Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa
File:                     299F07F2E15611EFA15DF23DC4F9AE02.roa (raw, json)
Hash identifier:          AEK+TyXvmdcda0eSq2N+XQNwy+UGSHbztsixwIwOJL4=
Subject key identifier:   2A:DB:8A:4E:A8:67:23:9E:3C:66:3C:2B:25:08:D9:BE:4C:2E:78:CB
Certificate issuer:       /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial:       03EE
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa
Signing time:             Sun 03 May 2026 01:31:50 +0000
ROA not before:           Sun 03 May 2026 01:31:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        103.185.226.0/23 maxlen: 23
                          103.185.226.0/24 maxlen: 24
                          103.185.227.0/24 maxlen: 24
                          2400:6ae0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
                          rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
        Validity
            Not Before: May  3 01:31:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6a586-c2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:50:40:46:74:6f:3e:42:9d:e2:0c:d2:2c:4c:
                    78:a2:97:c9:01:6f:54:42:d4:76:cf:59:c8:e0:74:
                    bf:70:c4:8e:b2:4c:e5:1b:54:16:89:51:89:67:ea:
                    06:8e:fb:f0:4e:2a:ea:24:30:9f:27:a6:6c:5b:d9:
                    eb:de:b7:cc:0f:f9:7e:8a:2e:b7:2d:8b:5d:5d:bc:
                    c6:ed:e1:32:07:6c:5d:e3:7c:c2:e7:15:f5:a4:5e:
                    8c:0e:b2:2f:7c:2c:cc:06:23:4d:b4:33:5c:da:29:
                    25:1a:6c:4e:f4:c1:d4:86:03:27:78:3f:6f:20:cd:
                    c5:d0:17:ea:08:43:7f:8a:e2:1b:c3:5b:21:8e:26:
                    0a:a8:e1:df:b9:b9:d2:d7:a8:ba:9d:0d:a7:26:26:
                    aa:b1:85:e9:e9:e6:0f:e5:c8:8f:d0:bb:27:06:76:
                    30:44:d9:2a:e5:00:90:53:13:d9:57:97:e2:65:e9:
                    a6:e5:2e:61:17:61:03:3a:57:e6:ff:8f:70:8f:be:
                    44:60:33:7c:3f:b3:3c:a7:6e:06:21:2e:f7:46:95:
                    59:1a:a3:7a:64:a5:51:dd:3c:c4:7f:81:2b:03:11:
                    d7:d2:b0:13:b0:83:21:6e:ba:75:fd:1b:a9:d0:51:
                    4c:a6:5a:28:67:e9:32:3e:47:b5:b4:8a:44:39:84:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DB:8A:4E:A8:67:23:9E:3C:66:3C:2B:25:08:D9:BE:4C:2E:78:CB
            X509v3 Authority Key Identifier:
                keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.226.0/23
                IPv6:
                  2400:6ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:17:fd:3a:a7:af:cd:79:9c:3a:35:ec:ff:f0:13:44:02:
         af:7d:c3:78:68:e7:02:66:02:e5:03:95:b1:c1:f0:e0:ff:b3:
         a1:d7:a6:04:ed:b3:fe:c4:5b:18:13:2a:ae:a5:86:6b:ff:0e:
         52:b0:01:3f:c5:98:bd:9e:29:f7:82:e4:22:98:5a:08:5a:1c:
         d6:e3:92:16:92:ba:6d:3f:b0:c6:eb:dd:5d:41:ec:2f:55:86:
         e1:0e:d1:ce:48:dd:2b:00:6f:81:d8:4c:61:88:89:6f:af:5f:
         04:92:b0:51:15:ad:77:92:b0:8e:4a:9e:cf:f3:e1:82:12:96:
         68:9a:dd:7f:fb:71:ad:61:66:92:6c:28:06:b8:3b:76:91:73:
         b6:ea:d1:03:a8:32:ad:ae:f8:a3:03:66:93:d3:7c:07:98:de:
         ba:f7:d1:5d:2c:d9:89:10:38:b3:7d:be:02:c3:0e:b0:74:01:
         00:c7:a3:b6:c9:8f:23:d7:2b:2b:ef:49:e4:c0:4a:a6:5a:e1:
         cb:ac:be:6b:59:57:19:43:8e:bf:76:cc:41:b7:42:c5:ec:36:
         88:f7:f2:38:40:03:a8:8f:a1:b8:ff:0e:de:35:d9:32:80:34:
         b1:2e:9f:1a:bb:b9:e6:77:5d:63:f4:ff:90:61:c2:06:6e:3b:
         f2:25:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:32 2026 by rpki-client