Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E93267FCB1AD11ECA2E52046C4F9AE02.roa
File:                     E93267FCB1AD11ECA2E52046C4F9AE02.roa (raw, json)
Hash identifier:          544L0Eg/kC01B1FDR2VjJFkCy55TvloOfkjPefag3PM=
Subject key identifier:   72:09:38:47:48:88:1F:6F:71:28:4D:BB:09:D7:20:56:82:E1:0B:FF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4B4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E93267FCB1AD11ECA2E52046C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:27:26 +0000
ROA not before:           Mon 06 Jul 2026 17:27:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149249
IP address blocks:        103.137.194.0/23 maxlen: 24
                          103.172.154.0/24 maxlen: 24
                          103.172.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62644 (0xf4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:27:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be57d-0982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:87:10:c3:59:16:cf:79:b4:b0:66:63:9a:
                    37:1d:50:e7:9d:d3:ab:21:71:cc:35:fa:46:59:f1:
                    06:1a:de:b2:84:97:e3:9d:33:99:14:6b:a0:40:fb:
                    65:f0:15:bd:cf:fe:f5:ae:5d:78:9b:d9:87:2f:c4:
                    88:af:a1:a3:d9:88:b7:10:e9:0c:c6:f3:cf:68:ec:
                    f8:f1:85:0f:65:5a:a4:8f:fe:07:02:02:f9:43:4c:
                    1f:2e:74:58:54:14:12:7b:f6:26:e5:d9:16:40:49:
                    47:72:61:97:33:58:85:bc:a7:60:05:8a:be:6c:88:
                    42:1f:ba:12:08:2e:52:e8:24:63:f1:c7:e7:87:7d:
                    32:da:32:be:d5:51:86:e7:31:72:ff:00:04:57:6f:
                    1d:0a:51:d6:84:f1:7e:de:6a:bf:8c:0f:80:85:55:
                    f2:64:0c:69:83:3a:26:0f:53:fa:62:ba:93:f4:fd:
                    c1:92:6a:ae:d5:9e:0a:6f:96:1a:fa:82:b8:26:dc:
                    f3:ed:cd:26:6f:97:0a:a5:a1:74:ff:2a:fb:0c:a6:
                    f8:54:2e:a3:84:fb:26:f4:71:06:5c:e2:92:00:45:
                    69:27:1d:93:23:bb:e4:fa:aa:d8:24:df:03:77:74:
                    73:50:18:f5:8a:41:fc:33:11:7e:36:78:48:9d:62:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:09:38:47:48:88:1F:6F:71:28:4D:BB:09:D7:20:56:82:E1:0B:FF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E93267FCB1AD11ECA2E52046C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.194.0/23
                  103.172.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:29:6e:e5:36:46:a7:90:3e:d7:79:fd:e1:5b:05:18:72:2e:
         a3:01:15:fd:98:4d:10:dc:93:c5:d9:51:c9:c8:e2:2f:39:ca:
         a9:71:ae:b8:3a:8c:f2:51:50:9a:18:60:f6:d3:15:13:a2:c3:
         41:e8:bf:08:76:60:bb:27:4b:cf:30:1e:ec:0b:9f:78:a2:59:
         38:15:99:a8:bd:4e:ef:06:49:fe:20:49:0e:e2:39:ba:91:97:
         d7:8a:fa:d8:ab:48:9a:2e:d9:51:29:00:ac:6d:1b:90:83:8b:
         84:fa:4f:d3:81:b2:ad:0f:94:b9:42:5b:91:ab:7f:30:c8:cd:
         b6:35:ad:f6:e6:3f:78:d8:5b:5a:8a:11:73:6a:38:e4:cc:37:
         c4:05:e4:0b:84:c1:ef:05:9e:2e:5a:28:df:18:4f:e4:9c:68:
         03:64:de:5c:d3:88:99:2d:05:15:01:c3:d9:49:61:9d:78:df:
         18:66:96:fd:15:05:0a:b7:b0:c3:3b:17:eb:e2:89:8f:7b:c4:
         68:f5:46:ec:5a:97:67:23:b6:b1:60:3a:5f:48:07:3b:cc:9d:
         2a:1d:9e:d6:20:ae:5f:78:ed:f9:c4:f4:ad:19:54:67:6a:d9:
         ee:3f:7e:13:b8:75:aa:dd:81:3c:df:be:33:e8:d7:bd:0e:98:
         9b:18:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:33 2026 by rpki-client