Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
File:                     EF3517E8099311ECAD398842C4F9AE02.roa (raw, json)
Hash identifier:          NtdgUxxKiGp9wvctCecdi4isCrcrcjQelQ51e15EBuY=
Subject key identifier:   3E:1E:B2:01:55:FA:70:E3:43:7F:2D:1F:0C:20:6A:92:4F:2B:00:37
Certificate issuer:       /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Certificate serial:       05C9
Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
Signing time:             Sat 02 May 2026 23:29:08 +0000
ROA not before:           Sat 02 May 2026 23:29:08 +0000
ROA not after:            Tue 01 Sep 2026 00:00:00 +0000
asID:                     142644
IP address blocks:        103.171.212.0/24 maxlen: 24
                          103.171.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
                          rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A341, serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
        Validity
            Not Before: May  2 23:29:08 2026 GMT
            Not After : Sep  1 00:00:00 2026 GMT
        Subject: CN=69f688c4-1d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:92:b6:3b:cb:02:0b:5b:2a:79:13:2c:3d:
                    c3:ac:5f:33:d5:24:21:44:0c:75:32:a6:a8:c6:18:
                    c6:6d:a9:7d:05:fc:9f:ec:ab:81:ce:6c:b2:95:73:
                    6f:24:b7:6e:8d:78:26:04:b4:e8:44:83:53:3f:f9:
                    66:71:2d:23:f9:b4:53:36:20:34:d6:a4:32:fa:fa:
                    69:5a:56:98:f4:76:5f:8d:b2:e7:b8:f5:09:c2:03:
                    e6:16:b7:48:1d:9b:87:87:f5:46:95:f8:3d:85:e8:
                    ef:2f:e5:a2:42:59:73:97:4c:d5:8e:d2:72:f2:d6:
                    2d:af:dd:bf:36:0f:7f:2e:82:db:c0:e7:e3:ec:1f:
                    ff:b0:4b:08:04:67:8a:33:90:a7:67:26:76:39:8e:
                    8e:18:17:e1:ee:d5:26:26:d5:12:fe:46:46:73:f2:
                    59:67:8f:b0:09:26:4c:82:c0:ec:21:ef:ea:19:73:
                    4b:24:18:92:d9:f2:59:4f:c5:85:2a:c0:e5:94:00:
                    de:58:6a:25:26:9f:a8:30:a1:3d:17:ee:0d:ee:72:
                    eb:25:a8:31:1e:bd:a6:ee:20:3d:0e:cb:13:ae:a1:
                    93:79:97:d4:5b:9e:86:59:7b:9b:6f:b7:51:9b:a4:
                    12:81:a4:55:05:d1:f6:84:ff:21:71:f6:c3:0a:ce:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:B2:01:55:FA:70:E3:43:7F:2D:1F:0C:20:6A:92:4F:2B:00:37
            X509v3 Authority Key Identifier:
                keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:63:d8:23:b0:57:f2:e1:f5:24:e4:04:64:41:b6:2a:0d:ec:
         dc:7f:b3:1a:a7:45:a6:06:43:bc:6b:be:37:87:36:c7:dc:6f:
         d8:da:d9:eb:1f:f5:bb:a6:41:63:58:58:6b:3a:1d:69:af:6c:
         0f:ca:ca:f4:10:2e:5b:7d:70:16:04:b3:54:7f:b4:eb:3c:3e:
         91:63:eb:b9:d2:a7:0d:8e:1e:50:6f:f8:c3:0d:ea:dd:0c:30:
         7c:64:33:da:b5:c3:e1:cb:11:1a:86:db:0b:41:fa:f3:16:3d:
         ee:63:97:9d:0b:0f:8f:73:4d:98:56:08:af:bd:a3:04:66:9f:
         87:0f:e9:3e:b5:6f:43:fb:a8:c5:02:4b:d4:2f:96:7c:38:80:
         55:0f:99:51:cb:5f:7f:bc:a8:96:90:64:50:09:1d:6d:2a:35:
         dd:c9:9c:1b:05:0b:ab:e1:30:8c:cb:95:a2:8b:b1:e6:9e:d8:
         65:5e:e8:f5:2f:5f:10:4e:4f:73:4c:c0:ce:12:a2:16:92:3d:
         94:b4:eb:22:54:db:bb:31:03:1a:79:84:2f:24:f7:8b:9f:40:
         7e:4e:a7:92:87:69:83:31:cb:02:f3:6a:17:e9:70:0a:41:c0:
         93:83:3e:f8:36:cd:b2:ce:b7:12:fc:c3:90:0b:0b:36:14:38:
         d6:06:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:33 2026 by rpki-client