Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa
File:                     ED364E08863111EF877E864EC4F9AE02.roa (raw, json)
Hash identifier:          tPSfIfZhoqd7U1sM0UWZUm6KC/ClcV4gL6zwp+PxhH4=
Subject key identifier:   B7:4D:F2:99:4A:4C:9A:9E:9C:CD:CB:3F:18:98:F4:76:90:64:A8:8D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE4E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:33:22 +0000
ROA not before:           Mon 06 Jul 2026 16:33:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133006
IP address blocks:        103.38.88.0/24 maxlen: 24
                          103.253.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61006 (0xee4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:33:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd8d2-7bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:79:07:cb:57:fc:bd:15:b2:7d:f1:c9:75:
                    83:62:dd:6e:35:d3:f7:69:4d:4a:d9:46:a3:2f:56:
                    70:14:62:18:ea:73:e6:04:0e:19:d3:41:0a:e7:84:
                    d1:1e:f7:57:ae:9f:36:a0:61:6a:b9:c7:a2:b7:20:
                    26:0f:a0:6c:f2:38:ff:ec:d9:7a:04:89:61:15:c8:
                    36:2c:4b:3e:5e:2b:81:94:62:a5:10:7b:44:f0:7d:
                    37:fd:07:a0:0d:3d:23:57:b4:6e:e3:d0:9d:b0:58:
                    03:70:6c:49:28:b8:9d:1e:96:bd:1e:a9:be:b2:34:
                    03:99:ed:3b:f8:e8:29:58:57:59:f3:c2:d5:81:e1:
                    c2:9c:c8:40:43:3a:20:ec:71:22:fd:c6:1d:d9:98:
                    a8:d8:62:e9:04:8b:17:e6:13:82:f2:fd:14:67:0c:
                    29:3c:62:00:0d:4a:5e:5b:e2:44:b7:34:6b:ef:f1:
                    4e:d6:9e:38:b7:bd:ed:28:55:c0:50:6a:a3:01:11:
                    83:bb:31:62:89:94:c9:ca:e8:15:a4:b0:cb:95:9d:
                    5c:c5:59:d7:81:67:64:96:a3:e9:e7:b8:36:79:b1:
                    e9:92:6d:c5:d4:9a:0f:4d:04:f9:f1:f6:bc:0c:c8:
                    02:dd:6e:67:64:0b:11:4e:b0:aa:2f:ff:fc:92:ee:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4D:F2:99:4A:4C:9A:9E:9C:CD:CB:3F:18:98:F4:76:90:64:A8:8D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.88.0/24
                  103.253.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:62:e6:70:a5:5d:9f:81:b2:35:de:d9:90:23:a5:7e:e4:c2:
         ad:bb:06:f9:4f:ad:7b:d3:39:13:cd:9b:76:50:b5:c3:ee:4b:
         c0:ad:e1:36:59:23:ca:a1:eb:eb:c6:93:e0:8f:90:4b:17:14:
         82:03:3c:4b:be:cd:2c:e6:d4:ed:29:a6:3e:dc:aa:e5:ee:f9:
         53:06:ca:77:f3:ac:03:9c:d5:36:5c:96:ae:53:76:1b:1d:1c:
         5e:99:d8:ef:37:b3:cf:46:44:52:f8:7c:bc:bc:7e:00:61:bd:
         7b:88:bc:11:85:72:c2:c9:ee:1a:eb:31:59:aa:86:e2:24:a4:
         74:fc:5e:ab:72:62:89:ca:40:a5:06:e0:de:be:73:cd:93:96:
         f4:22:b5:00:98:b8:b1:f3:4d:94:43:ff:96:e4:04:48:54:b0:
         24:54:ae:74:73:bd:03:e3:58:46:03:28:7e:80:45:0a:b1:41:
         a2:c1:74:fd:9f:75:88:07:55:1b:31:ac:ab:02:e2:46:d1:c5:
         d6:38:65:dd:12:6d:53:34:81:b3:8e:2c:ba:ec:8c:de:1a:ad:
         e6:88:a7:0d:00:7b:01:06:19:03:4d:cc:5d:41:c4:51:2e:3f:
         b3:2e:5b:21:aa:6c:37:13:64:7e:fb:75:c3:a1:76:2b:72:57:
         4d:14:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:39:19 2026 by rpki-client