Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C191B4A696411EC89FC1020C4F9AE02.roa
File:                     0C191B4A696411EC89FC1020C4F9AE02.roa (raw, json)
Hash identifier:          V5l/UFhuL+2o5QuywLJFVEFueyergO+7Ww+ZlNPGfgg=
Subject key identifier:   F7:57:08:C9:08:70:26:16:E5:2E:7C:F7:60:27:12:51:F6:0B:3A:54
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EEFB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C191B4A696411EC89FC1020C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:39:03 +0000
ROA not before:           Mon 06 Jul 2026 16:39:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134016
IP address blocks:        103.60.136.0/22 maxlen: 22
                          103.60.136.0/24 maxlen: 24
                          103.60.137.0/24 maxlen: 24
                          103.60.138.0/24 maxlen: 24
                          103.60.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61179 (0xeefb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:39:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bda27-391a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:d7:8e:71:e5:93:1b:0a:6e:eb:48:42:d5:
                    b1:ac:65:34:3e:13:37:ad:23:40:ba:fe:3a:f7:59:
                    f2:7a:d8:3b:82:58:a1:be:88:3a:8a:d4:f1:eb:bb:
                    5d:1d:38:05:8d:18:b6:2e:80:6f:ac:8b:90:f2:30:
                    e9:01:2f:ab:f4:25:ba:0b:c1:ae:16:31:4d:b2:f7:
                    ec:3a:01:8b:60:a3:59:6e:06:33:f8:63:78:48:e0:
                    d3:c5:1a:3c:d8:fe:3e:da:79:39:a9:74:3c:39:1f:
                    39:73:20:df:f9:c5:e9:d3:fa:1a:e9:07:6a:e7:68:
                    ea:b9:85:4f:24:88:db:54:a2:af:29:29:17:b9:a7:
                    8d:f8:3c:4b:d6:a0:db:08:14:19:12:ef:6e:06:83:
                    62:16:e4:07:d0:37:d2:23:ab:14:6f:f6:a0:66:75:
                    ba:ff:23:2f:78:de:c9:cb:bf:63:6b:4c:0e:87:6f:
                    a6:5b:9f:8f:d6:53:9a:ae:fc:3a:1e:b1:27:74:88:
                    8d:32:8d:6b:2a:fc:05:35:f7:eb:cf:e2:41:c4:d9:
                    8f:7e:0d:5f:15:8e:d7:c5:69:d5:0a:be:e1:7a:c1:
                    2c:d6:ed:07:26:f2:48:c5:78:16:92:4c:61:b8:a2:
                    e2:41:18:55:f5:15:f4:ef:38:56:b7:de:ce:71:c0:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:57:08:C9:08:70:26:16:E5:2E:7C:F7:60:27:12:51:F6:0B:3A:54
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C191B4A696411EC89FC1020C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:cb:b8:db:a3:46:2b:83:ab:c6:03:d3:97:51:8a:25:24:
         e8:69:bd:78:46:c8:1e:7f:bf:49:05:17:8c:0a:62:c0:2d:04:
         6c:0c:ca:5a:1f:e5:0d:f1:11:38:96:42:09:69:e8:ad:e3:e1:
         da:8a:5e:dd:ff:cf:77:45:16:2d:84:45:29:14:72:00:86:cb:
         21:f3:8a:1b:f6:a9:45:bb:53:41:dc:96:4d:d8:60:cd:c0:64:
         ff:1c:91:e0:cb:9d:5e:c1:83:61:b7:b4:83:10:f7:d9:5c:2b:
         3b:fc:27:66:36:49:df:b1:9b:61:39:f3:6a:4e:b0:18:0a:30:
         19:2a:32:fd:64:12:20:8c:9e:a9:c8:df:50:86:ef:d6:18:3c:
         31:b7:60:92:ed:74:23:83:ae:c0:12:ab:00:0b:de:6e:9a:1b:
         7f:f6:b2:4a:24:a0:f3:67:92:81:a8:5c:e9:c0:b9:f7:6d:39:
         a7:44:97:87:94:c4:ea:1c:77:95:6d:ca:6d:30:fc:32:41:fd:
         6f:5b:4e:c3:22:52:9b:6e:8b:f5:bb:77:4b:3b:e9:07:91:e9:
         69:04:a9:9e:c0:ca:ab:a7:4a:36:4b:f5:91:e3:da:ce:9b:71:
         4a:ec:f0:59:62:6f:3e:64:21:26:c9:88:0e:de:26:b0:f3:26:
         30:65:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:03 2026 by rpki-client