Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28562EF62FE411EC82076515C4F9AE02.roa
File:                     28562EF62FE411EC82076515C4F9AE02.roa (raw, json)
Hash identifier:          JF7kSZCLoeS4FosJ5GovjQKEwFSFHRfnJjzbcCkEU5k=
Subject key identifier:   15:16:54:40:C2:A2:58:CD:E3:7B:12:B7:E0:92:E9:6F:B5:B8:F3:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FAD9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28562EF62FE411EC82076515C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 07:31:39 +0000
ROA not before:           Thu 20 Aug 2026 07:31:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146911
IP address blocks:        103.173.222.0/23 maxlen: 24
                          2402:6f60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64217 (0xfad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 20 07:31:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a86ad5b-8b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:ae:20:db:e4:ed:91:64:36:c5:bd:5e:b3:
                    2b:a3:a4:39:55:fc:1b:0e:d9:ea:2d:cd:ce:d5:c3:
                    86:f8:08:72:e2:b7:6a:5e:94:9c:64:e7:3f:e3:3a:
                    8d:32:81:21:6d:fe:d6:23:9a:5b:95:1e:35:4c:fb:
                    48:7e:66:87:e1:79:21:44:69:a8:0b:50:b7:28:92:
                    85:6e:1f:36:23:47:b7:16:66:0b:05:34:bc:63:c8:
                    4e:11:aa:06:b9:24:13:92:30:11:10:d5:9f:0d:9b:
                    52:cb:28:76:72:70:d7:58:99:3f:f9:cf:b8:d1:0f:
                    7c:67:aa:4c:ec:fc:a2:0e:16:51:b4:3c:94:52:08:
                    78:27:4a:f0:7c:c7:08:bb:c0:72:8c:f9:e8:6f:7a:
                    d3:31:59:c5:4c:8b:d4:9e:c9:f7:c9:93:b7:c7:fb:
                    8d:74:1b:23:2b:2c:be:eb:50:1b:d7:a7:9d:5b:be:
                    ca:28:0b:98:86:88:77:ba:47:c1:24:02:46:37:fc:
                    2a:24:98:4b:a3:ee:32:4e:c7:f3:44:0c:37:cb:b0:
                    09:ef:1e:e9:8d:3d:a5:24:8d:38:49:58:2e:b7:72:
                    48:28:a1:aa:f2:8a:ee:bf:ea:84:ab:2f:aa:33:66:
                    1e:d4:0c:d2:57:1c:fc:44:02:fc:99:c6:c5:9b:5b:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:16:54:40:C2:A2:58:CD:E3:7B:12:B7:E0:92:E9:6F:B5:B8:F3:6C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28562EF62FE411EC82076515C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.222.0/23
                IPv6:
                  2402:6f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:74:30:95:0f:1c:6f:7f:87:c3:76:18:10:ff:1b:b3:25:
         72:89:f2:23:9b:d8:d5:63:65:65:08:ea:b5:38:29:dd:9c:aa:
         fe:75:67:0b:e4:88:32:d2:1b:cc:4b:ba:82:34:8c:5c:37:df:
         96:60:e9:83:07:66:4e:cb:d4:21:0a:e0:94:cd:09:27:ca:a1:
         ee:86:e7:75:42:cc:39:2d:83:b6:0f:4f:8e:d8:7e:fd:71:cb:
         7d:e9:c5:e9:0d:0c:8f:27:cc:bb:c6:24:bb:e2:6f:bc:a6:3a:
         f3:44:31:15:b9:94:e1:79:5e:ee:6d:5e:f4:d7:0d:2c:7e:87:
         d1:4c:20:df:21:db:ae:f3:0c:b3:0e:91:3f:01:12:3b:b6:bf:
         f7:2e:43:c0:a9:0d:bb:98:b0:11:34:b2:5e:98:35:73:b1:00:
         36:22:32:06:db:48:77:6d:44:cf:b0:f3:91:a3:27:36:0e:f4:
         cf:a3:4c:14:8d:c6:a9:01:25:63:4e:80:62:96:cf:93:17:2b:
         4b:c4:13:89:51:1a:f0:2c:fc:04:e2:c0:a8:f7:cf:dc:f9:a1:
         49:3a:bb:43:3f:38:36:21:37:14:c6:ae:63:b4:55:ca:45:45:
         d4:c6:71:a3:ca:78:d9:65:1e:02:38:89:23:16:53:50:d8:f6:
         d9:ea:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:38:28 2026 by rpki-client