Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa
File:                     9ABEAFE6649A11F1A997716E8547A888.roa (raw, json)
Hash identifier:          vQo/E+Zxuvy6iS8vKFrTyWyCo5ONrtovbxK9wyLHdlk=
Subject key identifier:   5C:67:8B:DE:9E:F9:E7:36:7C:28:34:EC:9D:9A:69:EF:B2:73:8A:32
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EC73
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa
Signing time:             Wed 10 Jun 2026 07:04:21 +0000
ROA not before:           Wed 10 Jun 2026 07:04:21 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     147224
IP address blocks:        27.0.144.0/24 maxlen: 24
                          103.108.45.0/24 maxlen: 24
                          103.137.45.0/24 maxlen: 24
                          103.148.6.0/24 maxlen: 24
                          103.174.247.0/24 maxlen: 24
                          103.178.0.0/24 maxlen: 24
                          103.178.1.0/24 maxlen: 24
                          103.207.176.0/24 maxlen: 24
                          103.207.177.0/24 maxlen: 24
                          103.207.178.0/24 maxlen: 24
                          103.207.179.0/24 maxlen: 24
                          103.207.180.0/24 maxlen: 24
                          103.207.181.0/24 maxlen: 24
                          103.207.182.0/24 maxlen: 24
                          202.47.174.0/24 maxlen: 24
                          2001:df0:f740::/48 maxlen: 48
                          2001:df1:e40::/48 maxlen: 48
                          2001:df2:16c0::/48 maxlen: 48
                          2001:df3:93c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60531 (0xec73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 10 07:04:21 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a290c75-f1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:05:75:65:88:94:14:d2:c8:bc:73:77:84:
                    41:6f:93:1f:a8:f7:de:54:90:31:61:bd:8d:d7:03:
                    06:0d:fc:6a:04:e8:2e:13:b4:7e:67:96:7a:16:7c:
                    62:e9:93:b5:8a:68:d3:18:18:28:a4:4b:02:90:20:
                    73:72:d1:2a:2d:2a:a8:bc:5a:f5:52:eb:2f:f8:bc:
                    5e:a5:2d:d5:d8:b9:ca:85:11:3c:b1:e9:58:51:c9:
                    47:73:5d:52:2f:ea:7c:a2:e4:49:3b:35:e7:ba:cb:
                    0f:d4:81:9d:b0:47:ac:84:90:33:61:8f:60:f8:62:
                    ec:75:3b:02:f4:7f:a3:60:23:cd:39:3f:2a:75:c6:
                    10:34:ff:97:31:89:75:86:05:c4:98:a5:2f:65:43:
                    b3:a6:50:fa:5d:5c:8c:51:52:43:38:ed:84:d9:94:
                    8c:f8:cc:9c:4f:7a:5a:92:75:dd:2d:28:f8:f8:cf:
                    c4:ac:d7:0a:52:09:5e:d3:0a:9d:6f:02:5a:7e:ae:
                    8e:d2:f1:2f:3b:cf:66:1f:d8:f9:eb:c4:e0:27:08:
                    24:38:61:06:0a:33:51:33:ba:4d:a4:33:69:83:2c:
                    8e:b8:29:2e:a4:14:c5:02:a7:01:11:ac:0b:0b:b8:
                    ee:e5:e5:a0:54:6a:33:3d:ac:39:8e:be:54:b4:b1:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:67:8B:DE:9E:F9:E7:36:7C:28:34:EC:9D:9A:69:EF:B2:73:8A:32
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.144.0/24
                  103.108.45.0/24
                  103.137.45.0/24
                  103.148.6.0/24
                  103.174.247.0/24
                  103.178.0.0/23
                  103.207.176.0-103.207.182.255
                  202.47.174.0/24
                IPv6:
                  2001:df0:f740::/48
                  2001:df1:e40::/48
                  2001:df2:16c0::/48
                  2001:df3:93c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:95:4c:18:93:8e:df:ed:02:84:aa:9c:be:74:23:f8:44:d5:
         e6:81:f5:1d:19:66:dc:e2:af:c6:b2:d4:a5:81:20:c0:9e:a6:
         57:f2:b5:62:e8:69:8a:ad:2d:19:bd:90:b4:cc:66:6b:29:76:
         9c:2d:5e:7d:8a:58:da:9c:0c:81:83:cd:f1:a2:02:58:4a:98:
         c8:19:1b:16:52:3f:70:4d:7b:24:43:d1:4f:38:76:6c:81:01:
         a3:f7:56:93:6b:ae:e2:a7:88:f3:9d:51:7f:71:ae:f3:88:f8:
         fe:5d:9b:e4:c7:4e:e6:e5:a3:d7:d2:6f:5a:b6:e9:9c:c9:7c:
         83:b2:0c:6e:ae:da:02:d6:e7:ff:33:6f:e2:48:84:b2:8a:b2:
         7a:9f:60:28:30:96:b7:d3:27:25:72:2e:ba:64:38:38:68:af:
         ef:4f:7b:95:91:61:ad:04:3e:88:6e:79:a6:3f:3e:6f:52:28:
         87:01:43:31:55:19:86:0f:c4:95:d5:cd:33:33:4f:cb:0c:90:
         46:94:04:16:20:63:32:03:9a:cc:b7:36:76:1c:69:29:80:a1:
         66:ac:1e:f1:00:dd:09:36:c4:37:04:3f:af:99:fe:30:fc:7f:
         73:42:6c:72:ab:2a:a0:1b:31:af:37:a4:fe:8d:7f:a3:61:36:
         a4:d5:0f:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:26:39 2026 by rpki-client