Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEB9CC80A76611EDA5D91754C4F9AE02.roa
File:                     CEB9CC80A76611EDA5D91754C4F9AE02.roa (raw, json)
Hash identifier:          sl4OseJG8jQ338sQNcdR5EgustRFNP7tfhvNSVZP/jM=
Subject key identifier:   68:2E:82:71:16:70:45:29:57:31:47:33:D7:BF:90:20:05:1C:3B:03
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D4D6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEB9CC80A76611EDA5D91754C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:34:24 +0000
ROA not before:           Thu 08 May 2025 16:13:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139504
IP address blocks:        103.75.41.0/24 maxlen: 24
                          2001:df6:2e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54486 (0xd4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:13:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bef0-6603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:7a:a4:88:f7:87:06:18:7c:24:60:b5:d2:
                    41:c8:fe:4b:67:e3:e1:ff:0d:08:5f:1c:f8:ea:2f:
                    27:ed:7f:e0:bd:cf:d7:72:ed:a5:d5:79:a6:32:a4:
                    7c:f6:d7:45:98:77:82:71:0c:b8:1e:b7:d5:2e:c8:
                    2a:b9:56:a7:74:97:c6:ba:34:14:51:0a:c8:7a:ff:
                    1a:96:cd:b9:0b:f3:2d:56:42:8b:44:07:b2:9d:93:
                    51:94:ab:f6:66:73:db:98:6d:5e:94:58:ed:c5:e0:
                    ac:35:77:85:80:71:20:28:83:bf:78:bb:a4:39:18:
                    3a:43:ce:74:ea:1a:2a:99:44:97:98:a1:16:1d:21:
                    8f:ff:eb:d0:a8:fc:cd:0d:d5:e8:67:ee:a8:57:f6:
                    39:03:f0:58:6e:a6:bf:dc:22:83:6c:da:82:72:42:
                    ec:76:4f:84:72:ff:5b:28:05:ea:ef:df:10:1f:bf:
                    30:62:60:81:5c:5f:f5:c8:7e:0d:f6:2b:48:54:13:
                    92:f5:0c:1e:cb:56:96:48:16:65:b9:2e:bf:20:0c:
                    21:61:2f:06:f8:49:85:f6:fa:54:b1:d2:d1:b6:78:
                    7b:9d:cd:6e:a0:3c:dc:47:92:d7:08:87:8a:fd:2b:
                    5c:5d:65:4e:40:ce:1f:b1:ec:11:5c:4b:ed:b3:77:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2E:82:71:16:70:45:29:57:31:47:33:D7:BF:90:20:05:1C:3B:03
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEB9CC80A76611EDA5D91754C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.41.0/24
                IPv6:
                  2001:df6:2e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:19:7f:e8:45:2a:61:43:70:12:81:a3:04:b2:4f:3b:58:
         9d:59:f1:df:cc:14:a2:2b:2d:05:6c:c6:58:65:d6:1f:7e:d4:
         5d:86:95:41:68:7a:f7:a3:9c:32:08:46:ad:43:c9:1d:ec:49:
         a4:6b:af:2c:66:30:29:36:d0:f1:89:1c:83:dd:a1:bb:81:b3:
         ec:8b:26:63:1a:87:5e:bd:70:e3:61:b8:4d:57:d2:c2:62:93:
         f1:81:0e:f2:f6:45:26:eb:6b:57:f7:8a:67:fe:bb:5c:0d:e0:
         fc:ac:ae:ac:5f:ca:bd:9c:c9:f2:48:99:68:dc:3d:b3:1d:b8:
         3c:54:3e:56:3c:be:51:86:db:86:4d:15:93:43:58:c8:7c:5e:
         5a:48:be:d6:60:aa:6d:f3:07:4e:54:7e:1b:02:ec:93:2d:0c:
         9f:4c:75:83:80:60:16:c4:2b:65:cf:b6:b1:b1:22:85:c9:b2:
         9f:7f:c3:59:bb:60:6a:1e:b1:76:82:dd:1b:bb:43:d0:fe:bf:
         c8:50:22:76:67:12:5b:78:44:89:6c:fc:f3:be:0c:8e:c4:f1:
         83:9c:12:02:1c:4a:76:f5:d6:39:1a:02:cc:82:15:9d:80:a5:
         29:64:63:fb:0a:dc:fc:20:33:7c:ed:6c:d6:a8:ab:b3:59:b7:
         75:87:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:48 2026 by rpki-client