CC4F9AE02.roa
File:                     E057B2EEF60E11ED9440470CC4F9AE02.roa (raw, json)
Hash identifier:          O/HayC7iotLzWD07qR57wTGgIYsmr39JON0nQHLKG8g=
Subject key identifier:   0E:84:12:AA:36:16:26:54:78:A1:CF:4F:4A:09:8C:E8:9B:B4:03:BF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F5C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E057B2EEF60E11ED9440470CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:36:12 +0000
ROA not before:           Mon 06 Jul 2026 17:36:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151098
IP address blocks:        103.148.134.0/23 maxlen: 24
                          2001:df2:a640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62913 (0xf5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:36:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be78c-f4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:3a:97:3b:ef:f5:29:0e:54:df:e6:4c:1d:
                    77:ea:bc:9b:0f:99:59:cc:73:22:5c:ff:80:45:4c:
                    56:ed:b7:2c:f9:56:05:88:88:13:3f:8e:2d:6e:e0:
                    7d:f5:bd:d3:2f:23:c9:80:b9:fe:25:40:43:39:02:
                    61:70:f3:f6:ee:1a:99:72:26:3d:d1:d2:76:58:54:
                    d6:6b:24:7d:bd:c4:05:ae:ca:cd:ee:cc:67:a3:a4:
                    a0:e8:2e:4e:b0:d1:94:13:63:58:d1:c3:54:7f:38:
                    51:03:8d:cf:f7:0b:5b:77:89:bf:a3:a5:9e:5a:2b:
                    8d:52:7f:38:9c:b9:78:df:d0:d9:3a:f2:03:bc:bc:
                    59:b0:20:c2:df:d6:c4:4d:38:9b:c6:0b:e7:7d:53:
                    52:28:b5:c0:aa:61:99:eb:44:91:67:28:73:9b:fa:
                    0e:7e:2f:45:59:4c:e0:aa:e0:3a:86:6b:f5:ab:74:
                    b4:b9:ff:6b:99:1c:7e:23:63:72:1a:c8:bf:c1:9e:
                    5f:5a:fc:ce:e7:02:de:ad:79:86:6d:b7:86:ca:52:
                    f4:f6:a1:8b:81:b4:9d:39:79:44:3f:88:28:53:dd:
                    fd:57:ae:f6:eb:b6:99:f2:9e:51:52:f3:c3:13:f5:
                    1b:f5:3a:6f:9f:c7:00:fc:3a:39:5e:89:95:43:31:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:84:12:AA:36:16:26:54:78:A1:CF:4F:4A:09:8C:E8:9B:B4:03:BF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E057B2EEF60E11ED9440470CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.134.0/23
                IPv6:
                  2001:df2:a640::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:50:17:13:8e:0d:13:4d:fc:bf:fe:83:12:e5:3b:fa:b7:75:
         93:61:11:bc:5c:1b:8b:4e:29:5b:36:41:82:0c:9f:2e:25:9f:
         99:a0:f3:d4:89:52:93:05:b0:e7:f7:34:5d:08:ac:d9:fd:dd:
         c7:e8:a5:e2:81:02:46:e5:bb:cc:bf:3c:28:dc:f4:be:a3:a3:
         62:f2:9c:d5:90:dd:e5:84:9a:e6:a2:7f:a7:2a:3f:1b:6b:90:
         9a:89:86:1c:65:63:c5:1e:e3:52:95:1e:8d:f3:1b:bc:b8:2b:
         79:11:3d:69:66:c5:fb:e3:34:bd:e2:f4:03:1c:8e:c2:a0:4b:
         ee:1e:9c:a1:18:1c:67:15:5d:f8:de:92:91:b9:35:38:a7:99:
         58:ee:0d:31:6c:8e:62:0c:fe:b4:87:fd:0a:9f:e6:30:fb:da:
         66:ca:db:99:d0:3e:76:21:f7:14:3a:f8:8a:60:cf:10:a1:51:
         ee:44:d7:9e:1a:3e:e7:8d:ca:d0:80:e9:83:a3:03:7a:ed:31:
         c7:60:d7:7b:c8:f3:e0:de:62:f2:a0:a0:1d:4a:67:10:75:8b:
         98:99:92:7f:3b:dd:f0:7c:56:67:ec:c2:dd:03:94:cf:86:39:
         77:85:c7:14:87:22:5a:5e:6a:2f:19:cc:b7:ea:4a:70:3d:58:
         a2:86:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:25 2026 by rpki-client