Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa
File:                     EF0F317E15FD11ECAF541012C4F9AE02.roa (raw, json)
Hash identifier:          ZKaUw0twI8fJtuL9/gwcpDAc/hSC9escFuxcQ4WHQeY=
Subject key identifier:   00:C7:A8:F9:DE:46:A4:67:C6:D2:7F:10:D7:8C:28:9B:19:FD:FD:D0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:21:27 +0000
ROA not before:           Sun 31 May 2026 17:21:27 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142513
IP address blocks:        103.170.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59329 (0xe7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:21:27 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e17-e73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:80:68:d6:9d:86:6a:c0:0e:2e:6f:0d:54:d2:
                    a9:ea:85:6a:79:cb:e6:64:4d:e9:f4:ec:f5:84:0f:
                    21:4c:e4:90:5f:55:4c:cd:13:2e:ec:21:d0:29:61:
                    a4:ea:89:a8:37:51:8d:10:eb:6f:e9:31:b2:0b:83:
                    c3:dc:21:1e:00:18:1e:bd:4e:4b:4d:3d:0e:4b:82:
                    7a:63:05:aa:7b:59:65:4f:49:1f:db:61:dd:e5:92:
                    6f:8c:2c:36:47:64:26:46:ed:c2:35:60:bb:1b:a8:
                    b0:58:0c:74:e1:93:ff:0f:db:78:be:d6:40:d0:8d:
                    0b:7a:13:c4:13:27:96:93:a8:73:ef:6c:c2:60:3d:
                    f4:6b:14:bf:5f:26:33:d8:47:9e:93:3f:01:c8:09:
                    dd:c1:13:f7:e3:0e:d5:c0:78:c2:c4:d1:54:a3:23:
                    a0:05:4d:90:a8:81:55:d1:72:b6:ca:e6:a2:0a:6e:
                    53:43:56:72:1d:1c:c9:e5:64:57:95:43:a0:8b:0d:
                    88:95:99:22:5d:79:26:20:eb:59:49:ea:d6:36:0a:
                    1b:e6:7b:11:f4:c9:b6:00:a4:cb:84:88:f4:13:63:
                    bc:91:bc:bd:25:a3:d3:7a:04:08:4b:62:5e:fc:6c:
                    41:26:1a:54:b2:4f:ed:e0:41:df:6d:36:64:13:9a:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C7:A8:F9:DE:46:A4:67:C6:D2:7F:10:D7:8C:28:9B:19:FD:FD:D0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:21:1e:93:98:b5:1d:62:21:24:96:87:82:67:ad:04:a3:
         28:fc:c2:21:db:ed:66:c1:0f:a3:2a:2b:df:2b:1c:23:4d:93:
         f1:30:2a:e8:35:74:6d:1e:89:39:89:b4:77:d3:4f:26:f5:8e:
         23:31:ea:7d:56:a5:30:78:25:4f:46:b2:05:81:e7:a2:a3:56:
         27:76:2a:a3:d2:b5:53:3b:db:82:ea:d3:10:36:0a:51:31:fd:
         82:96:fd:43:b0:1d:cf:0a:b0:95:fb:c5:7e:6b:99:c7:93:09:
         b5:75:8d:49:70:99:2a:38:ba:a1:b3:78:c3:7c:29:d4:f9:c1:
         e1:63:f5:d6:bf:5b:f3:46:b1:31:62:f2:f3:9d:32:c4:e6:74:
         f0:69:f3:b1:2c:43:30:27:9d:2a:9d:e1:6a:f9:fb:7a:6c:40:
         9d:be:cb:17:22:d3:74:6b:f0:46:3b:1a:cf:12:55:dd:55:49:
         72:4e:02:c4:ff:8d:fe:b3:e3:7b:de:f9:89:39:2f:74:f6:0e:
         b4:d3:4e:12:71:0e:0d:65:e8:94:3e:17:46:d8:f5:e8:2c:92:
         f5:3a:a5:60:9e:50:ba:ae:62:8d:6f:82:e9:0b:c9:fb:17:08:
         48:c1:bc:e4:d7:1e:c7:a7:99:bd:a8:cd:e7:fb:60:ed:18:ce:
         dc:de:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:05:19 2026 by rpki-client