Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17558278BDCB11EA8AB8267EC4F9AE02.roa
File:                     17558278BDCB11EA8AB8267EC4F9AE02.roa (raw, json)
Hash identifier:          Z8oIAuDpbYjGf/WPcxE4ue86ek3MeXJ8aiQjmzYKY6Q=
Subject key identifier:   8D:61:09:8B:AA:82:AC:23:D1:C5:D5:A2:27:44:DA:3A:AF:D1:4B:66
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F02D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17558278BDCB11EA8AB8267EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:48:56 +0000
ROA not before:           Mon 06 Jul 2026 16:48:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135756
IP address blocks:        103.74.169.0/24 maxlen: 24
                          103.112.83.0/24 maxlen: 24
                          2407:6e40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61485 (0xf02d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:48:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdc77-391e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:e3:7e:9b:56:16:ca:a6:5f:03:a2:37:47:
                    50:5a:23:33:87:d3:e6:99:6a:3a:81:56:a8:0b:5c:
                    99:69:52:27:67:8b:02:bb:a0:26:7a:15:b2:14:9a:
                    c2:3e:08:08:6e:35:a2:0e:14:ea:86:5c:82:d3:26:
                    32:d4:bb:95:47:31:79:33:b6:28:2e:fc:bf:b1:54:
                    22:2c:fa:2f:de:5e:c9:79:6b:88:91:71:30:79:76:
                    0d:61:e3:c9:eb:e7:ea:d3:39:00:0e:86:60:a3:82:
                    21:73:80:4d:8a:6a:4f:86:d7:7a:ea:6f:4a:38:71:
                    eb:8a:66:9f:05:88:6c:3d:08:fd:8a:f9:1f:ec:32:
                    7b:b1:0c:df:5a:c4:eb:a8:57:67:1c:18:8c:e3:76:
                    91:cd:db:09:fa:4c:76:69:54:b6:39:f3:03:d8:aa:
                    89:73:43:2d:c8:cf:9e:75:09:2f:24:d7:b2:10:e1:
                    22:2c:39:ff:4f:e4:06:8a:c3:06:79:61:54:5a:a9:
                    6a:8f:9e:16:1e:0d:b9:38:7c:07:a9:3a:b7:9c:e2:
                    07:99:37:52:da:f5:36:43:8f:be:24:47:4b:c4:1d:
                    d6:9d:f2:8f:c0:82:42:22:0e:db:50:2c:3f:12:f7:
                    ed:4d:32:5b:c4:c9:6a:da:1e:94:34:1e:d9:e7:b8:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:61:09:8B:AA:82:AC:23:D1:C5:D5:A2:27:44:DA:3A:AF:D1:4B:66
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17558278BDCB11EA8AB8267EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.169.0/24
                  103.112.83.0/24
                IPv6:
                  2407:6e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:e8:83:e2:12:23:0d:14:02:d4:92:a2:31:0e:b5:13:8b:
         08:22:64:62:e8:8d:de:46:5d:f6:49:0a:2d:e5:f1:9b:42:8c:
         07:37:19:18:35:dc:dc:17:b0:1e:3f:9d:82:36:57:5b:99:8b:
         36:71:4f:9f:06:1f:7d:63:9f:f8:36:1c:38:3b:d8:06:15:72:
         b3:3a:1b:d2:b0:23:08:e8:47:41:73:ba:18:0b:95:95:d9:1a:
         cd:82:b5:af:ed:ff:87:08:09:2c:fc:17:25:a2:d6:81:42:1a:
         49:0c:7f:6d:20:55:65:a3:81:3b:cc:15:1b:36:d4:70:93:c1:
         2c:7b:a6:9a:8b:ed:cc:4a:a0:59:43:34:da:a9:04:50:c0:2e:
         ae:0f:e9:80:c7:78:77:ca:07:86:d5:9a:3b:b7:72:ad:c5:4d:
         e8:5a:c1:3f:af:b9:34:c6:71:76:7b:b5:cd:38:b4:80:ad:ff:
         e5:92:49:2e:ce:3d:ca:71:d2:20:7e:dc:aa:7f:38:05:cb:96:
         b3:ef:63:c6:bf:18:50:1c:27:32:2e:27:40:ab:1b:d7:ed:c8:
         cc:af:bc:92:d3:1a:20:6a:08:52:fa:96:48:cf:94:d5:df:b5:
         89:5f:e6:e9:82:ce:3d:76:eb:13:20:8d:84:92:3a:6d:f1:34:
         10:16:8f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:25 2026 by rpki-client