Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02712B76410311EBA54F8723C4F9AE02.roa
File:                     02712B76410311EBA54F8723C4F9AE02.roa (raw, json)
Hash identifier:          ILHd55bJDKrqkOTwPpr2lD5sLyqvVNCUhmvYxN6radU=
Subject key identifier:   5A:17:86:3F:82:F4:C8:57:5D:F1:14:C2:33:58:EE:F2:89:EA:FA:2A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE5E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02712B76410311EBA54F8723C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:33:54 +0000
ROA not before:           Mon 06 Jul 2026 16:33:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133237
IP address blocks:        103.110.12.0/22 maxlen: 24
                          103.170.242.0/23 maxlen: 24
                          103.228.140.0/22 maxlen: 24
                          144.48.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61022 (0xee5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:33:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd8f2-4fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:b0:a9:53:64:72:2b:0a:68:e3:75:00:26:
                    24:73:10:98:08:dc:1d:f1:1c:41:2b:01:bc:2b:c6:
                    e5:25:ee:ea:9c:79:39:15:9a:42:43:f7:a8:7e:08:
                    8c:01:65:53:b2:50:11:c6:94:50:2b:0c:bc:7d:08:
                    37:6e:aa:76:7b:14:b5:c6:d7:7e:50:f2:a5:3d:dc:
                    96:b3:7e:1c:4d:4c:57:77:f9:51:2a:6d:a7:9f:dc:
                    45:96:e7:99:76:8d:81:e7:8e:c8:77:3a:85:94:e1:
                    9b:f0:52:6f:64:65:73:1d:a6:dd:51:25:43:7c:b6:
                    5c:ed:23:3b:d4:75:8c:97:86:1c:0c:82:c8:8d:a4:
                    2b:de:c0:8f:15:2d:d3:b7:f2:10:ff:23:52:6d:f6:
                    03:0c:a8:1a:93:82:15:8a:80:c4:84:95:8a:f2:20:
                    ca:0d:7d:b3:95:8c:0e:6a:5f:85:e2:7f:c2:aa:44:
                    8d:f5:04:f4:ac:c3:9b:ec:f4:25:bf:d3:d5:42:62:
                    90:2c:1e:a6:5e:ea:3e:52:5e:f8:f9:d8:00:99:51:
                    9e:b8:a5:2c:2d:30:46:98:37:7e:e4:8f:2a:83:30:
                    a8:4f:2c:4e:84:f2:50:6d:0c:f8:52:5f:c3:42:90:
                    04:13:da:07:0e:e6:82:45:0a:cc:c0:63:c2:6c:f5:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:17:86:3F:82:F4:C8:57:5D:F1:14:C2:33:58:EE:F2:89:EA:FA:2A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02712B76410311EBA54F8723C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.12.0/22
                  103.170.242.0/23
                  103.228.140.0/22
                  144.48.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:20:e6:50:76:94:f9:0b:5c:f3:fb:9d:bd:4a:05:ef:11:98:
         d7:38:b8:08:f9:78:0c:77:ab:41:b9:12:aa:1c:4a:c6:78:5e:
         49:94:e9:3a:4c:4f:90:9a:21:bb:d9:2f:a3:9a:b9:c2:34:c2:
         fe:47:cd:9c:23:d4:ee:50:8c:68:cf:1e:39:8d:ae:3c:5d:8a:
         19:3f:ce:fb:29:58:bb:2a:ee:9e:c2:ec:a3:51:69:86:45:a5:
         ed:c2:95:2f:f5:ee:c0:d8:7a:bb:a0:40:60:57:64:56:02:87:
         05:61:8b:35:2b:7a:b3:3d:38:cd:35:32:45:b4:4b:d0:d7:e6:
         a0:5f:26:d7:9f:12:d6:e6:d9:24:f3:52:11:20:29:3d:df:57:
         af:e8:2f:a6:8a:0c:af:22:bf:ff:cc:3a:73:82:b6:78:80:20:
         5d:2b:ac:e4:53:67:ca:c1:74:33:06:75:10:a9:b8:33:94:62:
         b6:2a:28:f1:0e:56:e3:21:91:24:44:fb:54:e2:c3:c8:52:98:
         5a:c3:15:2d:58:c7:08:1c:4a:d0:04:1b:54:8c:38:b3:32:51:
         7e:38:f3:b6:2e:b8:29:7f:7c:a7:ad:07:35:2f:06:82:8f:14:
         9d:6e:3d:12:81:7e:dc:0f:a8:8e:f5:72:5c:9b:54:5a:33:9f:
         f0:a2:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:34 2026 by rpki-client