Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa
File:                     EF2F0372C9F211E986C3B486C4F9AE02.roa (raw, json)
Hash identifier:          OwaX0UG7/hJcFPCKxkwtoBgH6ACvrE1k7J8ZbYuydvo=
Subject key identifier:   BD:0D:5B:E8:9F:25:F5:B5:23:8C:7C:07:56:6C:FE:AB:CF:30:36:CD
Certificate issuer:       /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial:       1EDA
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa
Signing time:             Mon 27 Jul 2026 22:46:16 +0000
ROA not before:           Mon 27 Jul 2026 22:46:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     63989
IP address blocks:        103.58.148.0/24 maxlen: 24
                          103.58.149.0/24 maxlen: 24
                          103.58.150.0/24 maxlen: 24
                          103.58.151.0/24 maxlen: 24
                          202.9.89.0/24 maxlen: 24
                          202.9.90.0/24 maxlen: 24
                          202.94.166.0/24 maxlen: 24
                          2402:6880:1000::/48 maxlen: 48
                          2402:6880:2000::/48 maxlen: 48
                          2402:6880:3000::/48 maxlen: 48
                          2402:6880:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
                          rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7898 (0x1eda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
        Validity
            Not Before: Jul 27 22:46:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a67dfb8-769e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:49:6c:d1:42:55:4f:cf:50:a0:2b:4c:61:
                    ef:8a:b3:29:1c:91:d1:34:a8:c2:ca:66:3f:b3:d8:
                    14:f4:2f:95:2f:e5:72:ec:d0:e6:75:c0:41:fe:5d:
                    aa:1d:75:fa:9c:47:4b:c6:f8:8e:fe:d6:7c:f4:2d:
                    60:1e:ec:bd:1f:17:4e:11:12:66:a4:1e:eb:cb:26:
                    51:e9:6c:77:84:9c:32:a7:df:fa:0c:29:8f:24:fc:
                    cf:b6:95:a6:6c:21:34:b2:a1:4e:45:e5:50:21:5a:
                    b3:e6:0c:39:5a:dc:3d:82:c6:5e:51:89:e5:d9:f0:
                    c8:35:e5:a2:70:68:06:1e:97:bf:2b:0c:7e:7d:ad:
                    5e:cc:f1:61:e6:5a:e7:50:6a:25:e8:8b:6e:2f:3d:
                    72:dd:a7:95:36:e1:2a:61:2e:41:1e:b3:70:5c:b6:
                    b9:40:4b:a0:33:59:23:9d:b6:59:05:22:5f:60:61:
                    5c:17:9c:b3:dd:ba:e0:b5:9f:05:35:19:1d:a2:ca:
                    24:8d:d6:ae:0f:5f:09:3b:a6:fe:b5:bc:d9:23:7b:
                    4c:a2:bf:31:c3:7a:ff:a4:c1:7a:4d:c1:f0:79:50:
                    e5:21:cb:2a:60:b0:5c:a5:2b:a7:b2:97:e2:42:c4:
                    5e:6b:86:64:f9:22:6f:95:61:00:37:62:bf:c9:ea:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0D:5B:E8:9F:25:F5:B5:23:8C:7C:07:56:6C:FE:AB:CF:30:36:CD
            X509v3 Authority Key Identifier:
                keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.148.0/22
                  202.9.89.0-202.9.90.255
                  202.94.166.0/24
                IPv6:
                  2402:6880:1000::/48
                  2402:6880:2000::/48
                  2402:6880:3000::/48
                  2402:6880:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:61:f6:8c:75:57:af:01:77:06:93:aa:a4:b2:c6:31:06:45:
         aa:28:be:79:46:5f:2c:0b:6f:8e:9d:6a:b4:bb:d9:9f:45:b9:
         77:2a:66:5b:82:35:b2:e4:c5:62:e3:f2:c1:4e:0e:d9:40:ff:
         e2:1d:61:b8:f9:c6:43:ed:ff:ee:11:b6:59:bf:ed:5a:76:34:
         a8:bd:16:37:73:7e:f4:65:be:3e:b2:64:f4:aa:0a:30:9c:f4:
         33:ca:ae:02:ca:89:71:13:a5:2b:05:d3:23:33:3d:46:3c:1c:
         94:09:26:05:e1:5d:ef:49:15:b0:a5:e9:fa:8a:78:35:36:b7:
         2a:c5:b2:b3:a3:28:82:42:6e:22:07:7f:57:19:62:2c:d8:5e:
         58:8d:9f:57:d4:70:70:95:1e:d3:e9:b8:f7:3f:29:0a:04:ae:
         31:45:cf:83:95:1d:2a:12:33:a2:8c:79:7d:fb:cd:54:bd:5c:
         1a:76:a7:48:ee:05:5c:32:7a:21:fd:61:05:f3:da:2d:2b:94:
         a9:0d:fd:17:18:66:45:e4:e5:f7:e4:70:9a:e5:9b:e1:d6:6d:
         20:cb:33:46:82:bb:f9:a3:8e:fa:c8:80:62:79:8a:90:23:f4:
         e0:88:62:3e:6c:1a:11:e3:f4:fa:ac:02:f4:cc:c4:1e:4c:b2:
         1e:32:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:10 2026 by rpki-client