Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE9694C4732C11EE95CFE00CC4F9AE02.roa
File:                     EE9694C4732C11EE95CFE00CC4F9AE02.roa (raw, json)
Hash identifier:          G4cC8/sLqIJb3GgzfM4ONzrttFFhrAiueC3mQ4DcCEE=
Subject key identifier:   A9:EE:16:AC:9A:C0:54:00:AF:E4:A0:AC:F6:AD:E2:0A:2C:84:76:FC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F590
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE9694C4732C11EE95CFE00CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:34:37 +0000
ROA not before:           Mon 06 Jul 2026 17:34:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150614
IP address blocks:        103.42.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62864 (0xf590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:34:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be72d-9719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:77:f3:51:a4:d3:69:76:9f:59:04:ec:b1:
                    2d:c1:cb:a1:21:07:e8:13:94:ea:c6:60:02:c2:5b:
                    52:42:d9:62:30:2e:c0:2c:36:7e:6c:e0:6f:93:fd:
                    a4:05:65:f8:0a:25:e0:37:d0:ea:e7:2a:2f:6b:d1:
                    d5:f1:65:e1:12:39:63:78:03:97:f2:df:e1:dc:8f:
                    74:43:d2:34:3d:0a:e5:ca:d9:05:11:d3:52:0f:79:
                    e3:09:bd:36:7f:27:f6:f3:45:16:41:31:43:b7:60:
                    01:c5:21:34:bf:b9:7c:e6:c6:c7:e2:14:4b:9e:19:
                    a0:3d:06:e0:6d:47:07:f7:6d:75:8d:78:41:4c:f7:
                    71:23:4c:8a:fc:d5:47:4e:2e:95:68:82:42:33:c5:
                    38:af:f8:68:d6:20:a3:cd:0e:81:cf:f3:fe:c0:66:
                    bc:41:ff:90:6a:cb:7a:ac:11:7e:1a:65:4e:91:f2:
                    07:93:91:a1:4c:50:db:cb:49:ea:b9:68:9d:f3:11:
                    bc:3e:a3:07:27:1a:ed:f1:cd:fd:85:9c:49:28:95:
                    d1:e9:9f:2e:50:e5:e6:6c:d0:fa:8e:53:89:5c:5d:
                    2a:8d:65:65:ad:90:3f:dc:de:6e:aa:d1:87:8f:f1:
                    88:ee:a7:99:73:f8:a4:60:44:79:47:be:b2:ab:8e:
                    28:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:16:AC:9A:C0:54:00:AF:E4:A0:AC:F6:AD:E2:0A:2C:84:76:FC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE9694C4732C11EE95CFE00CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:7f:0e:d5:dd:30:b1:43:4b:22:d2:ad:0c:13:6d:49:e0:
         a0:50:b7:4d:38:67:60:55:05:ef:9d:5d:94:ed:7d:c1:64:65:
         cf:d2:1f:6b:d4:ec:47:fb:39:9f:7b:90:16:cf:7e:a8:5c:3e:
         81:1b:85:22:1e:29:c2:db:a0:df:aa:51:76:4f:f8:6b:44:2e:
         06:a3:cf:ce:24:93:a7:45:bf:4f:aa:4e:ce:c4:73:0d:69:72:
         13:ab:88:50:60:07:a8:39:6f:df:1d:20:1b:3f:91:59:47:04:
         fa:f9:b6:39:70:30:ac:c7:13:c3:1d:de:72:2e:07:c6:bb:e7:
         db:40:ea:07:8e:2b:06:d2:1a:9a:69:4e:9c:74:70:30:96:fb:
         0b:96:3d:fb:5b:54:97:c2:d6:4c:28:03:e0:d4:b0:19:18:4d:
         6f:98:9e:33:68:30:5b:ad:78:06:4b:4a:f2:2c:86:06:ef:a7:
         5e:c7:f3:70:51:ac:ff:71:61:6c:e1:83:29:ae:b8:80:9b:d7:
         2e:6c:2d:20:f3:dc:84:e5:00:45:57:20:8a:b0:9e:6a:91:ef:
         12:11:88:1d:a1:8f:05:f8:54:23:ee:7d:4a:e2:42:c9:42:9b:
         c6:b8:9b:87:e7:1e:a8:b0:01:b5:0e:f3:19:1c:8b:d9:d1:fd:
         ea:69:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:18 2026 by rpki-client