Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EFEA0EEA87FC11ECBECF542BC4F9AE02.roa
File:                     EFEA0EEA87FC11ECBECF542BC4F9AE02.roa (raw, json)
Hash identifier:          8ilc7+VMSTkzIY724p0AwAh0jU1Jw5nsma3h2vMjtMs=
Subject key identifier:   E4:63:D7:1A:87:89:E9:D4:D5:16:0E:B0:45:21:4B:C9:86:8B:47:46
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4A8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EFEA0EEA87FC11ECBECF542BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:27:03 +0000
ROA not before:           Mon 06 Jul 2026 17:27:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149230
IP address blocks:        103.181.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62632 (0xf4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:27:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be567-cac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:d5:fa:56:d9:2f:ab:30:56:6e:d3:fe:0f:
                    ac:ac:7c:9e:66:16:ba:cb:73:0f:22:ff:ce:c0:60:
                    5b:88:a1:48:03:e1:59:70:eb:9a:db:19:8c:8f:35:
                    39:ed:e3:4f:66:9f:e0:68:1d:c7:a2:d1:e2:25:e3:
                    c3:e8:71:fd:0d:b8:81:54:a9:a1:8e:47:e0:d5:61:
                    e6:88:2d:a3:1b:28:ed:56:3b:02:05:5e:1a:b7:05:
                    e4:3d:b2:90:5b:64:0d:ab:8c:f8:d7:eb:8b:eb:4c:
                    97:c6:78:98:e0:75:ae:7d:a6:8b:87:33:40:0d:a6:
                    98:97:34:18:45:4b:20:bc:3d:91:fc:14:27:18:fe:
                    4e:a9:91:65:76:15:c5:dd:74:29:1d:cb:61:71:9d:
                    5e:f3:1e:d9:6b:11:55:e3:b1:30:3f:88:c1:b8:f2:
                    0a:ed:b1:44:f1:18:d4:f7:b8:c0:5a:56:18:fd:5f:
                    6a:e0:fa:ce:d6:db:02:76:5c:a7:df:a4:d9:17:dc:
                    d9:ea:d5:32:96:51:d8:f9:1d:80:6f:2b:cb:38:be:
                    a9:0c:74:6c:93:73:e9:82:83:02:94:d2:35:39:3b:
                    f2:26:6e:ec:c7:6c:6d:74:82:98:98:40:59:75:96:
                    3b:03:ee:e8:a7:eb:ce:d4:b9:9c:f8:5e:70:50:63:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:63:D7:1A:87:89:E9:D4:D5:16:0E:B0:45:21:4B:C9:86:8B:47:46
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EFEA0EEA87FC11ECBECF542BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:2e:e9:aa:07:c5:0d:9a:fd:77:46:16:29:8a:e9:d5:4c:
         da:6b:ac:47:a4:8e:e8:09:63:22:23:89:dd:4e:b7:0d:86:da:
         aa:6a:b6:28:5c:7a:10:a3:5a:20:de:11:48:e7:b6:68:0e:e7:
         33:1a:43:39:9b:ab:8b:98:bd:24:d0:61:b7:81:53:aa:07:33:
         15:05:ae:b6:25:dc:6f:7a:be:98:d2:ac:c0:c2:1d:be:71:c5:
         42:6f:85:eb:6f:e4:9f:24:81:a6:15:af:81:8c:69:0e:98:49:
         57:20:6f:46:05:82:f3:6d:cd:36:d6:e6:42:38:fd:91:6c:71:
         d7:0f:77:3a:00:36:49:e6:3f:dd:1c:f1:7d:57:36:c5:f8:2e:
         e7:95:8d:87:ad:7d:27:00:90:7a:3b:be:84:a6:6a:d1:28:9a:
         09:4a:15:b1:91:84:f9:d0:13:e7:a2:c4:f0:0d:91:2b:ef:f5:
         02:22:cf:da:da:79:07:81:7d:e8:c1:ed:45:5f:e2:6c:dc:7d:
         a6:52:5a:c1:61:04:63:1f:f2:9c:e7:7c:b6:27:1a:83:a0:5c:
         d3:af:20:75:d0:95:8b:58:e5:ca:a6:2e:be:3a:09:b6:bf:a7:
         ed:2b:20:bd:34:27:02:d0:5c:b2:1f:25:57:0b:45:45:1e:41:
         95:e9:18:3d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPSoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjcwM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU1NjctY2FjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALPZ1fpW2S+rMFZu0/4PrKx8nmYWustzDyL/zsBgW4ihSAPhWXDrmtsZjI81
Oe3jT2af4Ggdx6LR4iXjw+hx/Q24gVSpoY5H4NVh5ogtoxso7VY7AgVeGrcF5D2y
kFtkDauM+Nfri+tMl8Z4mOB1rn2mi4czQA2mmJc0GEVLILw9kfwUJxj+TqmRZXYV
xd10KR3LYXGdXvMe2WsRVeOxMD+IwbjyCu2xRPEY1Pe4wFpWGP1fauD6ztbbAnZc
p9+k2Rfc2erVMpZR2PkdgG8ryzi+qQx0bJNz6YKDApTSNTk78iZu7MdsbXSCmJhA
WXWWOwPu6KfrztS5nPhecFBjb0kCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTkY9ca
h4np1NUWDrBFIUvJhotHRjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VGRUEwRUVB
ODdGQzExRUNCRUNGNTQyQkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWe1PjANBgkqhkiG9w0BAQsFAAOCAQEAZG8u6aoHxQ2a/XdGFimK
6dVM2musR6SO6AljIiOJ3U63DYbaqmq2KFx6EKNaIN4RSOe2aA7nMxpDOZuri5i9
JNBht4FTqgczFQWutiXcb3q+mNKswMIdvnHFQm+F62/knySBphWvgYxpDphJVyBv
RgWC823NNtbmQjj9kWxx1w93OgA2SeY/3RzxfVc2xfgu55WNh619JwCQeju+hKZq
0SiaCUoVsZGE+dAT56LE8A2RK+/1AiLP2tp5B4F96MHtRV/ibNx9plJawWEEYx/y
nOd8ticag6Bc068gddCVi1jlyqYuvjoJtr+n7SsgvTQnAtBcsh8lVwtFRR5BlekY
PQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:48 2026 by rpki-client