Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa
File:                     37F380B027F811EBB6ADAF84C4F9AE02.roa (raw, json)
Hash identifier:          6iRrpgA0iVan3sDkFQoweNl6rL7pbuCvZEQgB9Prp8E=
Subject key identifier:   BE:94:03:59:26:B4:82:70:16:9A:39:D5:E6:A4:1D:05:71:09:A3:52
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F01E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:48:25 +0000
ROA not before:           Mon 06 Jul 2026 16:48:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135734
IP address blocks:        103.144.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61470 (0xf01e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:48:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdc59-c289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:ec:ab:8e:d4:02:71:09:c4:3d:f5:b2:31:
                    68:f2:1b:20:9c:a3:6b:f1:6c:d3:07:39:4a:8a:53:
                    2f:7c:69:6a:c9:2a:7f:5d:a3:59:61:66:2e:ed:7d:
                    29:9a:f1:cc:f9:21:ef:9f:87:ee:69:76:73:92:c4:
                    bf:38:0b:a7:9e:01:7c:e5:03:d8:9d:d1:ab:3a:b1:
                    3f:25:17:e9:1c:d2:85:c2:13:41:26:21:da:fe:7d:
                    66:87:03:18:8a:f7:91:de:18:d2:4f:b4:33:90:7c:
                    73:a7:45:54:85:26:15:da:ec:b9:45:7d:f2:9f:44:
                    6f:ff:f2:8c:56:ad:41:94:43:92:5c:c0:d4:c8:e9:
                    d1:5a:66:11:77:ac:f7:85:28:1d:ff:e3:11:3e:e1:
                    09:53:df:61:f4:35:00:f9:8a:b8:f0:cc:3f:e6:1e:
                    c9:41:5a:bf:c0:a4:82:69:17:2e:4d:2d:0d:10:30:
                    10:ac:b9:dd:1e:d6:44:35:45:e4:20:b1:3c:51:bf:
                    88:0a:fc:d7:79:b4:61:61:05:1d:51:d8:f1:87:d7:
                    52:04:bf:77:ca:12:fb:aa:fe:17:4d:16:08:dd:49:
                    64:4e:62:33:56:68:4c:e1:c4:99:06:1a:92:77:86:
                    29:75:a1:92:c1:1b:de:96:b7:6a:74:33:2d:a6:d5:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:94:03:59:26:B4:82:70:16:9A:39:D5:E6:A4:1D:05:71:09:A3:52
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:9f:e0:14:07:6d:02:93:e3:ef:9c:99:19:e3:86:c3:c1:
         9b:d6:8a:43:60:bc:c3:e5:33:7e:c2:fa:ec:2a:87:a5:76:3e:
         da:5d:6a:6e:2a:2e:7c:13:4a:ef:b4:28:06:bb:82:54:ff:49:
         05:07:ab:2e:eb:24:0f:99:c9:d1:41:cd:49:a7:3f:3b:da:f8:
         ba:88:c6:ea:3f:9e:cf:f3:c3:30:22:40:01:c1:00:73:23:e5:
         bd:1d:42:0f:f2:f5:05:7d:52:5b:1d:26:18:6a:25:85:4d:be:
         7b:18:a4:fd:9f:a1:4f:43:70:18:b9:ea:b6:3d:b5:09:66:07:
         79:72:26:25:2d:6f:f9:72:66:76:21:21:37:f6:e9:ba:42:a6:
         04:0c:47:d5:01:8f:77:d3:0d:cc:7d:bd:50:ee:c7:1d:31:97:
         ba:11:ac:da:bf:07:19:bc:3c:c1:62:0a:0c:ea:7f:e5:41:d5:
         18:26:05:d3:64:f8:bc:24:9f:2d:af:48:fe:9d:a6:e1:a8:67:
         61:33:da:e0:60:36:1a:74:40:8e:c0:6a:f5:b8:6f:bc:8e:fa:
         48:98:d7:06:3e:06:8d:3a:b9:7e:29:b8:01:8f:94:ff:68:66:
         d4:e9:f3:0f:89:cb:02:0c:cc:0c:05:50:66:07:6c:b1:f3:73:
         22:79:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:58 2026 by rpki-client