Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05D1770411EB11EBA58CA43AC4F9AE02.roa
File:                     05D1770411EB11EBA58CA43AC4F9AE02.roa (raw, json)
Hash identifier:          SBYJfG80Ug9TDWAOnJSlwc6umscOUq9eRd1egSPmwBE=
Subject key identifier:   B1:DA:C1:AF:6A:5F:2C:18:31:B2:55:B1:24:44:72:56:79:2E:9F:39
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EEDD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05D1770411EB11EBA58CA43AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:38:03 +0000
ROA not before:           Mon 06 Jul 2026 16:38:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133975
IP address blocks:        103.54.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61149 (0xeedd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:38:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd9eb-9c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:ce:04:69:7c:cb:08:43:e6:f1:21:ce:e7:
                    75:16:0a:9c:08:38:60:77:16:1f:b8:f5:a2:2d:5b:
                    d9:36:20:4e:1b:6b:60:ef:66:bf:66:a3:03:f8:92:
                    ac:49:03:d1:1a:18:27:bc:0b:18:7a:97:af:41:b4:
                    44:e5:cf:3b:ca:65:b8:81:04:f4:55:d2:e8:b2:18:
                    f8:89:61:6e:0f:08:2a:32:9d:8c:0e:1a:bb:b1:24:
                    f5:74:25:75:9d:20:82:11:25:34:52:b2:b7:83:dc:
                    b1:6d:fb:2d:01:b6:02:a7:4e:a7:88:39:03:21:c5:
                    66:45:25:5e:21:e8:83:86:89:da:08:20:bb:11:af:
                    5f:8f:a9:1e:91:5d:4f:fe:7d:5a:be:e0:92:c2:a7:
                    6f:c4:0a:b8:08:7d:31:e4:60:99:09:4e:3b:99:fe:
                    9f:08:82:a4:6d:d6:c3:29:04:b9:cf:59:d3:03:e9:
                    5e:21:52:44:21:bc:b1:19:b5:5b:fd:4e:52:61:67:
                    d9:8b:99:8e:37:e1:7a:ee:00:98:cc:8f:ca:b8:1b:
                    a6:f0:04:9d:e3:74:fe:d8:d3:fc:0d:c8:e0:ee:e6:
                    f4:72:94:dc:a3:a4:70:36:1b:e5:86:96:96:5d:f8:
                    26:b4:e4:75:bf:32:7a:b4:d9:d8:c2:44:84:2d:01:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DA:C1:AF:6A:5F:2C:18:31:B2:55:B1:24:44:72:56:79:2E:9F:39
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05D1770411EB11EBA58CA43AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:73:09:5a:a4:60:2a:fb:64:43:28:45:21:cc:a0:89:16:12:
         3e:1e:3e:de:0b:f2:76:99:47:16:08:81:34:b2:d6:df:ed:9b:
         4d:2b:be:dd:74:94:c3:44:d2:56:ad:11:d2:33:74:37:47:88:
         64:6d:77:3d:92:81:78:c3:84:14:3c:60:cc:55:70:d4:a7:9c:
         b5:02:99:02:8d:4c:2f:bd:f2:30:c5:40:97:44:3e:25:ac:95:
         05:ac:d0:b6:c3:68:65:aa:60:f2:c7:9e:16:8d:64:a2:a4:17:
         73:86:5e:cb:ff:4b:58:3a:a6:81:b6:1b:a1:d7:99:6f:99:3f:
         6b:89:73:73:50:d3:e6:84:c0:66:6f:66:5e:9d:e3:3f:b4:4a:
         1d:80:c1:81:16:71:15:81:ed:23:60:2c:0e:0f:78:c3:d4:ca:
         45:ed:c8:66:aa:e1:bf:08:02:ef:28:be:94:b5:ec:3e:08:64:
         40:86:ca:27:0c:3b:4c:f7:63:01:a4:f9:fd:88:4d:c5:1a:ed:
         39:a7:96:e2:98:6b:72:2c:14:6f:6d:e9:01:f8:79:f5:ca:d6:
         86:5f:cc:79:17:9e:d7:28:1a:8f:cd:6b:18:78:48:d5:a5:b4:
         4a:f7:2b:b7:13:7d:88:62:be:c4:53:d2:6e:6b:e2:d3:61:d2:
         cb:b1:1c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:24 2026 by rpki-client