Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03ACA89C567C11F0B7F59F4BC4F9AE02.roa
File:                     03ACA89C567C11F0B7F59F4BC4F9AE02.roa (raw, json)
Hash identifier:          d+pKbs8ngIQN7qJiVMFbgwvX5b4oyUMVjwcujpiuTD0=
Subject key identifier:   DE:4E:41:02:3E:4B:77:70:8C:33:C9:F7:93:CE:5C:95:9E:AE:DC:3D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F585
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03ACA89C567C11F0B7F59F4BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:34:17 +0000
ROA not before:           Mon 06 Jul 2026 17:34:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150602
IP address blocks:        103.112.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62853 (0xf585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:34:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be719-b3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:4b:e8:f6:ec:5d:a8:19:b7:4e:e2:1c:ef:
                    e3:53:0c:62:75:0d:a0:90:69:1d:16:33:fc:e1:82:
                    22:9b:ea:8f:93:d7:4e:da:0b:09:ff:09:36:30:0c:
                    5a:72:ed:54:69:65:45:ed:9c:59:27:62:59:aa:b5:
                    22:87:4a:02:7a:f1:fe:57:90:1a:08:0c:63:7b:91:
                    8f:92:4f:3f:fc:78:34:d5:b9:15:54:b3:6f:7e:6e:
                    e8:a8:58:a5:2d:f1:7d:53:2a:35:99:8a:79:cf:c3:
                    fa:e9:86:f4:ce:45:fb:38:a7:6c:95:4b:a0:1b:df:
                    ac:66:10:88:7a:34:5a:93:a0:95:6b:cf:db:18:e6:
                    a1:59:0c:38:7f:34:c0:cc:3f:d6:f6:d7:30:1b:bf:
                    d8:09:7b:87:ed:13:a6:c4:0b:f2:24:c9:c6:3f:4a:
                    7a:01:a7:fe:2c:73:c1:dd:aa:5c:3c:7f:b3:fb:08:
                    2b:4d:73:60:73:0c:0e:8a:19:bd:cc:64:d0:45:0c:
                    d9:49:d1:2a:8e:59:0c:a1:75:40:05:3b:5d:bd:02:
                    65:f6:61:ff:0f:f1:d2:2e:1d:7c:09:2d:32:d0:f4:
                    97:f1:a9:ff:32:1f:c1:6e:29:2a:fa:a6:62:15:47:
                    ed:ca:41:f0:c3:f4:33:d9:48:a9:0a:17:89:93:3f:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4E:41:02:3E:4B:77:70:8C:33:C9:F7:93:CE:5C:95:9E:AE:DC:3D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03ACA89C567C11F0B7F59F4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:56:2b:bc:79:58:12:71:21:be:65:5d:0f:9a:19:a8:47:
         c2:28:5d:cf:77:55:ad:d5:93:ed:8a:68:4c:9a:7c:3c:48:3c:
         f6:a7:52:f5:5f:da:18:2c:5e:f6:18:ff:4d:f9:90:84:71:66:
         f5:bb:be:8f:75:6b:ad:59:c5:a0:e1:55:9c:74:04:d6:ef:a3:
         0b:0b:a8:30:9c:4e:44:e0:b6:26:37:96:0a:83:3c:11:3f:0c:
         cf:db:2f:8a:91:33:37:ad:9f:d3:0f:00:de:ea:2c:e0:e1:59:
         35:16:80:c7:cd:25:b6:14:21:6e:e9:fe:d4:93:a9:f2:ee:65:
         03:ec:c6:a0:a0:c9:8e:8d:d8:51:2f:ff:81:70:fd:fa:ec:7e:
         4a:2c:4c:70:47:1c:95:65:0d:d8:1b:65:f6:cc:48:0b:5a:8a:
         db:eb:64:bc:b5:ed:cc:2b:9f:13:86:34:be:be:a0:32:c4:b6:
         23:aa:69:f6:eb:e1:d7:cd:22:3e:5f:e0:fe:96:e3:03:f3:bd:
         fb:44:46:a6:58:9c:df:a9:14:be:1f:5b:80:e3:e8:df:4a:58:
         10:1b:2c:ee:74:29:2e:65:b3:3c:53:d5:fb:f4:01:70:2e:e7:
         4e:a4:3e:c1:5f:32:c7:7b:d6:28:d0:20:1f:03:da:a5:f2:a8:
         35:e8:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:02 2026 by rpki-client