Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB500454BDD011EA9702FC12C4F9AE02.roa
File:                     EB500454BDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier:          hkTU+1n3pyGoyP5F8fRTnePXtYAF9nd0Ok04M2/k1Cg=
Subject key identifier:   02:42:01:67:FE:61:74:BF:FB:63:CD:BC:0C:FF:82:27:97:4F:7B:6B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E66E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB500454BDD011EA9702FC12C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:10:24 +0000
ROA not before:           Sun 31 May 2026 17:10:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140116
IP address blocks:        103.151.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58990 (0xe66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:10:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b80-0623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:fe:24:15:78:57:fa:d2:39:03:b7:9d:09:
                    b0:d2:e2:1e:ae:07:52:ba:cb:78:a5:17:1f:0b:5c:
                    41:14:b5:08:94:36:f7:3e:5c:1f:22:80:74:eb:57:
                    eb:aa:c2:88:5f:1c:a8:33:5e:bd:cc:5d:a4:41:ac:
                    8f:7d:13:ab:40:2a:f8:41:ed:64:8c:b6:f0:04:f6:
                    b8:05:e5:9f:33:54:3e:01:9a:6b:ad:04:8d:d0:ee:
                    25:76:4e:9d:90:7f:a5:c5:b3:61:9c:37:29:4b:08:
                    16:19:57:bd:27:f7:31:45:3e:e8:10:52:0f:d4:1e:
                    f5:82:c5:b6:d0:a8:63:11:bb:9d:ac:33:d0:a8:07:
                    d6:f4:8a:f9:41:e0:78:3e:7c:10:c2:ad:90:60:74:
                    d6:96:d3:7a:92:b0:29:02:08:a6:b3:98:c9:58:79:
                    19:8c:21:1e:b4:37:12:91:ff:fa:c3:d8:12:b1:5e:
                    a7:38:d7:d4:c9:a6:f7:33:f6:91:f4:38:e2:76:9f:
                    b8:4a:f0:da:ff:14:f6:51:a4:0c:0f:31:15:fd:ff:
                    6c:59:72:b3:d1:5c:41:85:44:e0:8c:a8:c0:69:d4:
                    28:5d:96:f0:a6:eb:95:35:39:0f:a8:f8:79:fb:3c:
                    43:0b:8f:ee:c2:65:68:8d:65:f1:3e:c9:e2:37:2c:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:42:01:67:FE:61:74:BF:FB:63:CD:BC:0C:FF:82:27:97:4F:7B:6B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB500454BDD011EA9702FC12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:62:e9:10:26:87:2b:8c:e9:0b:b5:e2:66:da:a9:5e:04:88:
         dd:65:bf:6d:05:3d:ab:10:5e:92:d9:53:ff:37:e0:e8:f5:06:
         17:14:9a:2b:77:28:94:0c:dd:39:68:16:ee:73:62:b8:45:b8:
         d8:a8:25:8a:ad:c9:61:31:ea:46:7a:74:f6:b1:c5:59:f2:6e:
         c2:64:5b:6d:d1:ea:dd:82:a3:13:15:21:23:c8:3f:8f:6b:f1:
         ba:b0:e7:a2:81:48:bd:57:26:bd:ac:10:7c:34:db:92:1c:6f:
         e7:6d:83:f0:ea:d4:0f:17:02:6d:ef:55:e3:bf:20:46:13:74:
         3d:16:94:9f:3a:08:c4:cf:8b:fe:b8:f6:6f:c2:fc:a3:94:8c:
         26:ac:65:be:93:47:90:16:70:c6:5d:b9:b5:52:84:1e:b0:2e:
         f4:eb:ca:51:7d:05:22:17:c5:c5:5f:0d:03:b2:49:41:cb:04:
         89:e9:a1:93:8c:73:cd:17:89:5b:cb:64:39:b9:18:4a:1c:49:
         cb:7c:cf:13:53:43:1e:0b:80:0d:11:6b:0b:31:bf:5f:00:88:
         1b:d6:1b:15:56:9f:5c:11:6c:96:4a:58:1c:15:27:f6:94:68:
         89:d4:f6:ff:da:8a:4b:ae:eb:3f:e7:c5:f1:f6:c2:21:6d:84:
         5f:1d:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:39 2026 by rpki-client