Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EABEE5F6DF9411EF9E49D91FC4F9AE02.roa
File:                     EABEE5F6DF9411EF9E49D91FC4F9AE02.roa (raw, json)
Hash identifier:          CYnL1p/QnNT2VZsPGqSbyunZ9WYcehMnD9TtBIxm1o0=
Subject key identifier:   CD:18:7E:95:2E:B4:2C:6D:B7:9F:04:D9:E9:3C:BB:C1:7B:CD:AA:25
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D728
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EABEE5F6DF9411EF9E49D91FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:48:29 +0000
ROA not before:           Thu 08 May 2025 16:24:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150024
IP address blocks:        103.191.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55080 (0xd728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:24:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c23d-c9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:94:59:32:69:44:cc:c0:c1:51:d2:44:4f:
                    4e:ff:4e:d7:10:a5:7b:c0:e6:6d:e4:9a:97:e4:02:
                    fc:12:8a:2a:89:e5:41:8b:4b:ce:28:7a:b8:7a:7c:
                    79:00:92:2d:8f:e2:a7:6b:c4:5b:19:93:d3:27:59:
                    7f:8c:bb:31:90:30:24:a4:17:34:a9:3f:a1:23:f6:
                    10:6a:1a:71:9c:01:59:37:84:c7:de:da:f7:9f:24:
                    8f:77:19:b4:e6:5c:19:b1:4d:76:38:df:20:79:0a:
                    d6:a6:25:a3:3c:90:de:13:58:64:0f:29:6a:99:09:
                    11:65:94:6b:1f:c7:0d:8e:87:ed:88:7d:c7:71:03:
                    e0:53:e0:d3:68:3d:51:32:bd:8d:aa:77:04:89:75:
                    39:4e:a9:69:c5:67:6b:94:2a:70:d9:e8:0f:a3:f4:
                    0a:bc:b1:65:ed:81:86:f3:f2:cd:ab:7a:d9:f4:36:
                    c9:b1:66:02:f0:43:d6:ca:1c:2a:ac:99:47:82:b1:
                    3b:cd:2f:09:9a:d3:47:ec:2f:88:ae:93:d4:b0:a9:
                    09:de:91:a3:9b:71:4b:9d:be:72:e8:e6:9e:ba:84:
                    e0:e9:80:f3:2a:73:db:31:7e:0b:ba:11:8e:f4:af:
                    c4:78:e3:8c:97:1d:90:4f:75:6d:1d:56:81:db:b3:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:18:7E:95:2E:B4:2C:6D:B7:9F:04:D9:E9:3C:BB:C1:7B:CD:AA:25
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EABEE5F6DF9411EF9E49D91FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:0d:13:b2:77:cc:c6:fb:98:56:dd:61:09:77:92:37:ff:
         ba:28:a2:77:9d:52:3e:79:12:8d:98:7c:55:f0:06:dd:09:3c:
         5c:98:29:1b:04:87:b0:bb:57:21:63:49:7e:74:4a:28:3c:d7:
         c6:91:18:66:b9:74:02:7a:d7:31:08:91:c8:2d:0d:cb:2a:fe:
         90:49:cf:20:df:e5:35:a3:c1:73:e8:00:3f:0c:d5:51:03:db:
         a2:e3:7b:d0:80:5b:ce:cc:67:2e:e5:3d:72:05:f3:e8:8a:45:
         6d:17:59:a3:99:66:0d:7c:43:aa:6f:1e:6a:4f:4d:a7:d8:76:
         09:4e:6d:18:29:b9:3e:d8:2c:63:52:3b:6d:b9:d5:fb:9c:28:
         63:80:2d:64:73:f9:fb:e8:67:f6:38:3e:bc:eb:d8:4b:84:11:
         79:96:51:bc:8e:dd:a0:c8:c1:88:ed:b6:20:8f:95:1b:4a:36:
         ed:1a:b9:52:72:23:55:e8:6f:89:00:91:cb:f7:15:54:a1:7b:
         8e:b6:76:30:84:5d:8d:48:f6:80:f4:a8:54:5e:7a:49:90:ef:
         86:8f:ae:fb:52:70:76:e0:f8:fe:24:6f:65:e8:84:fe:99:6f:
         8a:f0:34:f4:14:d3:47:ec:2c:f3:db:16:c1:12:3f:ab:9e:05:
         47:94:dd:52
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANcoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjQwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMyM2QtYzlhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMK1lFkyaUTMwMFR0kRPTv9O1xCle8DmbeSal+QC/BKKKonlQYtLzih6uHp8
eQCSLY/ip2vEWxmT0ydZf4y7MZAwJKQXNKk/oSP2EGoacZwBWTeEx97a958kj3cZ
tOZcGbFNdjjfIHkK1qYlozyQ3hNYZA8papkJEWWUax/HDY6H7Yh9x3ED4FPg02g9
UTK9jap3BIl1OU6pacVna5QqcNnoD6P0CryxZe2BhvPyzat62fQ2ybFmAvBD1soc
KqyZR4KxO80vCZrTR+wviK6T1LCpCd6Ro5txS52+cujmnrqE4OmA8ypz2zF+C7oR
jvSvxHjjjJcdkE91bR1Wgduz63sCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTNGH6V
LrQsbbefBNnpPLvBe82qJTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VBQkVFNUY2
REY5NDExRUY5RTQ5RDkxRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWe/hDANBgkqhkiG9w0BAQsFAAOCAQEAJF0NE7J3zMb7mFbdYQl3
kjf/uiiid51SPnkSjZh8VfAG3Qk8XJgpGwSHsLtXIWNJfnRKKDzXxpEYZrl0AnrX
MQiRyC0Nyyr+kEnPIN/lNaPBc+gAPwzVUQPbouN70IBbzsxnLuU9cgXz6IpFbRdZ
o5lmDXxDqm8eak9Np9h2CU5tGCm5PtgsY1I7bbnV+5woY4AtZHP5++hn9jg+vOvY
S4QReZZRvI7doMjBiO22II+VG0o27Rq5UnIjVehviQCRy/cVVKF7jrZ2MIRdjUj2
gPSoVF56SZDvho+u+1JwduD4/iRvZeiE/plvivA09BTTR+ws89sWwRI/q54FR5Td
Ug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:48 2026 by rpki-client