Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36D2A79C9E7211EBA1682955C4F9AE02.roa
File:                     36D2A79C9E7211EBA1682955C4F9AE02.roa (raw, json)
Hash identifier:          ze2lk3PF05kjBWXS3RimEfQYhEdLmo0hN5/qoOi4wb0=
Subject key identifier:   DC:50:CD:F2:E6:3E:CE:C1:B7:31:D7:54:80:2B:07:49:DF:2B:8E:4D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F39A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36D2A79C9E7211EBA1682955C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:18:01 +0000
ROA not before:           Mon 06 Jul 2026 17:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141867
IP address blocks:        103.165.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62362 (0xf39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be349-897f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:dc:de:58:df:db:40:8a:67:6f:d4:00:b2:
                    3a:f7:a9:ea:26:9d:39:cc:fd:ee:31:32:24:e0:cf:
                    4c:25:2e:11:f4:20:c4:63:23:50:95:a5:e3:42:ea:
                    82:bb:a8:7a:49:72:5a:17:e5:90:6d:2b:72:97:6a:
                    67:39:86:74:82:85:fb:0d:7c:9c:8c:64:20:60:72:
                    41:6b:de:3f:b1:91:2c:05:af:47:9c:c0:ca:99:1d:
                    2e:c2:06:df:25:e8:bc:5d:ce:f6:a6:cd:71:52:3a:
                    d9:e7:b4:0f:49:19:29:cb:c6:48:c5:9f:bf:34:6a:
                    ba:a3:7d:66:16:f8:cf:36:cc:35:bd:19:6f:8d:56:
                    29:c8:93:bb:4c:dd:3d:6e:6d:1b:bf:f1:9f:6f:5f:
                    12:11:e1:66:ac:cf:9c:d5:6c:b9:62:ce:2d:d4:b3:
                    42:2f:7f:b9:2c:b5:17:7c:86:fa:ec:17:4e:07:55:
                    06:32:a8:e6:94:2c:0f:43:9a:98:2c:16:64:79:17:
                    dd:ac:c9:cc:42:2e:23:f9:8a:1a:dd:f2:2e:1c:bc:
                    b2:16:71:d7:77:2d:6e:4f:c0:95:e8:2a:0a:b1:08:
                    be:e9:01:97:0e:78:7b:d2:33:88:45:66:44:4f:d6:
                    d5:c7:38:26:d1:f6:b5:8d:58:01:49:55:3d:10:0f:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:50:CD:F2:E6:3E:CE:C1:B7:31:D7:54:80:2B:07:49:DF:2B:8E:4D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36D2A79C9E7211EBA1682955C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:55:61:44:cc:9c:ab:b8:59:6f:ba:6c:57:d8:45:82:f6:63:
         32:42:94:c6:18:e5:ff:28:a2:40:43:ae:64:a7:12:61:3a:9d:
         b6:f7:ef:c7:15:70:eb:ab:62:4e:f4:1a:b1:43:5d:2f:2e:58:
         a7:f4:f0:9c:3c:db:0d:0d:13:89:c0:7e:1c:7f:ac:21:24:6d:
         ae:4b:d5:35:83:77:ee:e1:bb:1b:cd:54:f0:fa:17:3c:fd:08:
         d7:ea:3a:e9:b1:61:54:d9:86:02:ea:6f:66:81:d7:2b:c3:ef:
         e1:4a:d3:b1:52:1e:bc:1c:6c:4d:b9:99:53:d7:cd:a9:3c:52:
         34:76:87:1b:aa:f7:07:75:64:e7:59:98:50:0c:4f:fd:3b:c2:
         ba:69:8b:ab:b2:ba:1b:6c:c5:c3:8a:b9:0c:30:d1:7c:24:53:
         ad:59:a2:9e:2d:50:8e:f5:08:1f:99:3b:85:d2:f4:6b:f3:95:
         ae:ab:c5:ec:32:ff:3b:f6:d2:91:46:1f:0e:72:1b:2f:e0:d8:
         6f:67:39:1a:52:ea:18:1f:29:28:83:52:e2:51:31:63:7d:a4:
         8b:ec:4a:f3:99:a6:57:5b:35:4f:34:93:53:7c:85:2e:e8:26:
         29:ba:88:89:7f:66:94:64:67:79:d3:50:1d:8e:04:fb:41:5b:
         78:e5:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:46 2026 by rpki-client