Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F14D2DC1D1611F1BA8F685A0D3D8C67.roa
File:                     2F14D2DC1D1611F1BA8F685A0D3D8C67.roa (raw, json)
Hash identifier:          kuZG91XKnH1bSLtDKV5ZIRAP4sIeL88T7tWrxI1eOxk=
Subject key identifier:   9B:BC:B9:23:2C:0C:4E:01:28:07:CD:19:D8:E9:7D:1F:60:7E:AD:25
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE96
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F14D2DC1D1611F1BA8F685A0D3D8C67.roa
Signing time:             Mon 06 Jul 2026 16:35:46 +0000
ROA not before:           Mon 06 Jul 2026 16:35:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133591
IP address blocks:        103.181.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61078 (0xee96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:35:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd962-469b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:5e:af:9a:2f:71:b9:28:29:07:da:2d:71:
                    59:53:55:71:00:d6:cd:98:57:77:25:ad:01:ba:cc:
                    83:f0:b0:79:6c:04:97:49:75:39:67:56:fe:86:84:
                    e5:f6:24:89:1e:07:67:c4:9e:5b:a6:c5:49:f2:7f:
                    43:fd:24:aa:51:47:7e:fb:c7:6f:f4:d7:61:30:15:
                    7a:9f:3c:2a:57:2e:e7:40:3b:ae:95:e5:f5:04:05:
                    67:90:70:3c:fa:88:7d:de:48:29:74:ab:4a:3c:01:
                    5f:d9:e8:a2:58:cf:e5:dd:fb:c8:d0:78:e2:be:b9:
                    a1:b6:7c:86:cd:a2:ac:eb:32:da:e8:85:8c:6c:e9:
                    8a:47:24:19:a0:10:b1:ee:87:c4:76:b2:5b:3a:dd:
                    32:78:b4:32:a5:c8:1b:58:c3:d5:44:f9:ac:f6:f9:
                    a0:f0:bb:bf:6e:54:c3:44:cf:7d:0b:07:a7:79:6f:
                    dd:af:3c:6d:d1:cf:94:5e:6e:d0:d7:fb:90:18:be:
                    38:2c:8a:45:8f:b9:4f:9b:b4:6a:ef:a5:5b:f5:9b:
                    6c:3e:2a:fe:99:8e:49:4b:c0:c8:15:d0:aa:12:ed:
                    cd:3e:99:e7:47:28:91:98:58:53:ad:b9:23:8a:1e:
                    54:d3:08:74:66:bd:16:6e:0a:6e:78:50:ee:d5:5f:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:B9:23:2C:0C:4E:01:28:07:CD:19:D8:E9:7D:1F:60:7E:AD:25
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F14D2DC1D1611F1BA8F685A0D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:c9:9c:f8:b6:be:db:53:b4:17:62:55:79:cd:44:9a:c4:
         fb:a0:68:4f:9f:25:a6:a4:8c:65:f3:50:db:e5:0f:19:06:5c:
         79:f7:10:88:08:b0:7e:f4:93:18:eb:d6:f4:3d:94:26:91:0f:
         b5:59:67:17:6c:3b:0a:b6:c4:20:2b:8b:3b:e8:b5:32:43:33:
         be:9b:4e:46:e6:79:a5:b0:95:d3:86:00:e4:f3:0a:ca:01:de:
         3e:40:8d:0d:7d:91:07:8c:9c:dd:65:d9:33:92:2c:0b:6b:34:
         58:16:33:1c:32:45:8e:51:87:9b:61:53:c3:91:d9:3f:0e:ab:
         87:d8:77:d1:9a:c5:eb:6e:ed:ca:05:29:e4:c7:06:8e:95:a8:
         39:94:ce:db:83:db:64:90:c7:50:a6:db:1e:43:9a:28:5b:ad:
         e8:3b:54:7e:0f:3d:3b:5d:d6:e7:0d:79:b6:25:b6:fc:0d:56:
         73:8b:5a:13:13:27:6c:bd:08:e7:92:ef:3f:28:8c:61:d2:fe:
         f3:98:3e:aa:e7:03:6a:6f:83:72:c0:dc:e8:ff:ff:78:78:84:
         7f:6b:ce:44:ca:7f:1b:20:60:65:28:b7:92:5b:93:80:a0:e5:
         1b:b0:76:5a:a3:11:33:e9:f6:5c:49:d4:a7:26:06:ef:40:49:
         3d:8a:69:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:51 2026 by rpki-client