Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01696736B64911EC804C2C4EC4F9AE02.roa
File:                     01696736B64911EC804C2C4EC4F9AE02.roa (raw, json)
Hash identifier:          UmEIqKxMtVpij7+I9ZbgPzBkkY+LF9sBTGk/XVRcO48=
Subject key identifier:   73:59:5C:48:73:F1:6C:D3:75:F0:CC:1F:55:3D:19:1A:78:AB:73:7F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EEE5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01696736B64911EC804C2C4EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:38:20 +0000
ROA not before:           Mon 06 Jul 2026 16:38:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133987
IP address blocks:        103.184.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61157 (0xeee5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:38:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd9fb-2a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:71:cf:ab:34:17:76:74:91:ba:4f:c2:bc:
                    da:d0:8f:33:82:46:a8:ba:df:7e:ca:de:1f:76:97:
                    a6:d3:75:ff:c9:88:86:c5:45:ae:ef:01:a0:cf:14:
                    49:97:14:88:5c:c5:60:b9:5b:58:43:af:e4:c9:c4:
                    59:25:07:1f:4c:66:97:4e:85:6e:f1:4f:2f:d2:03:
                    14:f3:ca:38:4c:c3:a7:51:05:80:01:5a:8f:40:c6:
                    b6:63:2b:cd:91:c0:25:7a:2d:02:f9:4a:5f:8a:51:
                    5e:24:7e:e3:d3:7e:83:36:c8:32:53:74:79:1a:f0:
                    1f:26:da:60:79:cb:00:3e:f2:46:d3:d3:f7:8e:16:
                    6b:a8:df:67:2a:d8:d4:5c:9c:83:99:07:98:dd:dd:
                    90:9a:57:71:33:e1:6c:50:d4:49:27:76:23:18:31:
                    9f:7f:18:1b:42:62:94:cc:88:47:a9:c6:f3:55:69:
                    62:92:cf:7d:08:39:12:a7:14:8f:2b:eb:59:9d:a2:
                    35:09:6c:96:fe:25:5d:02:ad:e9:3a:49:45:d6:f0:
                    99:a3:ac:d2:f0:00:74:77:69:13:d7:4b:a4:08:22:
                    49:de:b6:73:86:43:56:62:3b:af:de:ce:02:76:ed:
                    6b:44:19:ce:20:75:76:bf:9f:7e:13:93:55:9a:4c:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:59:5C:48:73:F1:6C:D3:75:F0:CC:1F:55:3D:19:1A:78:AB:73:7F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01696736B64911EC804C2C4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:5a:66:d1:53:f3:ad:a6:ad:6c:c4:86:31:41:59:46:e7:1e:
         59:76:58:19:96:ab:0a:e2:e5:c7:c7:a7:4f:cd:0a:b2:20:59:
         5c:f3:39:43:92:5f:ba:07:32:1f:eb:33:71:3c:f6:c2:67:3b:
         60:7b:3f:f4:6b:5f:2d:5c:06:01:f7:f0:07:b0:9c:b3:50:07:
         c8:e0:b9:26:31:9e:30:03:92:54:8b:eb:98:04:f9:af:bd:0d:
         af:7d:7d:b9:90:1d:77:83:b2:f0:1d:f7:1f:34:32:28:77:7c:
         46:ec:bd:cb:93:66:0e:92:e6:d9:9d:7b:db:24:80:3e:12:cf:
         89:c0:8a:14:b6:0a:0a:e8:56:91:d3:f8:e8:5a:2b:83:3b:a7:
         fc:8c:39:08:52:2d:4f:99:b8:41:9f:26:35:11:36:a4:9b:98:
         56:e6:a5:4b:bb:61:02:df:11:bf:21:2e:a5:c4:3f:3e:8d:9e:
         e7:16:69:9a:94:6a:c5:78:7d:fa:dc:80:53:1c:82:68:55:ff:
         7f:c2:7c:1a:94:c3:59:9d:e0:36:a3:b3:1f:a9:c3:41:c9:6a:
         0b:2f:e5:d1:0f:9d:52:36:ad:bd:97:9f:3c:16:ed:5e:43:f5:
         d0:38:ea:fd:12:db:3b:ba:bb:dc:3a:8c:ba:2b:3b:70:85:39:
         01:f1:f3:6f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAO7lMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzgyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ5ZmItMmExMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALKhcc+rNBd2dJG6T8K82tCPM4JGqLrffsreH3aXptN1/8mIhsVFru8BoM8U
SZcUiFzFYLlbWEOv5MnEWSUHH0xml06FbvFPL9IDFPPKOEzDp1EFgAFaj0DGtmMr
zZHAJXotAvlKX4pRXiR+49N+gzbIMlN0eRrwHybaYHnLAD7yRtPT944Wa6jfZyrY
1Fycg5kHmN3dkJpXcTPhbFDUSSd2Ixgxn38YG0JilMyIR6nG81VpYpLPfQg5EqcU
jyvrWZ2iNQlslv4lXQKt6TpJRdbwmaOs0vAAdHdpE9dLpAgiSd62c4ZDVmI7r97O
Anbta0QZziB1dr+ffhOTVZpMEvsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRzWVxI
c/Fs03XwzB9VPRkaeKtzfzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAxNjk2NzM2
QjY0OTExRUM4MDRDMkM0RUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGe4zTANBgkqhkiG9w0BAQsFAAOCAQEAJ1pm0VPzraatbMSGMUFZ
RuceWXZYGZarCuLlx8enT80KsiBZXPM5Q5JfugcyH+szcTz2wmc7YHs/9GtfLVwG
AffwB7Ccs1AHyOC5JjGeMAOSVIvrmAT5r70Nr319uZAdd4Oy8B33HzQyKHd8Ruy9
y5NmDpLm2Z172ySAPhLPicCKFLYKCuhWkdP46Forgzun/Iw5CFItT5m4QZ8mNRE2
pJuYVualS7thAt8RvyEupcQ/Po2e5xZpmpRqxXh9+tyAUxyCaFX/f8J8GpTDWZ3g
NqOzH6nDQclqCy/l0Q+dUjatvZefPBbtXkP10Djq/RLbO7q73DqMuis7cIU5AfHz
bw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:59 2026 by rpki-client