Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E11D68272B811EB9FF9F326C4F9AE02.roa
File:                     1E11D68272B811EB9FF9F326C4F9AE02.roa (raw, json)
Hash identifier:          1m4xOQsVumyxlA3rj4T/FTdKamn3aXQ/TJNossyX0k0=
Subject key identifier:   A8:40:E0:D5:EA:08:BE:AF:F8:55:DB:D7:32:B2:2F:7F:CB:F5:D4:AE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F33E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E11D68272B811EB9FF9F326C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:14:53 +0000
ROA not before:           Mon 06 Jul 2026 17:14:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141531
IP address blocks:        103.162.190.0/24 maxlen: 24
                          103.162.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62270 (0xf33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:14:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be28d-01e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:17:cd:19:19:b3:4d:ad:42:7a:97:02:ed:
                    dc:97:a1:4b:16:b8:53:73:71:4c:53:db:67:75:2f:
                    ee:f0:b7:fa:77:0f:9d:c4:10:d6:16:26:03:1d:40:
                    e7:da:a9:4f:0f:cc:34:bd:46:39:36:4d:96:4a:97:
                    4f:c1:cf:4f:b4:4e:f9:b3:d7:2e:d8:01:f9:40:3b:
                    dd:70:87:e5:42:be:2b:63:c8:8e:48:a7:ee:b6:ea:
                    38:91:45:11:1c:0c:67:d8:e7:80:b5:81:18:ab:32:
                    f0:94:ca:66:cc:61:94:a6:07:e0:64:d5:e5:5b:82:
                    db:dd:d9:f6:ca:f0:f5:23:4d:d5:ac:2b:d1:84:2a:
                    58:b1:8d:48:6c:35:29:14:76:8b:e7:04:37:b6:0b:
                    54:4c:ed:c9:ec:e0:6f:e1:e2:1c:3a:67:9e:2c:22:
                    cc:80:e1:7b:a6:f1:c5:52:4f:b2:a3:6a:c1:5a:c0:
                    8c:5e:ec:38:04:74:0f:4c:9c:1c:44:15:46:cd:27:
                    82:7a:8e:4f:22:0f:69:7c:71:1e:26:bb:ba:8a:3a:
                    2c:5b:c8:3b:57:6e:9b:9a:56:f2:5c:f1:1c:49:22:
                    03:04:03:6d:7f:e4:4e:4c:62:a5:38:38:55:28:48:
                    db:41:09:1b:19:66:47:62:fe:0f:1c:a8:97:97:a8:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:40:E0:D5:EA:08:BE:AF:F8:55:DB:D7:32:B2:2F:7F:CB:F5:D4:AE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E11D68272B811EB9FF9F326C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:5e:19:d2:36:1b:0f:9a:d8:b5:ab:ec:43:17:d4:98:68:
         12:ce:54:4c:94:9c:60:2d:f7:ec:9a:91:92:cb:70:87:5d:52:
         e0:84:96:5c:23:f6:cc:22:b4:5d:45:16:91:63:3c:5c:98:08:
         88:d1:f5:02:b0:da:3f:bb:46:13:c2:fa:54:db:04:2f:93:d4:
         1c:c9:d5:91:50:82:43:d4:31:32:4a:e4:e4:25:41:4d:b0:87:
         d7:b0:d2:a5:46:89:4d:c6:17:e9:98:95:88:c9:cb:cd:46:89:
         03:b9:95:d2:68:21:19:c0:75:0e:f1:7b:28:c0:b6:29:32:cc:
         f4:b1:5f:44:5c:f5:33:16:2b:ca:6e:93:0b:95:e8:77:e0:6c:
         0b:1b:8a:49:be:ec:2b:ff:f2:bd:42:4d:62:fb:ef:24:c0:60:
         16:9f:68:3b:86:18:68:c4:24:f0:58:b7:7f:39:c2:7c:68:01:
         12:8b:81:b2:e6:9f:16:c4:3a:a1:6b:5a:1d:26:f7:14:1d:27:
         d0:28:11:57:99:1b:45:61:7c:a9:83:6a:b1:6e:c8:7a:c6:1c:
         ce:07:a3:39:44:1a:08:67:ae:72:0e:f9:53:65:eb:90:68:d6:
         24:ec:0a:6b:9e:04:bb:4e:68:42:8c:a2:41:18:10:c5:ec:84:
         d5:39:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:18 2026 by rpki-client