Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24475A1ED70811EA82518948C4F9AE02.roa
File:                     24475A1ED70811EA82518948C4F9AE02.roa (raw, json)
Hash identifier:          5KLc/BKr7LDL/9LJ3LwKvzg7oSuMkpNhdw9nXywfG0I=
Subject key identifier:   4E:9E:DE:5B:D5:B9:C4:CD:12:41:4D:C4:42:52:BB:51:02:08:37:18
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F17B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24475A1ED70811EA82518948C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:59:47 +0000
ROA not before:           Mon 06 Jul 2026 16:59:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137598
IP address blocks:        103.93.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61819 (0xf17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:59:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdf03-f22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:89:06:20:66:b7:ee:6c:13:07:dd:9c:02:
                    cb:31:7b:b7:c8:7b:2d:85:3c:4e:57:7e:7f:4f:a4:
                    2f:4b:f3:43:ac:ae:1a:17:8c:ae:c1:cb:5b:3c:33:
                    5e:78:5a:0f:69:5d:6e:4c:0c:1c:71:ea:05:34:85:
                    c1:cc:d3:16:d0:88:19:2d:07:ff:db:2b:04:fa:54:
                    a5:4e:77:9b:64:a6:10:f4:e4:65:a0:6f:50:c0:7c:
                    cb:8b:9c:a9:46:a7:a7:ff:f8:16:15:17:7a:39:76:
                    03:2f:d6:63:c6:6c:24:40:97:18:93:0b:c3:29:26:
                    1f:2c:59:4b:75:36:73:79:6e:df:73:7e:36:0e:26:
                    aa:8e:71:43:98:b3:80:66:5b:eb:ca:42:2b:b3:0a:
                    35:57:f7:52:8b:65:49:eb:d9:5f:8c:19:19:b3:e2:
                    d0:0e:ab:46:df:f2:51:0a:68:7a:97:d2:84:75:77:
                    d2:21:20:da:38:e2:29:b0:ac:76:fe:57:de:ff:bf:
                    26:0a:65:05:0e:27:9c:4c:82:88:50:b6:ef:81:6c:
                    8a:48:18:df:21:1f:c7:31:77:c0:f5:ef:2d:08:03:
                    c5:99:8b:93:38:e5:9b:6a:93:95:f9:c9:8b:51:c8:
                    a7:a6:d0:ca:f4:61:a1:1c:ad:04:ba:9c:83:de:67:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9E:DE:5B:D5:B9:C4:CD:12:41:4D:C4:42:52:BB:51:02:08:37:18
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24475A1ED70811EA82518948C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:db:c1:7b:e4:25:ea:1f:70:26:44:73:89:59:26:f3:39:86:
         cc:a6:ad:cb:23:4e:c1:e6:68:68:f4:21:2d:88:96:38:7d:20:
         77:c8:79:9f:89:31:cf:ca:a1:da:f3:00:2a:c9:c1:03:aa:a1:
         49:3a:08:90:c9:55:0b:04:fd:af:44:cc:bf:39:02:75:5f:98:
         bb:c5:c6:55:af:af:38:28:91:1f:65:ff:c7:8e:37:e0:8b:73:
         c7:a3:ed:3f:6f:6c:a9:0b:27:85:2a:eb:af:f4:24:d2:9a:f4:
         4b:4b:45:ee:58:fd:d3:ec:df:f4:4e:d2:9d:08:35:f0:48:29:
         64:31:7f:31:17:6c:0a:ff:aa:6a:9e:cf:87:d5:75:bc:88:57:
         3c:20:0c:65:c8:38:8b:ee:cf:61:32:3b:a5:8a:be:f9:1e:e6:
         83:1f:99:63:a6:51:15:a6:26:93:5f:a7:a3:fb:36:95:71:0e:
         ef:a7:40:f3:15:e6:aa:85:74:bf:38:23:bf:70:bc:ea:a9:61:
         82:82:7a:f7:cb:84:bb:56:19:da:e4:3a:e5:d9:25:e5:f2:f7:
         7d:1d:64:0c:6c:fd:77:62:08:36:1d:b5:7d:ea:db:db:ee:0c:
         90:f0:e1:c4:84:15:f3:99:59:c7:e2:12:c8:25:1b:79:76:86:
         7a:36:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:34 2026 by rpki-client