Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31BBB4BC426911EFBDEEE965C4F9AE02.roa
File:                     31BBB4BC426911EFBDEEE965C4F9AE02.roa (raw, json)
Hash identifier:          RnrOXPTA35yttUtZXuhwRsWoUU99PBn43cQzIUpje/o=
Subject key identifier:   0E:30:6C:94:C6:84:27:99:40:2E:85:61:FE:CA:A0:31:FB:E3:BB:A9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFDA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31BBB4BC426911EFBDEEE965C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:46:16 +0000
ROA not before:           Mon 06 Jul 2026 16:46:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135235
IP address blocks:        103.221.80.0/23 maxlen: 24
                          2001:df1:d7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61402 (0xefda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:46:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdbd7-38d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:53:9d:22:6f:82:c9:6c:fd:b6:db:09:e5:
                    d9:47:fd:91:09:d4:38:46:d9:54:ea:6c:79:a4:f4:
                    be:02:33:08:d6:9e:be:66:b4:b0:63:9c:25:2f:28:
                    57:7a:19:8c:c8:c9:f6:ac:a1:fd:e7:e2:d2:aa:50:
                    89:5a:87:12:86:e5:72:0f:51:f2:d6:c9:e8:47:af:
                    99:7f:c6:5d:52:73:7b:95:e2:de:f4:47:ea:7d:d7:
                    52:db:36:2b:b6:7a:56:ea:2d:49:d0:6e:a0:c2:2f:
                    5c:cf:97:8a:d0:67:f4:a2:19:b4:48:c8:1b:1e:45:
                    ea:70:96:3c:af:98:d3:3a:07:14:27:c4:5e:75:4f:
                    40:5c:51:c4:ba:62:8f:83:ba:c1:b1:88:cf:7d:03:
                    05:2e:ec:c0:0d:d9:7c:dc:4a:f9:6c:21:0f:80:73:
                    2a:fa:0b:c1:14:c8:7d:fc:0a:2f:8c:da:ab:78:50:
                    c0:b5:08:c1:41:2e:25:04:05:b2:08:4e:bb:4a:51:
                    13:74:52:57:f6:dc:02:4c:60:99:a2:75:46:80:e7:
                    db:7f:7a:d5:3e:94:26:8e:f1:1f:86:ca:a4:19:d1:
                    27:8f:f5:cf:b0:84:1b:2e:8f:f4:50:b5:db:c5:02:
                    0a:9c:08:30:dd:56:f6:b0:aa:8f:64:cf:96:c3:4d:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:30:6C:94:C6:84:27:99:40:2E:85:61:FE:CA:A0:31:FB:E3:BB:A9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31BBB4BC426911EFBDEEE965C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.80.0/23
                IPv6:
                  2001:df1:d7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:85:55:4f:0b:e9:1d:2a:fc:c5:e9:93:90:01:a1:19:75:83:
         86:03:5a:dc:a3:04:3e:bd:4b:8f:50:d5:bd:45:c6:dd:d5:31:
         3c:bf:1e:6d:7e:a4:d3:7f:1b:e5:06:07:70:01:c5:fd:fb:5b:
         7c:d6:19:32:aa:88:cd:a3:95:48:3b:cf:2f:08:9d:c4:fd:8a:
         73:90:44:87:cf:fe:46:ff:f0:00:a6:11:c9:d9:a3:2d:97:d4:
         75:b0:6b:e8:ff:a9:45:95:84:f5:06:fc:54:37:80:b8:be:0a:
         8b:be:17:ae:86:21:03:70:90:ed:bd:2e:3c:aa:15:5d:db:b3:
         d6:25:66:64:0b:1e:7e:fa:62:4f:c0:b1:f0:73:9d:c8:33:3e:
         b6:9d:68:4a:af:34:43:20:03:70:e6:10:85:46:9a:cd:6a:b3:
         4a:76:bd:c1:19:c6:7b:3d:43:3b:96:fe:3a:98:21:21:9f:ab:
         d6:84:c7:e0:d4:1c:74:8e:fd:f8:e3:c6:d1:9e:f8:56:67:bb:
         72:a6:c6:7b:5e:17:e8:de:15:49:23:d2:39:06:e0:e8:f5:1d:
         7e:96:88:29:73:46:f2:eb:16:41:2a:96:d3:80:38:bd:4c:d4:
         a7:d1:04:cd:4e:0e:19:a7:a5:e7:3a:42:21:2e:eb:12:a2:cd:
         61:01:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:23 2026 by rpki-client