Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EE1B30C1BB011F1BDD4CED80D3D8C67.roa
File:                     0EE1B30C1BB011F1BDD4CED80D3D8C67.roa (raw, json)
Hash identifier:          72sVuTVFNN9cvo3xvmctJIQPmBojTc5Lunbcf2k+CeQ=
Subject key identifier:   57:C1:93:9F:51:CA:6A:BD:6F:08:AA:C0:DE:C2:C0:E9:25:46:0A:CA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DBCA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EE1B30C1BB011F1BDD4CED80D3D8C67.roa
Signing time:             Mon 09 Mar 2026 12:04:00 +0000
ROA not before:           Mon 09 Mar 2026 12:04:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138726
IP address blocks:        103.138.104.0/24 maxlen: 24
                          103.138.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56266 (0xdbca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar  9 12:04:00 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69aeb730-c0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0f:1c:74:ee:94:fe:9b:c0:10:d8:20:6a:f0:
                    db:41:bb:05:7c:b2:7b:8c:6b:e3:89:92:48:4f:16:
                    98:44:f2:77:52:47:68:79:0c:c5:10:4e:d6:57:69:
                    5f:eb:47:ce:2c:33:48:44:bf:08:2b:a6:3a:cd:62:
                    96:94:ed:d2:4f:fe:a2:90:1a:2f:17:84:ea:d9:0e:
                    cd:66:23:11:41:95:a7:af:c0:8e:fb:37:87:fc:e2:
                    fa:56:f8:68:60:6a:d9:07:8a:d0:eb:29:64:0b:59:
                    05:22:d6:62:bf:71:d6:b9:2d:64:d2:f8:fe:36:31:
                    16:47:67:e6:36:1a:2d:1e:db:79:4c:66:2d:70:bd:
                    46:64:c0:96:aa:99:dc:3c:95:4d:be:c8:68:2e:88:
                    c1:04:a3:91:e2:2f:13:e8:69:a5:87:b3:94:2f:5c:
                    2b:e1:7a:0d:a0:fa:96:d0:cc:ba:9d:b2:90:a9:0f:
                    3b:7d:5f:c3:1a:b1:a0:8e:fb:03:3a:3b:4d:55:b0:
                    ff:1f:72:ea:a1:ae:a4:73:f4:85:c9:0c:dd:a8:6a:
                    96:56:4f:f9:16:51:c6:99:83:7a:4f:63:ba:8e:fa:
                    c2:43:ab:1a:e6:69:4f:1c:89:fb:76:5c:74:35:5a:
                    90:75:d0:65:30:78:36:8e:d8:ac:6c:98:43:b4:3b:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:93:9F:51:CA:6A:BD:6F:08:AA:C0:DE:C2:C0:E9:25:46:0A:CA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EE1B30C1BB011F1BDD4CED80D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:44:35:a5:99:eb:c7:e1:03:c3:5a:64:6c:f1:53:2f:9b:
         41:42:eb:7e:83:ae:98:ba:89:21:9e:32:8f:46:e8:0f:7f:3c:
         3e:9c:92:e5:f6:02:69:35:eb:a6:f6:f7:09:49:94:db:e5:fd:
         57:57:00:3c:d4:5e:9d:8a:a5:86:2d:cb:33:b6:63:14:2d:0d:
         76:e8:ab:23:e9:90:21:39:6b:c3:b3:25:94:b6:c3:51:46:c4:
         2c:87:ab:3b:c0:3a:55:59:c1:03:ef:81:27:54:c0:61:b7:dd:
         58:88:28:ef:8d:12:4e:5d:f9:8d:58:29:1e:e1:f1:bf:ee:3b:
         36:4d:cf:48:89:4f:48:30:bf:ae:e5:b9:e2:fc:ef:2b:43:eb:
         e2:23:5d:0a:77:7b:5b:e1:df:b4:fc:ac:07:fb:e0:11:c9:54:
         46:7d:04:bf:43:9d:9e:e0:e6:de:56:77:6c:0e:d6:cd:d1:24:
         e9:a7:a9:64:71:b1:28:44:62:df:16:0a:ab:2b:09:6f:72:36:
         b7:1b:0a:52:3e:6a:1d:0a:b2:f3:27:55:ac:07:75:19:58:b0:
         2d:fa:b1:91:d7:aa:c1:2a:f1:a4:3d:85:83:bf:00:28:97:0f:
         2e:af:fe:37:ed:93:23:97:2a:dd:68:27:cb:e6:6d:a3:e6:39:
         a0:f3:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:47 2026 by rpki-client