Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/358E4A322A0911EF9CB0DF42C4F9AE02.roa
File:                     358E4A322A0911EF9CB0DF42C4F9AE02.roa (raw, json)
Hash identifier:          nr0KajQwqVio1FIdfaStROh2dzJOikHqn0XXVx6Vbpk=
Subject key identifier:   69:94:4F:55:D2:43:FF:D3:B5:1E:11:64:E7:92:07:18:44:F5:B7:83
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F386
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/358E4A322A0911EF9CB0DF42C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:17:22 +0000
ROA not before:           Mon 06 Jul 2026 17:17:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141841
IP address blocks:        103.168.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62342 (0xf386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:17:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be321-1381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:ce:6f:b9:48:bb:90:90:56:ad:95:e5:83:
                    24:f2:57:3c:f0:6d:f9:23:93:3b:3e:c0:3a:aa:5e:
                    a9:4c:78:87:f4:d4:59:5f:91:0f:cc:3b:33:0d:91:
                    fb:ae:cc:b3:15:2d:b5:56:f5:5f:5d:90:09:05:41:
                    8a:a9:e9:59:a7:1e:b8:31:8c:26:ec:2d:5e:4e:8a:
                    98:af:6d:5d:38:c6:81:c9:9c:b9:f7:d6:58:be:68:
                    2c:4e:79:4e:71:5b:3f:e5:11:96:a8:78:d1:3d:77:
                    04:c9:8d:ac:8a:25:c1:27:32:63:0b:d2:41:4b:0b:
                    66:bb:0c:36:0e:fc:e1:3c:a7:17:a9:20:fb:52:65:
                    6e:43:24:16:62:8b:3c:66:29:ec:c5:19:2a:05:3f:
                    ac:22:5f:e6:a1:4e:13:b5:c9:d3:c5:cb:ff:f0:47:
                    55:30:f4:b8:36:4c:b6:34:66:42:14:79:31:67:48:
                    ff:b5:fb:01:77:5b:1f:b9:0d:22:c5:5e:49:0c:53:
                    89:28:71:7d:09:26:1f:21:69:a5:84:24:d3:83:bb:
                    3f:f0:7e:bf:98:41:58:84:d2:4c:3f:6d:3b:96:b9:
                    ad:7e:97:29:8c:af:b2:49:61:6d:92:62:6c:72:fd:
                    c7:a1:dd:ed:10:2e:2e:fa:d7:28:98:ee:5e:be:6e:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:94:4F:55:D2:43:FF:D3:B5:1E:11:64:E7:92:07:18:44:F5:B7:83
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/358E4A322A0911EF9CB0DF42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:7a:0d:c5:45:26:5b:33:b7:30:dd:30:c5:42:d9:99:d7:
         cf:a2:ae:87:5b:58:64:4d:45:86:4c:7e:28:d5:e6:95:d4:1b:
         43:f6:c6:7c:e2:97:c6:35:91:8d:a5:2c:80:6e:12:58:63:2b:
         2b:bc:56:c2:2d:69:c9:cf:27:50:3e:f6:0c:6d:c9:69:c8:fa:
         b6:78:2e:78:0b:10:48:a6:ca:5f:fe:76:68:2c:da:d7:14:18:
         3e:0d:1a:ed:1a:6c:2e:b6:11:8f:46:15:36:ef:4b:e2:d3:4c:
         78:bf:c3:75:df:e0:b3:a9:33:57:6a:39:63:cd:a8:6a:86:c3:
         4a:af:ab:fa:6d:5d:14:fe:82:4a:44:6a:a3:0b:7a:bc:a7:53:
         3e:f6:e6:e8:55:77:58:68:ca:97:45:a1:ad:39:b1:06:9a:2b:
         c5:1c:74:dd:73:25:82:44:5d:6f:ad:c3:fe:a5:84:4d:78:c4:
         3c:5f:0f:8d:05:8c:c8:08:09:a9:b8:47:f8:93:6a:7d:74:60:
         6f:d4:7f:55:81:76:66:49:f0:99:1c:4f:93:c0:ce:2d:49:c3:
         fc:26:07:99:cf:33:fc:fd:1f:8a:7e:56:4f:fc:8c:2a:34:31:
         cc:e2:e1:67:9f:d4:4d:5c:4c:8f:2a:4a:96:af:30:19:3d:be:
         b2:21:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:37:48 2026 by rpki-client