Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DEDDDA0FD9111EF9B3C1937C4F9AE02.roa
File:                     1DEDDDA0FD9111EF9B3C1937C4F9AE02.roa (raw, json)
Hash identifier:          JEn2YIDRceSu8LNtQC4lqnnqXvOC/4isPUsk9KsUI0U=
Subject key identifier:   EB:50:94:FB:E2:76:4D:50:35:D8:FC:D6:93:93:3E:B9:03:EC:EB:EC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F63A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DEDDDA0FD9111EF9B3C1937C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:40:10 +0000
ROA not before:           Mon 06 Jul 2026 17:40:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151767
IP address blocks:        103.41.76.0/23 maxlen: 24
                          2001:df2:e140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63034 (0xf63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:40:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be879-72f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:db:1f:df:c9:5c:73:f7:8f:6b:cf:d3:8a:
                    9e:eb:57:4d:1c:e2:72:32:ac:d8:01:53:8a:93:40:
                    36:14:a4:35:0a:34:81:31:bc:b1:f1:ac:fd:05:58:
                    82:d1:b1:f3:1b:ac:19:4c:9a:f2:cc:7b:65:65:02:
                    85:ae:da:98:b2:c8:a1:0e:b3:a2:49:10:b0:89:be:
                    3d:c5:04:e0:ed:cd:90:2d:1c:88:f3:d5:85:69:b9:
                    12:df:76:56:f7:dd:f0:1d:00:1a:55:b0:6c:4c:b6:
                    5f:e9:19:e6:a8:d6:ea:e9:76:d5:25:2f:07:b3:f2:
                    20:87:ad:0f:b1:9c:62:5b:28:19:02:d6:62:a2:ac:
                    39:11:7c:ad:ed:32:1f:e6:ec:4e:36:a8:a4:6c:05:
                    70:cf:58:ba:b9:dd:3a:1a:fe:0a:02:1f:72:1c:ec:
                    04:ee:9b:18:07:d4:27:42:86:57:b5:95:54:3f:7d:
                    8c:37:88:6d:e8:c3:aa:7f:8a:4c:d2:b2:0e:56:9a:
                    49:30:37:1e:ba:08:75:e0:43:95:a1:ad:64:65:ef:
                    95:ef:ba:c1:fb:38:6e:ca:ff:e1:78:c8:25:6b:99:
                    cd:22:f1:87:37:ce:55:99:f7:48:60:8a:04:aa:5d:
                    a2:c2:63:fa:81:38:10:3a:4c:3e:a2:1a:8e:ca:28:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:50:94:FB:E2:76:4D:50:35:D8:FC:D6:93:93:3E:B9:03:EC:EB:EC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DEDDDA0FD9111EF9B3C1937C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.76.0/23
                IPv6:
                  2001:df2:e140::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:52:1c:aa:23:c4:ac:aa:9d:d6:37:b9:2e:44:f2:2c:1f:e0:
         3c:51:ed:73:a0:85:a2:08:ae:1f:46:f1:54:fe:39:58:7a:94:
         aa:e9:c6:a7:6b:ea:91:56:6d:f9:c6:17:47:66:d7:4f:63:b2:
         f4:fc:14:da:e7:cd:d2:f6:fd:2d:20:a5:4d:38:e3:4d:53:f2:
         33:bf:84:76:36:a3:77:55:e6:50:fa:2f:f7:02:50:48:b9:65:
         43:eb:a7:a1:75:a8:5d:0a:30:cd:b7:39:2d:62:5d:3f:07:ac:
         28:99:56:f4:4d:a9:12:93:17:f9:c2:e9:cd:58:76:3f:a9:0e:
         b5:a6:10:49:8b:f2:3b:b2:33:b1:39:bf:08:dd:eb:44:38:7a:
         33:45:87:91:4b:6d:30:93:8e:28:93:fb:73:10:08:cb:bc:b4:
         8b:1c:21:0b:a5:41:19:64:18:08:97:6d:d9:1a:6a:14:1e:2d:
         3b:72:38:98:a5:d0:b0:df:8f:4b:9a:6c:31:21:48:00:9f:9d:
         a4:91:7f:b9:af:a9:53:14:6a:d0:a9:10:f4:7c:c4:a1:48:c6:
         f4:8f:40:7c:b0:bc:a5:c3:0c:15:82:ed:e3:b1:f8:a9:10:5a:
         08:95:a2:8d:1e:03:ca:68:11:4a:de:61:c3:3f:95:fa:24:3c:
         2a:ef:87:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:48 2026 by rpki-client