Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EB21F60BEBC11EBA276510AC4F9AE02.roa
File:                     2EB21F60BEBC11EBA276510AC4F9AE02.roa (raw, json)
Hash identifier:          ML0WVg8AOMxvlSpBO1xn93GWz7KuuPx1v3KS14/8D+8=
Subject key identifier:   AB:6A:58:B9:EC:A9:7D:EB:8D:64:F1:17:8F:EF:D0:5F:10:57:D9:EB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F393
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EB21F60BEBC11EBA276510AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:17:47 +0000
ROA not before:           Mon 06 Jul 2026 17:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141857
IP address blocks:        103.167.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62355 (0xf393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be33a-b79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:48:2b:fa:c2:48:a8:61:77:9c:27:58:77:
                    6d:05:1e:27:3a:00:41:91:7d:7d:50:63:12:18:7d:
                    f7:e5:84:27:fc:e0:0b:9c:17:f1:98:18:9d:3a:6e:
                    9b:98:8e:ee:1c:94:1c:08:db:25:9f:27:b6:9e:dc:
                    f1:55:ca:07:74:93:29:40:a0:3e:1d:f1:ea:45:f5:
                    7a:b9:37:7c:96:a5:c0:b8:97:c4:fd:bf:ac:31:28:
                    21:64:f3:01:a0:f2:1d:e8:86:7f:fa:b1:7f:ce:13:
                    af:29:b2:ac:97:f7:e9:24:37:cf:fe:46:44:2e:e1:
                    36:b9:74:e1:5d:91:8d:40:76:72:cb:11:d2:5e:56:
                    17:9d:22:fa:12:fa:40:d8:ff:f4:b0:e5:e2:fc:0f:
                    aa:52:29:32:d5:42:8a:be:ad:42:ee:74:65:a4:84:
                    e3:d2:87:36:97:73:5a:4c:14:78:8d:26:34:6e:fe:
                    a2:64:60:3c:5f:b8:66:4b:12:d9:7b:ed:56:f6:3d:
                    d6:a6:d8:69:27:28:3e:b4:88:1f:e4:82:85:1a:20:
                    ba:02:ec:35:76:80:10:74:64:4b:8f:57:9e:e6:e0:
                    0a:5e:26:3f:4f:2e:18:d6:e1:51:a8:a4:47:a2:72:
                    be:59:f2:6c:a5:0b:9f:f0:ea:b1:d4:39:ed:1c:96:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6A:58:B9:EC:A9:7D:EB:8D:64:F1:17:8F:EF:D0:5F:10:57:D9:EB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EB21F60BEBC11EBA276510AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:03:2f:37:89:d0:6c:e5:cb:75:42:a3:81:15:3c:a2:01:dc:
         f2:67:8f:a4:f3:22:fe:05:0e:c3:fa:04:e1:04:81:87:8d:4a:
         b5:07:b6:be:d1:f8:fe:4a:78:11:09:4c:d2:05:b1:a4:2b:23:
         c8:9e:98:f5:8b:c1:4d:aa:fb:df:4a:39:5a:8e:36:d5:1b:ea:
         be:45:4f:74:18:ed:7a:fe:f2:4e:d9:c3:3f:cd:dd:dd:30:4d:
         5a:11:1b:32:d8:52:85:c7:f2:72:9d:9b:1f:8a:8b:ea:09:0e:
         7c:84:48:f5:77:9e:45:7c:22:56:16:a3:18:92:ff:d3:7f:85:
         38:54:74:cd:ca:1a:ac:28:e3:77:8d:fa:92:e7:95:aa:c2:c4:
         88:d9:15:a7:09:08:62:66:b7:43:f2:8e:a8:1a:3a:31:8f:bc:
         cf:44:40:1f:fd:c8:b8:75:e4:4e:06:14:61:86:e1:71:9d:fd:
         82:44:5e:a0:59:07:83:2b:b1:31:1f:3f:37:66:ce:64:02:f1:
         6f:26:39:b3:11:30:11:46:c3:95:5c:4c:9a:0d:55:ee:67:02:
         85:4c:58:23:1c:54:38:3d:fe:8e:35:4e:1a:87:86:6b:2b:c1:
         99:63:70:cc:23:bd:ac:16:22:e8:16:df:fc:1b:89:ff:79:93:
         6c:18:4e:f4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPOTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTc0N1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUzM2EtYjc5ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKcISCv6wkioYXecJ1h3bQUeJzoAQZF9fVBjEhh99+WEJ/zgC5wX8ZgYnTpu
m5iO7hyUHAjbJZ8ntp7c8VXKB3STKUCgPh3x6kX1erk3fJalwLiXxP2/rDEoIWTz
AaDyHeiGf/qxf84TrymyrJf36SQ3z/5GRC7hNrl04V2RjUB2cssR0l5WF50i+hL6
QNj/9LDl4vwPqlIpMtVCir6tQu50ZaSE49KHNpdzWkwUeI0mNG7+omRgPF+4ZksS
2XvtVvY91qbYaScoPrSIH+SChRogugLsNXaAEHRkS49XnubgCl4mP08uGNbhUaik
R6JyvlnybKULn/DqsdQ57RyWE/cCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSrali5
7Kl9641k8ReP79BfEFfZ6zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJFQjIxRjYw
QkVCQzExRUJBMjc2NTEwQUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGenTTANBgkqhkiG9w0BAQsFAAOCAQEAEAMvN4nQbOXLdUKjgRU8
ogHc8mePpPMi/gUOw/oE4QSBh41KtQe2vtH4/kp4EQlM0gWxpCsjyJ6Y9YvBTar7
30o5Wo421RvqvkVPdBjtev7yTtnDP83d3TBNWhEbMthShcfycp2bH4qL6gkOfIRI
9XeeRXwiVhajGJL/03+FOFR0zcoarCjjd436kueVqsLEiNkVpwkIYma3Q/KOqBo6
MY+8z0RAH/3IuHXkTgYUYYbhcZ39gkReoFkHgyuxMR8/N2bOZALxbyY5sxEwEUbD
lVxMmg1V7mcChUxYIxxUOD3+jjVOGoeGayvBmWNwzCO9rBYi6Bbf/BuJ/3mTbBhO
9A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:04 2026 by rpki-client