Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AD1478E62F311F192AF92667147A888.roa
File:                     0AD1478E62F311F192AF92667147A888.roa (raw, json)
Hash identifier:          F5+YZRr4uzxhAfb2Ci69EHxhpi5j89g9i4SPUB1/9bc=
Subject key identifier:   EF:AB:72:C5:7C:AE:2E:09:E6:B7:CE:59:1F:7E:33:33:91:C3:69:63
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EC3E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AD1478E62F311F192AF92667147A888.roa
Signing time:             Mon 08 Jun 2026 04:32:22 +0000
ROA not before:           Mon 08 Jun 2026 04:32:22 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134026
IP address blocks:        45.115.104.0/22 maxlen: 24
                          103.55.88.0/22 maxlen: 24
                          103.70.200.0/22 maxlen: 24
                          103.92.112.0/24 maxlen: 24
                          103.131.27.0/24 maxlen: 24
                          103.140.219.0/24 maxlen: 24
                          103.177.174.0/24 maxlen: 24
                          103.184.70.0/23 maxlen: 24
                          2405:5c0::/32 maxlen: 32
                          2405:80c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60478 (0xec3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun  8 04:32:22 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a2645d6-c8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:59:27:67:1b:ab:38:45:bb:49:80:d0:37:
                    66:ad:3b:b9:8c:2f:b8:c7:d2:bd:5e:7b:b2:f9:b3:
                    74:ea:05:96:93:65:61:39:f3:c7:34:42:47:21:b1:
                    fa:37:92:89:42:63:87:bf:5d:66:e1:8c:b1:22:d9:
                    5a:8b:61:f1:1f:70:17:4b:1c:d5:0f:5d:97:7a:19:
                    f4:1b:ec:3a:6c:a4:cf:29:66:ff:9d:6e:5a:14:04:
                    4b:be:19:08:c7:d8:db:69:72:0c:d5:50:a5:6c:f4:
                    1c:ab:33:6a:f5:96:11:3c:4a:87:ab:a4:49:4b:9f:
                    b0:28:0d:c4:cb:b0:e0:79:44:ca:be:c1:3d:0d:73:
                    8e:1e:50:0f:68:4a:10:a1:df:19:1c:fd:35:cc:44:
                    94:f7:9c:e0:6c:ef:cb:ad:38:d3:9e:3a:a5:97:36:
                    02:f1:8d:1e:bd:70:4f:41:63:2d:52:80:0f:98:37:
                    3c:97:30:13:40:e9:9f:55:c4:22:b5:8f:4a:2c:d0:
                    7e:95:ff:42:2f:a6:5f:bb:e7:03:34:5b:f7:b2:36:
                    37:3b:1f:d9:d7:c6:22:af:4e:f9:a0:3d:e4:b0:8c:
                    e3:36:5d:44:6d:ca:bd:d4:52:df:de:40:4b:6c:f4:
                    ea:36:d9:87:ef:78:f1:cc:2b:b5:0b:1f:66:d2:85:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AB:72:C5:7C:AE:2E:09:E6:B7:CE:59:1F:7E:33:33:91:C3:69:63
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AD1478E62F311F192AF92667147A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.104.0/22
                  103.55.88.0/22
                  103.70.200.0/22
                  103.92.112.0/24
                  103.131.27.0/24
                  103.140.219.0/24
                  103.177.174.0/24
                  103.184.70.0/23
                IPv6:
                  2405:5c0::/32
                  2405:80c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:31:33:25:6b:a6:b7:2d:d6:c3:e8:77:40:4a:b8:ce:bd:
         58:16:51:04:2e:e1:38:4a:08:da:64:bf:87:4b:93:8c:12:73:
         89:d4:82:96:96:de:de:ea:35:71:94:06:3c:b0:03:4d:1f:e8:
         bd:de:21:d4:62:e1:cf:e9:96:26:ac:bd:3c:48:dd:19:d0:1f:
         d9:19:ae:91:30:78:ed:8a:ee:29:ee:e3:45:3d:ea:1e:ec:b2:
         75:5b:9f:8d:c3:f1:8a:6d:97:c8:2a:e6:f7:f4:fa:1b:40:d4:
         6f:8c:d6:20:cb:3b:d5:b3:0b:38:d9:a4:18:27:f3:02:56:de:
         a9:e8:ec:2e:93:1a:ca:db:ff:ba:28:4b:ec:69:1a:db:d6:2e:
         16:a5:62:04:89:0c:76:42:b9:62:4d:c6:7d:bc:c9:6b:75:22:
         ea:fd:5e:92:d9:81:47:90:21:07:8d:89:7c:8c:58:e6:b9:e2:
         7f:48:45:d3:6f:ed:09:70:f3:81:1d:c5:a7:c1:71:92:9e:f1:
         fb:e9:55:c5:35:9b:e6:1b:59:4f:01:89:5d:d3:38:6a:2f:fd:
         b9:2f:07:bc:ec:16:1b:c1:3c:72:91:61:22:82:65:90:9b:c3:
         00:df:06:3c:b5:89:06:7f:55:bc:43:0f:ff:a2:a5:34:b6:f2:
         aa:99:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:14:31 2026 by rpki-client