Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/216F6BD88AF411EB83B94969C4F9AE02.roa
File:                     216F6BD88AF411EB83B94969C4F9AE02.roa (raw, json)
Hash identifier:          X4iZVjYsKL3rZoJgx2lePLUk8wQGsflFcopxtS6PpM0=
Subject key identifier:   1D:69:AE:5F:62:B4:65:8C:3B:04:23:33:B1:F0:19:17:A1:C7:30:00
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F361
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/216F6BD88AF411EB83B94969C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:16:05 +0000
ROA not before:           Mon 06 Jul 2026 17:16:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141786
IP address blocks:        103.164.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62305 (0xf361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:16:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be2d5-f418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:17:f7:e8:67:a9:3b:c4:d9:37:94:1c:6d:
                    55:38:9b:e6:69:57:ef:14:ba:22:c5:ea:a7:f6:92:
                    a6:43:02:73:1f:c8:20:68:b4:45:90:c5:93:c7:bc:
                    19:3f:a9:a9:86:16:e8:d5:88:e7:e4:20:6e:7d:36:
                    1f:93:0b:a5:67:38:e8:bd:bf:22:57:4c:c6:73:49:
                    95:49:c5:26:bf:bf:59:97:de:29:f6:4e:4d:d0:cd:
                    c6:91:7d:ab:2f:de:c1:22:84:92:7d:c8:bb:2b:94:
                    da:a6:a4:05:32:b2:76:09:3e:8b:3d:f2:2a:08:fe:
                    10:fd:ff:80:54:3e:6c:03:90:9a:cb:54:7b:66:99:
                    24:e0:5b:9f:73:4e:8c:14:6b:10:aa:6e:fd:0a:d9:
                    da:52:0d:78:6e:49:c4:78:39:85:62:43:d8:63:a6:
                    f5:e4:a5:dd:b3:ce:42:46:2b:ac:43:1c:25:af:d8:
                    dd:0f:4f:57:cd:6b:b6:20:4c:fd:28:6c:85:8d:67:
                    ad:04:79:53:c4:99:4e:9e:51:71:5a:f0:5c:0e:7b:
                    1a:17:a3:9a:5c:30:70:16:7e:e3:b5:c1:39:82:e1:
                    f1:13:f7:bd:e1:2c:ea:10:7f:13:5b:1f:a6:c4:db:
                    c3:d6:46:b5:45:fd:05:37:d3:88:d2:77:fe:5e:e6:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:69:AE:5F:62:B4:65:8C:3B:04:23:33:B1:F0:19:17:A1:C7:30:00
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/216F6BD88AF411EB83B94969C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:01:84:00:61:71:33:a8:a8:f5:24:b5:28:f6:e3:a5:c0:
         5b:0c:24:9b:b8:79:7a:bf:ab:81:de:a3:6d:e8:a5:28:22:db:
         0a:78:96:5b:0e:cc:e2:4e:15:8c:7a:3f:aa:a8:5e:5c:c7:f7:
         51:bd:5c:3e:07:83:fc:6c:9c:58:2e:c6:d5:87:b0:4c:2b:31:
         a4:7c:12:fb:26:48:39:0c:38:1b:e6:2e:43:c0:a5:15:00:50:
         ab:8f:a1:bc:58:70:83:ad:ab:04:6c:45:a5:27:ad:13:e8:35:
         98:33:35:a2:17:14:a3:a5:aa:28:f1:6e:60:35:e1:19:63:f8:
         b3:4d:29:83:d8:4a:79:ca:8f:61:bc:48:a6:bd:8b:30:4a:d6:
         81:2b:f3:8d:85:0f:58:6f:f3:69:f4:8c:6b:79:61:7e:a2:fd:
         9d:16:8a:52:57:f3:ff:01:ff:df:50:ea:c9:b7:77:9f:2e:6a:
         b5:ac:86:f6:4d:b6:d4:91:f5:ad:29:f2:d5:43:c6:b7:d1:c2:
         86:51:38:42:5f:05:59:97:8d:92:5f:0d:87:65:c1:53:04:f9:
         66:fd:b5:f7:fa:11:fe:db:40:2f:00:87:18:ac:ff:f9:b0:89:
         7e:a7:70:1f:b3:2c:c6:67:c4:90:b6:bb:a4:55:09:f4:42:a1:
         f0:ed:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:39:17 2026 by rpki-client