Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7B800C03E911F09296AD79C4F9AE02.roa
File:                     0A7B800C03E911F09296AD79C4F9AE02.roa (raw, json)
Hash identifier:          8eW13H/+Q3CtypDY98aLaeB0FJaBxjHUdYMwWF5hqsk=
Subject key identifier:   C3:75:ED:48:00:13:72:5B:0F:7F:DC:CE:0C:0C:50:0D:89:E5:78:78
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F188
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7B800C03E911F09296AD79C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:00:13 +0000
ROA not before:           Mon 06 Jul 2026 17:00:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137621
IP address blocks:        103.125.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61832 (0xf188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:00:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdf1d-790b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:11:82:83:21:f8:e2:96:7d:c2:04:82:ce:
                    6f:78:cf:f0:5e:e3:cb:dc:22:6f:f3:57:1e:5d:76:
                    67:04:7b:24:04:f4:55:73:3a:c6:60:9b:9a:4c:85:
                    7c:87:1a:b7:a6:19:0f:9e:03:63:fb:95:9f:ec:5e:
                    f1:ca:08:45:e3:80:0d:08:07:e1:b7:57:ce:63:a1:
                    60:01:64:ec:ef:10:96:fd:ca:e7:73:a2:a4:b5:e8:
                    6b:45:d2:db:f8:5b:e5:c1:94:f8:2e:11:f4:78:de:
                    f1:45:7d:89:6c:93:5b:8d:0c:4c:08:0b:c3:54:50:
                    eb:df:b7:e7:56:97:33:86:52:16:ca:f2:db:d6:63:
                    f4:e6:19:62:e6:b2:e4:b2:43:77:ba:ec:8b:9f:03:
                    3d:6c:8b:69:2f:e6:ef:f6:c3:39:f3:57:00:7f:52:
                    3a:e7:77:6e:4f:33:5e:b2:93:4e:0f:a9:f5:eb:12:
                    a1:f9:96:37:a1:fa:d5:00:da:1a:aa:28:84:ec:61:
                    f5:11:f3:83:50:59:ba:85:1f:1d:85:e0:d6:d7:5f:
                    b4:7f:b0:25:4b:0b:11:c3:5b:5c:a1:c7:e0:77:3b:
                    04:22:11:2f:99:c2:53:c7:f9:db:76:25:f8:44:79:
                    00:16:a0:63:e3:78:b9:df:61:37:30:e6:0b:57:ba:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:75:ED:48:00:13:72:5B:0F:7F:DC:CE:0C:0C:50:0D:89:E5:78:78
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7B800C03E911F09296AD79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:e1:0c:de:e6:de:04:0f:02:20:0c:83:22:94:cb:21:5a:09:
         12:03:b2:f6:ab:14:b0:46:25:c4:0c:e0:7b:1e:21:ad:d1:b3:
         b1:94:51:32:76:b8:a9:ae:e5:7d:f7:4b:f7:3c:a5:48:33:26:
         75:a3:3a:3a:08:06:27:7e:83:16:44:e4:a7:27:f1:54:2e:ad:
         4a:eb:4c:2b:f7:b4:42:ef:3f:34:58:78:4d:52:36:ac:e0:91:
         32:47:ac:db:fe:82:35:f3:45:50:da:c6:c4:d0:de:f5:01:02:
         c8:a4:04:b0:25:5e:f1:72:b0:50:4b:dd:3d:91:28:e8:55:e8:
         e3:9b:cb:aa:15:0d:9f:65:18:95:2b:88:ec:85:a2:41:f0:e7:
         3a:9a:80:4c:10:e2:3b:7d:86:83:45:85:d0:6c:20:f5:17:56:
         99:a8:95:97:e1:30:8c:a0:cd:22:5b:6f:95:44:f4:63:cb:29:
         36:a8:6a:b0:96:1d:a9:8f:d8:51:be:1e:76:37:86:1a:cc:03:
         9b:24:50:6c:34:a8:01:26:2e:fa:e8:d3:f4:10:56:f7:f4:b2:
         e7:88:b5:90:30:76:49:d4:6e:89:37:1d:7f:a0:c3:cf:f5:17:
         d3:78:c9:7a:9f:b7:b8:6c:d6:e6:88:b4:ff:ee:d8:66:c2:84:
         1d:d5:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:37:01 2026 by rpki-client