Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EECDBC34350011EEA1DA097DC4F9AE02.roa
File:                     EECDBC34350011EEA1DA097DC4F9AE02.roa (raw, json)
Hash identifier:          5f78GsWqZss4n6GEHzIKBS7oAMTFOW/byio0vnrdFBM=
Subject key identifier:   F5:48:5E:D3:C9:EC:64:C1:11:FD:AD:49:9A:F1:9D:48:B6:C1:1C:02
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D7CE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EECDBC34350011EEA1DA097DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:52:14 +0000
ROA not before:           Thu 08 May 2025 16:27:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151169
IP address blocks:        103.246.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55246 (0xd7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:27:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c31d-b6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:f4:18:dd:76:54:50:05:c6:f9:8f:ae:6c:
                    57:a3:bc:8b:3a:10:b8:cb:6f:4c:0c:2f:c7:19:6b:
                    d6:bc:ab:cc:1a:48:c7:61:ab:1e:38:fb:e3:f9:4c:
                    50:19:21:0f:f6:ae:70:06:59:13:1c:90:6d:44:cf:
                    26:a6:dc:1d:80:0b:eb:98:e6:9f:ae:67:cf:55:e3:
                    9c:16:12:9f:8c:08:fe:f5:3a:5b:67:26:67:eb:d8:
                    f2:6a:29:46:86:4a:5b:76:64:98:74:9d:24:87:b6:
                    a4:ad:40:50:cc:fa:02:ca:fc:6d:ca:b0:e2:c3:b7:
                    38:76:47:8e:a1:88:88:dd:e9:27:e2:17:20:f0:1c:
                    85:60:30:d4:9b:8c:bc:49:4c:fb:c1:98:44:91:83:
                    49:f2:ad:32:61:2d:c4:60:fa:41:56:f2:bf:1e:e6:
                    2e:6e:8f:42:2a:39:34:45:45:67:bf:cd:bd:e8:85:
                    17:32:7f:b7:81:23:66:6a:a2:58:56:62:d3:20:1f:
                    98:40:75:1f:84:fe:51:e9:70:b1:83:8d:be:bd:01:
                    a1:e4:88:01:4c:40:0a:30:18:c0:d1:c4:6e:5d:f7:
                    ae:db:43:08:31:e6:db:19:01:99:0d:c5:18:8f:50:
                    ad:f8:48:90:ae:d2:fd:4e:f2:b6:41:32:70:19:3e:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:48:5E:D3:C9:EC:64:C1:11:FD:AD:49:9A:F1:9D:48:B6:C1:1C:02
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EECDBC34350011EEA1DA097DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f2:24:3a:55:0a:8d:cd:95:1a:9d:ee:70:8b:55:a9:6c:84:
         b4:b1:9b:75:6e:3e:e2:3d:37:a2:9c:a3:ab:bc:d9:94:63:a4:
         02:bc:3c:50:89:38:de:fb:82:ee:be:27:6f:3d:27:1c:c1:2c:
         38:94:03:76:86:37:07:41:8e:80:12:5a:1d:b4:1c:db:28:70:
         10:df:37:9d:b0:d1:a7:92:6c:50:99:f8:78:40:b3:4b:ca:9e:
         95:b1:dc:f0:36:80:a8:58:da:f1:1a:4a:8a:09:4d:81:96:3f:
         27:01:3f:7a:46:6b:06:be:af:81:a1:3e:2c:4f:8e:86:12:d7:
         ba:09:68:1f:63:63:22:7d:85:c6:55:b0:e3:94:e4:0c:d5:f6:
         8f:a6:f7:e0:e9:fa:d2:46:f6:ca:2c:6d:e5:49:a3:44:65:ff:
         03:cd:cc:b0:f9:0a:bc:34:77:89:17:eb:69:5a:3c:bf:5d:04:
         c8:df:da:3f:11:f5:b9:ee:cf:98:4f:19:e5:9c:b6:6d:ee:d0:
         b5:5e:0c:d4:79:d2:76:87:40:4f:6e:7a:9e:50:a9:0a:53:f4:
         90:72:be:52:e9:49:ad:e2:12:cd:d6:f8:af:14:89:76:bc:f8:
         80:f8:61:18:61:91:a3:08:0c:ef:b6:d2:58:1b:b6:06:91:c4:
         09:0c:50:46
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANfOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjcwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMzMWQtYjZiZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJOE9BjddlRQBcb5j65sV6O8izoQuMtvTAwvxxlr1ryrzBpIx2GrHjj74/lM
UBkhD/aucAZZExyQbUTPJqbcHYAL65jmn65nz1XjnBYSn4wI/vU6W2cmZ+vY8mop
RoZKW3ZkmHSdJIe2pK1AUMz6Asr8bcqw4sO3OHZHjqGIiN3pJ+IXIPAchWAw1JuM
vElM+8GYRJGDSfKtMmEtxGD6QVbyvx7mLm6PQio5NEVFZ7/NveiFFzJ/t4EjZmqi
WFZi0yAfmEB1H4T+UelwsYONvr0BoeSIAUxACjAYwNHEbl33rttDCDHm2xkBmQ3F
GI9QrfhIkK7S/U7ytkEycBk+bJsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT1SF7T
yexkwRH9rUma8Z1ItsEcAjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VFQ0RCQzM0
MzUwMDExRUVBMURBMDk3REM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGf2SzANBgkqhkiG9w0BAQsFAAOCAQEAEfIkOlUKjc2VGp3ucItV
qWyEtLGbdW4+4j03opyjq7zZlGOkArw8UIk43vuC7r4nbz0nHMEsOJQDdoY3B0GO
gBJaHbQc2yhwEN83nbDRp5JsUJn4eECzS8qelbHc8DaAqFja8RpKiglNgZY/JwE/
ekZrBr6vgaE+LE+OhhLXugloH2NjIn2FxlWw45TkDNX2j6b34On60kb2yixt5Umj
RGX/A83MsPkKvDR3iRfraVo8v10EyN/aPxH1ue7PmE8Z5Zy2be7QtV4M1HnSdodA
T256nlCpClP0kHK+UulJreISzdb4rxSJdrz4gPhhGGGRowgM77bSWBu2BpHECQxQ
Rg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:33 2026 by rpki-client