Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
File:                     7AF2C29C50C811F09EF54B31C4F9AE02.roa (raw, json)
Hash identifier:          7X09dFtTH4FUKZMucjXqfQlWRyWfipPOxMjTqaxPVr4=
Subject key identifier:   62:C3:9F:9C:34:FB:C2:68:95:CA:FD:C6:3D:24:9B:9A:CD:CD:48:1C
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1ADF
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
Signing time:             Tue 20 Oct 2026 16:29:22 +0000
ROA not before:           Tue 20 Oct 2026 16:29:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     135567
IP address blocks:        103.70.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6879 (0x1adf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Oct 20 16:29:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ad796e1-d589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:cf:f1:eb:28:85:17:21:b2:34:a5:03:19:
                    5b:70:a0:68:28:96:11:f3:0f:2c:af:79:f8:a1:5c:
                    53:da:b8:4b:98:6a:c7:49:0a:82:81:c8:25:c2:94:
                    9d:63:c1:81:bf:f5:b7:43:4a:96:f6:fc:f0:39:f9:
                    12:4b:b7:40:e3:30:96:2c:6b:a2:65:33:c6:f9:d4:
                    26:ed:a8:74:5d:22:bd:10:4f:07:6c:bb:47:5f:a2:
                    5e:2e:26:c7:c9:5a:a2:7b:0b:b0:84:74:7b:94:3e:
                    4e:54:c4:e7:f5:0c:43:56:0d:f0:89:f9:af:ae:f0:
                    35:48:c1:13:11:90:b0:97:e1:04:08:89:71:84:3e:
                    9b:ef:ee:87:17:0f:c6:19:bb:e4:a9:3c:22:01:0b:
                    a3:d2:c4:4c:14:3e:8c:74:4c:53:e0:1a:6a:ce:d3:
                    07:6c:61:0d:a0:0c:d4:be:79:72:c2:9d:34:d1:60:
                    35:35:43:e6:e0:4f:1c:2d:53:c0:c6:55:06:58:f0:
                    cb:e2:81:5c:a6:5f:56:3e:74:1f:d2:8e:7a:a7:2a:
                    16:56:19:1d:e3:7d:27:e3:01:ad:2f:1d:ed:33:ab:
                    22:5c:84:44:73:de:1d:cb:d2:a2:ed:f9:74:25:3f:
                    d1:84:f3:b6:ed:6b:ff:25:03:dd:a7:f7:a2:41:c5:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C3:9F:9C:34:FB:C2:68:95:CA:FD:C6:3D:24:9B:9A:CD:CD:48:1C
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ba:24:57:e8:cb:4d:00:e0:56:b1:6b:dd:ba:69:ad:c5:2a:
         26:2d:b3:53:c2:45:9e:1b:8f:f8:cb:b7:6b:fd:9f:8f:fa:85:
         4e:27:ce:98:dc:59:58:76:95:95:79:32:96:51:bb:52:1d:3a:
         13:6e:d8:08:c3:c5:47:93:fe:37:b6:d9:7c:70:81:da:40:99:
         9f:cc:8e:60:87:ad:65:7b:7d:9a:17:23:ec:5f:a1:07:9b:e4:
         43:7a:48:a6:98:38:d5:d0:34:5f:76:5b:be:4e:bc:76:b5:7a:
         9f:9b:44:14:3e:2f:c7:d6:ee:4b:a7:a9:8f:79:bc:8e:45:d9:
         f1:97:ca:ba:67:6f:c7:6b:2d:c3:9e:b9:29:8b:46:d7:96:a8:
         83:22:16:de:b3:ce:bf:0f:84:65:78:dd:e9:f0:9d:94:7b:4e:
         75:f2:ef:10:6f:22:3b:28:59:30:c6:ec:db:15:5d:3a:b5:0d:
         65:0c:37:12:30:ac:7e:20:89:42:b4:2d:9d:3a:cb:83:d2:92:
         65:43:b4:95:56:83:8e:08:a5:42:fe:bb:97:49:32:fa:d3:25:
         ad:d2:0e:f2:62:e6:52:24:c3:d4:15:19:18:6d:d1:6f:0e:7d:
         35:2d:e4:20:37:36:61:09:93:cb:b2:70:d6:73:21:a6:5f:4c:
         d5:9a:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:53:23 2026 by rpki-client