Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEB826C8CD5711EDB0692553C4F9AE02.roa
File:                     EEB826C8CD5711EDB0692553C4F9AE02.roa (raw, json)
Hash identifier:          zbw2K7xQ9K/tovJIiw2VjT2VmDBzi4tUDb6z76VGsUA=
Subject key identifier:   CD:59:9E:13:B2:73:0C:F4:2A:99:AF:C2:63:2A:1A:1C:EF:97:3F:A7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4C3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEB826C8CD5711EDB0692553C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:27:55 +0000
ROA not before:           Mon 06 Jul 2026 17:27:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149270
IP address blocks:        103.181.140.0/24 maxlen: 24
                          103.182.130.0/24 maxlen: 24
                          2400:59a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62659 (0xf4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:27:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be59a-634c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d0:43:7b:53:06:7b:81:4a:a6:65:17:5d:f4:
                    7f:64:dd:ec:d0:66:7d:92:43:f2:3e:63:b2:6e:70:
                    b8:3b:9f:33:56:fb:e6:85:84:db:f2:f0:39:3f:15:
                    05:1f:b0:e2:56:1f:58:d3:e3:33:0d:1d:2e:6a:2b:
                    12:51:3c:00:9e:38:2b:8d:54:6f:7a:13:c9:b6:69:
                    91:1b:38:ce:46:7e:11:a5:42:06:a6:7b:69:e8:f9:
                    4a:2b:7c:e4:5f:97:fd:ad:1f:64:e6:70:f5:02:ac:
                    33:b4:12:44:1f:a8:ed:05:21:c4:6c:e4:fc:72:8f:
                    7c:a4:3c:2f:02:3e:0b:46:77:01:e5:5e:6a:2c:01:
                    e2:4c:d8:63:e7:c9:2d:14:52:35:a1:44:a8:93:fa:
                    38:e3:38:42:bb:69:5a:a9:6f:28:b7:89:76:75:77:
                    73:e6:91:0f:09:e1:e5:4e:42:79:dd:c8:75:09:10:
                    14:99:41:21:12:4b:89:1e:7c:31:fb:5e:8f:f3:a5:
                    b8:98:8c:0d:b3:84:18:47:2d:9e:1e:74:78:c4:82:
                    db:f1:c3:dc:bf:c5:01:eb:1c:a9:01:6f:1e:1e:8d:
                    13:0b:44:6f:ae:5b:d6:c6:fc:36:2d:35:df:f2:59:
                    86:1e:f3:f9:06:08:d5:8d:fb:ec:6e:34:fb:41:72:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:59:9E:13:B2:73:0C:F4:2A:99:AF:C2:63:2A:1A:1C:EF:97:3F:A7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEB826C8CD5711EDB0692553C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.140.0/24
                  103.182.130.0/24
                IPv6:
                  2400:59a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:da:bc:ac:a6:6a:a8:0b:c6:a2:d7:b8:30:d0:ce:d0:17:eb:
         91:78:3a:cd:93:48:ad:44:f6:33:9a:7e:2b:5f:7f:8d:e2:1e:
         5a:c3:89:99:3c:91:1a:89:13:1c:9e:78:90:19:3b:d5:ba:1c:
         d0:ab:8e:eb:0a:32:6e:dc:38:48:03:1c:b7:e3:12:ce:29:b4:
         5f:c3:73:fd:30:ac:90:98:16:35:26:9c:fe:87:48:8b:6f:7e:
         92:22:c9:d6:b7:6a:89:74:20:67:8a:94:36:7a:ce:9d:ee:8d:
         7a:99:3d:91:bb:61:98:65:0e:83:a6:6e:7a:a7:e7:39:5c:38:
         74:0a:2e:3f:8e:80:da:90:5c:18:d6:fb:59:3e:70:7e:f6:d7:
         75:96:a7:0b:ad:d8:fa:52:70:dd:24:89:e4:7f:3b:7a:64:7e:
         61:94:bd:59:03:6f:30:1a:c6:9f:52:ff:b3:74:de:1d:ae:5c:
         40:e1:8f:7a:39:17:cb:ad:39:83:c9:86:6d:09:10:fe:0f:b6:
         c1:89:8f:55:51:52:2c:fa:be:80:a9:ce:1f:9e:b6:4d:91:2c:
         b3:cb:c0:47:f6:29:a8:6f:61:df:78:6f:b3:ac:a5:86:d8:36:
         b9:e7:63:9c:b4:b5:fe:2c:e5:a1:07:e1:99:66:90:32:10:16:
         db:84:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:37 2026 by rpki-client