Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/112D3D24057C11ECBCF0875FC4F9AE02.roa
File:                     112D3D24057C11ECBCF0875FC4F9AE02.roa (raw, json)
Hash identifier:          vgW2wEZxfwoUj3KsQYH3Vgp0YacemCs9Dm5Qi9hI4lY=
Subject key identifier:   FE:EE:75:B8:C0:DA:F4:8E:BF:D0:3E:4A:E1:0A:68:94:52:B4:61:93
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3E3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/112D3D24057C11ECBCF0875FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:20:28 +0000
ROA not before:           Mon 06 Jul 2026 17:20:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142518
IP address blocks:        103.170.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62435 (0xf3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:20:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be3dc-035c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:a5:08:ce:49:55:34:6e:c2:75:12:b3:a6:
                    4d:1a:42:1b:63:99:e6:3a:3d:65:b5:ca:2d:ca:60:
                    43:9a:80:b2:86:0f:05:bb:ec:4a:c2:d8:38:cd:ec:
                    40:1f:32:49:da:62:5e:d2:35:2e:ad:13:e8:a8:6b:
                    de:63:d7:75:0f:04:c1:15:db:07:3f:eb:b8:d2:4a:
                    e5:1d:ee:54:52:e5:bd:84:ff:54:bc:2a:cb:26:92:
                    73:9e:80:d5:0a:43:e4:c3:85:cc:65:cf:8e:b2:a9:
                    97:4a:18:6e:32:d5:c8:27:32:cc:4c:5d:49:7f:6e:
                    1e:51:00:e0:15:26:f4:16:1f:25:de:bc:eb:1c:a3:
                    fb:6e:6b:23:a8:5a:36:68:8d:f6:2b:77:92:b6:cc:
                    52:f5:1e:c9:6b:20:6d:c5:fb:b9:ec:32:57:1d:37:
                    ce:4f:ba:8e:36:94:33:b9:93:be:b4:8e:75:65:aa:
                    26:80:d7:07:59:e9:e4:3a:9c:30:b0:f0:a6:c1:f9:
                    0c:3c:12:e8:c1:9f:b1:39:ec:fd:bd:c8:db:bf:76:
                    fe:8d:e4:dc:f8:a6:95:ff:ec:aa:76:1c:d8:b8:cf:
                    83:b5:ba:0d:41:87:38:9c:8b:4b:63:87:f9:d2:ee:
                    e1:c4:93:cd:92:38:5e:0d:a5:20:6a:00:41:1a:31:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:75:B8:C0:DA:F4:8E:BF:D0:3E:4A:E1:0A:68:94:52:B4:61:93
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/112D3D24057C11ECBCF0875FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:fa:c8:38:ad:24:73:f2:31:41:dc:fe:37:a5:34:4f:7c:
         53:f4:78:cd:92:1c:74:9b:3b:5d:3f:12:3b:24:21:43:dc:c2:
         ad:cf:2f:0f:00:87:9b:0d:cf:86:a2:25:7f:b3:f9:c1:80:75:
         3a:fe:ca:df:86:1c:b3:45:4c:84:e9:eb:f5:12:3e:37:aa:87:
         9e:56:f1:22:67:44:16:d7:e1:41:1f:58:c5:5a:fe:0d:e4:6e:
         7f:dd:0c:c5:b0:f5:c9:5e:64:49:6e:2f:f4:bb:fd:91:e1:e7:
         87:12:76:d7:15:69:3f:eb:12:f1:d6:62:a6:b4:9a:23:3c:21:
         63:28:0a:9c:63:ee:f7:fe:4c:4a:51:b9:af:f3:5a:2f:cd:16:
         99:c6:b1:79:1f:a6:d6:ad:a4:25:90:9b:75:b1:21:d5:d3:d1:
         e6:27:fb:d3:1c:a3:5a:12:dd:60:93:25:61:24:12:43:d7:fe:
         01:f8:cb:2b:f8:2c:57:8d:89:d0:cd:34:e3:af:50:d0:e0:c2:
         47:98:31:ae:0f:e8:09:4c:a7:32:74:13:43:58:fa:4f:be:79:
         66:c9:1d:23:26:b3:8b:64:bc:d2:3b:2f:a7:ad:5e:f9:fb:cd:
         c1:04:5b:9a:2f:94:cf:1f:e2:fd:6d:49:69:4c:c7:40:b6:9e:
         e1:bb:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:45 2026 by rpki-client