Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/58EBEC82719A11EEBBA64415C4F9AE02.roa
File:                     58EBEC82719A11EEBBA64415C4F9AE02.roa (raw, json)
Hash identifier:          74fwn/pB3FeTVbF+ifCCl3ioLhx2dKq5ZlY27D8g9dQ=
Subject key identifier:   90:F8:F8:3B:1B:35:49:20:AF:99:AB:D6:29:1C:A0:C2:CF:E6:9D:86
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       07C6
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/58EBEC82719A11EEBBA64415C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 22:23:17 +0000
ROA not before:           Mon 06 Jul 2026 22:23:17 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        103.244.88.0/22 maxlen: 24
                          116.206.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  6 22:23:17 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4c2ad5-df63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:f0:c0:33:87:17:74:b0:ec:bc:bd:e5:9e:
                    38:d8:c0:bf:12:00:b8:02:0a:f6:a2:70:1d:8e:14:
                    5a:8b:39:33:ac:b2:b3:a6:2c:b0:b4:66:75:30:5c:
                    a3:e3:ff:17:e1:34:5e:ec:42:6b:7f:60:10:c0:8d:
                    19:d0:c7:65:53:94:bc:b2:f5:a7:37:d4:ae:e6:f1:
                    66:31:41:9c:9b:16:21:e1:df:97:f5:5c:a4:8e:6f:
                    d4:a7:95:5e:99:09:3c:a3:c0:6d:c9:c4:c3:fe:2b:
                    89:fe:59:0a:81:23:e9:df:22:c5:5b:cb:86:e4:84:
                    1d:cf:8a:80:24:18:2e:94:50:c4:fa:98:1b:9f:30:
                    75:c9:62:6a:ef:cf:c5:42:c5:7c:ad:3f:0c:db:82:
                    37:a3:df:c6:43:d7:f8:42:7d:5b:51:d7:fa:28:4f:
                    38:11:9e:65:67:f7:4d:c3:21:3a:de:a2:ad:86:6f:
                    64:b2:74:ce:55:68:9e:c7:a9:7c:c4:5d:a7:0a:23:
                    7b:83:1e:86:09:dc:a8:32:ed:7b:16:78:a2:8f:8a:
                    3a:d4:ce:b2:db:b9:2d:f1:a3:8b:4b:df:60:48:ce:
                    bb:1a:65:95:dd:7b:52:c7:25:6d:7b:67:a1:b9:d8:
                    3a:55:9b:94:50:55:09:4b:71:00:65:eb:75:af:24:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F8:F8:3B:1B:35:49:20:AF:99:AB:D6:29:1C:A0:C2:CF:E6:9D:86
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/58EBEC82719A11EEBBA64415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.88.0/22
                  116.206.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:87:f7:44:f0:56:83:cc:a7:8f:fe:4d:fa:8d:5c:f5:f9:7d:
         69:ba:ef:c2:05:71:ed:e0:0f:77:51:62:f3:63:cc:b8:66:ec:
         08:33:8e:13:93:4a:90:04:38:d3:97:f3:67:3c:d5:fc:cc:82:
         a8:9d:c4:42:c3:4d:c4:3e:c9:78:fa:7a:89:c8:c2:10:dc:5e:
         1e:7a:0d:96:d4:81:8b:d0:b0:ac:20:cd:a9:37:89:99:a7:25:
         81:df:a6:ea:9a:30:bf:4e:1c:75:37:35:11:7e:c0:2c:37:c4:
         79:d1:d4:0c:8a:42:a5:64:47:7c:51:c5:e7:d8:3b:1a:83:ca:
         cf:87:fc:61:c2:a8:77:f3:a8:aa:fc:a1:5a:96:c6:d7:71:09:
         71:59:5b:57:52:4e:5b:ad:05:40:39:d5:42:64:22:88:57:e7:
         49:fc:17:30:28:b6:b0:e5:f0:8c:43:2a:a1:ce:27:2b:58:67:
         98:ea:d9:62:e6:1e:b9:d1:4d:91:05:87:8c:ff:d7:67:5f:09:
         49:d9:fb:4d:94:e2:48:fd:7b:09:ba:2c:3d:2a:f9:25:f7:8f:
         a9:d2:6f:3a:dc:01:7d:e9:e6:f6:ac:94:d4:9a:71:62:3f:76:
         0e:1d:f1:07:eb:dd:18:ef:4d:ae:14:38:63:26:fe:f3:1e:38:
         90:d0:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:25 2026 by rpki-client