Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E74EB5EE308F11F09AD94578C4F9AE02.roa
File:                     E74EB5EE308F11F09AD94578C4F9AE02.roa (raw, json)
Hash identifier:          Z/SfXixxjQr2ZcMIA5qCECvBRN0uCnd+V7RWub7fV5g=
Subject key identifier:   CC:97:30:DB:B5:2F:06:A0:77:EE:58:02:E8:D7:53:EB:7A:CE:D5:D1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F280
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E74EB5EE308F11F09AD94578C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:08:34 +0000
ROA not before:           Mon 06 Jul 2026 17:08:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139571
IP address blocks:        103.181.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62080 (0xf280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:08:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be112-ca29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:a7:71:5f:c7:e2:2d:ae:51:70:53:ce:5d:
                    f3:35:f4:1c:3f:73:d5:5e:79:68:ae:ea:bc:6f:c1:
                    2f:6f:de:78:e3:df:4e:06:98:28:a8:b5:86:e3:19:
                    0c:89:4a:50:7c:06:a5:f3:2f:5a:41:ff:45:47:01:
                    2d:a9:2e:83:40:de:95:65:88:50:fd:94:e5:9a:ab:
                    00:be:50:82:07:f1:25:ff:6f:5b:96:12:b9:1f:24:
                    ea:0d:4a:6e:91:d6:1a:c6:d6:f6:22:24:1a:11:6d:
                    76:78:b8:69:2d:8b:c0:6d:42:ab:c3:55:1f:19:93:
                    b7:87:12:18:86:4b:42:d8:2c:c9:92:40:28:87:38:
                    0b:e3:96:f4:b6:f6:ac:a6:8b:a1:63:9d:24:c6:88:
                    69:40:82:4a:3f:ea:2e:3c:2b:e7:6a:af:97:b8:a1:
                    54:7d:90:5a:ec:00:d4:eb:6d:b8:06:5d:96:96:aa:
                    8f:27:5c:13:91:d8:81:20:19:45:4f:85:13:46:1e:
                    2d:fd:80:27:a0:5b:97:e5:99:3b:47:52:59:9f:13:
                    da:7a:22:0c:b8:c8:f0:8f:ac:be:23:24:54:01:ea:
                    96:2a:43:4a:88:89:a2:58:81:d3:b8:88:35:46:e6:
                    96:0f:27:6b:9f:a7:e9:57:03:78:2b:33:6f:43:ec:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:30:DB:B5:2F:06:A0:77:EE:58:02:E8:D7:53:EB:7A:CE:D5:D1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E74EB5EE308F11F09AD94578C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:37:b7:fa:e1:69:f9:d9:4c:5b:4b:c8:56:7e:f1:a7:93:
         b6:77:c5:2b:86:09:9b:e2:a4:03:ee:db:ea:39:a5:81:d2:ba:
         3b:c8:9c:4d:6a:ad:a8:31:2d:51:3c:4d:ea:69:80:f7:b9:25:
         6d:64:a2:40:02:5a:ae:c9:02:ba:f0:39:6b:cb:4c:be:67:5a:
         77:3c:5d:25:55:1e:b7:92:d7:6c:24:9f:63:4e:7c:8d:20:e2:
         af:2d:0e:e7:5d:01:d8:02:95:61:8c:61:25:1c:8c:db:0d:a0:
         cf:2f:3a:34:51:a6:75:a0:23:2b:45:c0:cc:46:5e:d5:83:3e:
         5b:3e:d4:f8:2d:b6:01:aa:6c:63:d0:4d:18:6d:0d:4f:74:e1:
         07:a2:15:c3:17:14:16:09:c3:0f:4b:14:ba:4a:15:9a:d3:31:
         c8:94:b4:e9:2d:4f:cc:d7:45:0e:2b:69:da:8f:8b:68:32:51:
         b9:5b:a3:d6:88:40:53:9c:fb:a5:a3:60:4c:4a:ce:b8:ba:83:
         6a:cc:59:22:7b:35:08:3b:74:dd:e4:68:2e:a2:13:59:d6:b5:
         00:f1:79:95:a4:dd:a9:c2:75:16:f1:0f:12:03:dd:6a:6d:83:
         67:cf:4b:83:2e:94:d7:94:a6:6a:20:7a:50:95:4d:89:bb:c6:
         7b:bf:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:02 2026 by rpki-client