Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/EB4F77B8D5E411ECB31AC843C4F9AE02.roa
File:                     EB4F77B8D5E411ECB31AC843C4F9AE02.roa (raw, json)
Hash identifier:          osHneI9FvoCZRKQxl7txl+jB8Ly+Es1NyoWP2eT8CMg=
Subject key identifier:   D8:18:49:4C:8F:0A:4B:95:F7:43:67:48:F7:8C:84:4B:37:57:12:A4
Certificate issuer:       /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial:       03CB
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/EB4F77B8D5E411ECB31AC843C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 01:30:22 +0000
ROA not before:           Fri 05 Jun 2026 01:30:22 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     140505
IP address blocks:        103.187.120.0/23 maxlen: 24
                          2400:7c60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
                          rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
        Validity
            Not Before: Jun  5 01:30:22 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2226ae-2e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:9b:aa:cd:e4:ed:99:32:93:f1:ee:ed:f7:
                    d7:a7:69:ed:60:0c:94:07:e4:9f:e6:ab:30:4f:c2:
                    b2:b2:f5:2c:50:7d:7a:a6:44:de:86:1b:4d:88:5e:
                    7d:ba:0c:53:39:b4:0e:46:86:a6:a2:29:87:94:1e:
                    ec:80:f2:6e:0a:e6:99:61:93:33:76:4b:40:c7:97:
                    1f:37:e2:16:62:93:a5:b3:6f:f2:86:18:aa:d9:a0:
                    da:58:3f:6e:65:67:32:2f:e2:08:51:24:a0:bd:b4:
                    f5:d9:ad:f3:70:af:31:5a:d7:b5:1c:5b:4c:83:8e:
                    76:ca:2b:c2:11:68:1e:db:7b:34:af:24:fc:6b:97:
                    9d:d0:fe:57:63:a2:4c:94:b2:6b:c3:24:f0:09:bf:
                    ea:b1:41:67:81:85:f5:c8:c1:a5:99:c6:1c:68:64:
                    cc:82:ce:16:fa:78:5a:b1:75:26:f2:37:f3:73:aa:
                    b3:ba:84:e2:0a:96:22:fc:c8:4c:d2:56:31:9f:6d:
                    89:8d:4e:69:3c:ce:96:98:c6:01:26:98:dc:66:97:
                    6b:94:ba:fc:a5:ef:a3:f3:cd:d4:54:e8:fb:43:17:
                    6d:63:21:96:7a:a8:fb:19:36:b4:2d:8e:43:a6:c6:
                    d1:f4:71:cd:77:49:a2:a4:83:f9:26:e9:d8:1d:54:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:49:4C:8F:0A:4B:95:F7:43:67:48:F7:8C:84:4B:37:57:12:A4
            X509v3 Authority Key Identifier:
                keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/EB4F77B8D5E411ECB31AC843C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.120.0/23
                IPv6:
                  2400:7c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:27:2d:33:8c:6c:dd:0f:b2:a2:29:7f:2c:12:62:45:47:
         e5:6f:8c:28:2e:c4:6d:5f:bf:02:a4:5e:a0:7b:ce:ed:72:70:
         8d:d3:3f:33:66:9a:61:2b:67:f8:d9:78:5b:ae:18:7f:3f:b0:
         a8:07:6a:7a:03:3b:ef:e7:02:d2:5f:52:af:60:fb:99:f6:40:
         9d:79:39:b4:d6:b0:0f:61:f7:83:e6:bd:49:0a:e1:8a:84:f4:
         00:66:93:d0:77:d5:05:20:22:68:c9:3c:38:22:9c:40:d7:c0:
         88:ba:a0:2a:f5:cb:53:c9:21:aa:4c:39:54:7e:91:89:9b:0c:
         b5:11:14:a2:45:4d:c1:65:23:d9:5f:0f:d3:28:c1:b6:bf:79:
         d9:3c:11:49:6f:18:2e:74:4a:28:33:7d:24:d3:cc:aa:96:af:
         dc:94:b5:0f:1f:ab:f3:44:1b:ef:c0:88:9b:cf:f0:07:b6:e8:
         fb:2a:54:09:13:ec:18:df:03:94:aa:3b:a9:06:d2:dd:ba:35:
         67:a4:fb:ba:e9:e7:e4:01:a2:3b:15:e1:d1:d1:dc:b9:81:a5:
         dc:ff:5b:1a:0d:6d:74:af:b8:05:24:84:2c:de:bd:de:bd:31:
         22:6c:9f:c2:a0:c8:6a:4d:e1:6d:8f:e4:08:7d:98:be:c7:05:
         14:cc:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:51 2026 by rpki-client