Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A1FD605BBF11EFAAF09614C4F9AE02.roa
File:                     26A1FD605BBF11EFAAF09614C4F9AE02.roa (raw, json)
Hash identifier:          hEx9CcxLn5tnjxT6mOJg28bkTOS20sf455YYsWctL3I=
Subject key identifier:   6A:A1:6B:4B:D5:25:29:21:73:F6:EE:C1:DE:B4:8E:FF:B0:A5:5E:AF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F619
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A1FD605BBF11EFAAF09614C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:39:05 +0000
ROA not before:           Mon 06 Jul 2026 17:39:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151713
IP address blocks:        103.172.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63001 (0xf619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:39:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be839-3d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:fd:fc:7b:04:a5:83:9a:bf:a8:a0:1d:8e:
                    74:f6:de:f1:68:02:d8:5b:7b:74:16:05:94:36:ff:
                    7c:d3:fd:f0:03:5b:c0:43:61:c5:1d:1d:0c:9e:5d:
                    fa:6b:26:45:33:38:bb:4a:fe:06:8c:8a:d9:2d:71:
                    d2:b9:4c:b8:ea:4a:a3:3a:75:47:e9:1d:db:da:ac:
                    81:75:4f:77:95:93:4f:ea:5d:a5:07:a6:9e:b6:d6:
                    07:1a:c6:40:f4:55:d0:d1:3c:d9:e4:ed:27:3c:28:
                    d5:d6:87:5a:c5:c5:62:17:37:e4:a3:a5:58:ed:5b:
                    e2:3e:a3:fa:43:db:c1:9c:5a:c5:c2:a8:37:4e:85:
                    78:b1:d0:79:ff:a3:0b:73:a4:cc:2b:66:6b:63:cb:
                    7a:f4:54:e1:d4:1b:9c:b9:35:3a:77:d8:70:12:ef:
                    75:ea:18:bb:b6:c3:18:21:cd:f3:7d:1d:0e:10:fa:
                    4a:8f:8f:09:bc:bf:0a:c9:a4:31:10:54:43:55:08:
                    85:be:06:e8:62:72:8f:87:fc:bc:96:5c:96:3c:f5:
                    d6:7d:c4:eb:06:da:85:61:60:54:56:56:1e:47:4c:
                    8e:aa:25:eb:34:c6:ce:e4:5f:9f:d2:ef:05:23:d1:
                    0c:0b:cf:ca:7a:a2:19:36:ea:de:d7:8e:7f:f5:87:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A1:6B:4B:D5:25:29:21:73:F6:EE:C1:DE:B4:8E:FF:B0:A5:5E:AF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26A1FD605BBF11EFAAF09614C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:d5:69:c7:52:5c:e0:90:f0:f4:59:35:63:b2:d6:94:f3:
         89:e2:2e:31:ee:a8:2b:b6:14:0d:9d:7a:de:85:3f:20:d6:8b:
         9a:02:0c:ec:1f:08:73:1b:83:22:62:4e:aa:d1:31:ff:d7:50:
         c9:2b:81:c3:2b:53:f8:59:d6:56:fd:e4:e9:32:9c:04:74:59:
         08:e2:cc:1c:96:24:65:16:79:6d:6b:c6:d9:59:e9:df:8f:08:
         3c:87:59:96:f6:96:78:e3:85:80:36:57:5a:ed:14:c7:0b:dd:
         67:8a:ee:e6:c2:1a:23:83:92:1f:9f:56:21:e6:74:0f:1f:dd:
         ef:bf:04:75:71:63:67:bb:09:62:b6:b4:5d:e8:73:8b:be:c6:
         3a:5d:a3:b2:a2:66:44:ce:4e:8f:f8:e0:b5:89:7d:b5:17:0e:
         cc:d6:20:ee:f2:16:a1:a5:c4:28:e6:99:ce:70:99:94:8c:93:
         f5:b5:b3:d0:bf:ad:23:30:a6:fa:16:69:bc:f0:45:94:4b:2a:
         0f:c6:30:58:ac:ff:a2:fc:98:88:6e:24:af:8d:48:be:ed:63:
         1a:00:23:79:da:9a:70:4c:c0:26:cf:d0:e3:73:84:6e:2d:1a:
         04:58:04:dc:2e:09:df:8c:a4:da:dd:a7:e7:c8:77:cf:11:74:
         69:20:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:42 2026 by rpki-client