Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07117FF4880611EDB97DA24BC4F9AE02.roa
File:                     07117FF4880611EDB97DA24BC4F9AE02.roa (raw, json)
Hash identifier:          Peu7oLVvCZr7aKXWnHPUIkzQdFZp4ehtFn1uPnmOSZE=
Subject key identifier:   C3:58:15:09:D2:07:C8:5F:6E:B7:33:5E:06:4D:B5:EB:EC:89:E9:9F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F578
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07117FF4880611EDB97DA24BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:33:53 +0000
ROA not before:           Mon 06 Jul 2026 17:33:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150586
IP address blocks:        103.49.236.0/23 maxlen: 24
                          2001:df2:340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62840 (0xf578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:33:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be701-053e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:ad:ff:6d:ce:60:5e:57:63:ee:de:61:b3:
                    3e:19:46:94:cf:4b:28:e4:75:c8:08:e2:d9:3f:6c:
                    ff:8f:cf:10:4a:cb:3c:5a:7d:3b:92:47:1d:62:52:
                    2b:22:3c:cc:59:f5:21:a0:30:26:01:1b:12:4b:73:
                    ee:cf:b8:4d:20:3a:b6:7b:da:76:cb:b7:69:a0:36:
                    60:6b:57:da:f3:49:3d:97:03:1c:e7:f8:84:40:05:
                    f0:1a:02:4c:0b:16:a8:4d:da:b3:02:23:ff:66:fa:
                    a2:0d:6a:41:a7:c9:e5:7b:b6:8a:a2:d7:fe:bc:08:
                    44:8f:7b:be:72:2e:b2:61:f4:b0:3e:ff:78:3f:32:
                    9e:09:5a:e7:a1:6b:0a:e4:2e:eb:94:de:8b:6e:7e:
                    0a:5c:2e:92:95:63:73:53:c2:42:28:ba:21:63:9f:
                    32:10:46:d9:e7:c6:b8:fd:73:85:6a:7d:4b:78:bf:
                    bf:22:07:01:6b:83:53:56:fa:dd:5b:44:b5:72:c8:
                    78:a5:10:2e:d1:8d:f5:fc:00:96:f5:88:df:ee:8f:
                    97:de:6b:cc:ab:58:2d:ad:8c:32:fb:3c:61:9b:fc:
                    7a:38:6a:18:8c:ca:30:53:bc:8a:c7:c5:67:75:8d:
                    ac:f5:58:34:3c:e5:b1:4e:3a:38:a0:ee:55:c4:d7:
                    5a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:58:15:09:D2:07:C8:5F:6E:B7:33:5E:06:4D:B5:EB:EC:89:E9:9F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07117FF4880611EDB97DA24BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.236.0/23
                IPv6:
                  2001:df2:340::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:98:0a:09:aa:55:92:6c:77:86:dc:02:7b:0c:6c:5a:bb:fd:
         f9:46:9e:07:7c:49:03:46:3a:ad:89:aa:a2:c2:a8:ec:9b:26:
         e8:bf:0f:43:fd:3f:a2:ee:30:d8:ed:f9:d8:7b:17:7c:88:4f:
         95:b6:c1:6f:b4:6b:75:5d:f8:2d:11:10:a8:02:fa:f1:81:db:
         f6:8c:6f:31:1d:df:b1:d2:d9:a2:c7:6d:11:e6:53:b0:c9:52:
         7a:fc:8d:af:91:e6:6e:0b:40:1d:c1:8a:08:90:90:9d:a8:b6:
         27:93:b6:8b:b8:23:8e:fb:43:03:4f:53:b8:0e:0d:87:80:88:
         a1:b2:b6:8f:e8:88:f4:a2:94:08:e8:0c:04:3b:6d:b6:18:ea:
         85:df:66:50:c9:23:06:0f:30:7a:21:3c:c0:e5:5a:7f:e2:8e:
         ce:e5:82:b8:3b:8f:cc:8e:a5:d6:10:84:59:5f:ce:2b:01:29:
         92:87:3b:18:a5:9d:13:22:c0:a6:e4:7e:a3:f2:12:05:31:51:
         18:77:3e:9a:26:a3:6a:c9:53:d2:3d:c8:3c:4c:81:c4:d6:91:
         50:6b:6f:33:38:05:44:95:ec:3e:6b:9e:b6:ff:93:26:3d:7e:
         7f:be:84:f5:f6:3d:f6:f6:d8:4a:d2:33:53:14:4b:96:69:5c:
         27:a2:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:34 2026 by rpki-client