Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39C583BA3EFF11F19B71F335C7833773.roa
File:                     39C583BA3EFF11F19B71F335C7833773.roa (raw, json)
Hash identifier:          yjU8bLhrQz8u9/LPo/JpzRE28ca2O5vYFsX5JVbLdS8=
Subject key identifier:   AF:DC:9C:B5:42:26:D5:F6:EB:C8:4D:9D:77:4F:40:2B:B7:9F:CD:78
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F71F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39C583BA3EFF11F19B71F335C7833773.roa
Signing time:             Mon 06 Jul 2026 17:47:59 +0000
ROA not before:           Mon 06 Jul 2026 17:47:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154622
IP address blocks:        103.175.30.0/23 maxlen: 24
                          163.128.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63263 (0xf71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:47:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea4f-ac6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:04:ff:c6:8f:29:8a:81:a3:44:4f:8e:23:
                    b3:a4:68:e4:89:ed:c9:b5:64:5b:fa:12:cd:e3:cf:
                    8f:96:17:d8:0a:3f:ec:cd:2d:61:fd:cf:8c:c9:83:
                    ed:e9:1c:3e:6a:6e:ef:90:95:14:43:b8:c9:07:10:
                    51:09:22:ac:01:06:2a:59:90:a0:62:c5:37:6b:1f:
                    28:4d:00:07:a6:af:8b:f2:fd:49:34:54:6d:4f:56:
                    d4:da:4c:2b:8e:f4:90:6d:1e:6e:d6:8f:33:d7:9a:
                    6a:f7:b6:65:80:b7:2b:3e:96:b2:a2:d0:3e:03:7f:
                    44:29:1a:1e:c3:a4:0d:87:39:f4:0a:dd:50:23:a0:
                    48:ba:33:28:da:b2:44:ed:7c:04:da:1d:45:21:8f:
                    52:78:fd:0b:0b:ee:bb:2b:e5:0c:69:d7:2d:97:72:
                    65:07:7a:43:8a:18:fd:ab:e8:c1:60:90:fd:f7:76:
                    a6:db:e7:7f:92:06:22:e0:89:02:ba:f7:bf:e7:90:
                    f7:59:0b:dd:28:b2:44:8b:ee:0d:85:8c:d8:f7:1c:
                    4d:f0:0b:bb:19:7c:f9:04:fd:aa:e3:af:83:e4:af:
                    82:90:77:2f:13:cf:ef:43:4a:3c:5d:32:b8:b4:50:
                    a8:31:9b:31:b4:6e:62:bd:a0:51:24:7d:dd:4b:1c:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:9C:B5:42:26:D5:F6:EB:C8:4D:9D:77:4F:40:2B:B7:9F:CD:78
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39C583BA3EFF11F19B71F335C7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.30.0/23
                  163.128.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:e9:f7:a0:85:b2:26:a2:69:1d:b9:67:03:76:35:7f:bc:d0:
         49:aa:50:68:7f:b8:bb:50:d6:54:e8:57:90:75:8f:dd:8b:1c:
         66:92:c5:71:9d:ab:2c:4d:ce:6b:c4:77:8d:90:f4:a9:c2:18:
         8b:e1:79:df:2a:5e:a0:da:4b:ad:d4:97:cd:9c:ae:21:f2:ba:
         08:c7:e1:d0:6f:b2:b8:f4:e3:4b:e6:d8:6c:59:cf:c6:fb:1b:
         e4:77:4b:b5:f3:a3:54:c9:05:21:1e:9c:1b:3d:d9:30:bb:7a:
         7e:79:4a:82:f5:d2:66:78:e4:46:76:9e:ed:b7:a3:97:b6:a6:
         88:eb:44:18:a2:5f:43:16:5b:bf:bd:7c:27:9a:2e:af:00:14:
         2a:4b:a6:83:58:8e:bc:a8:d1:02:5d:a2:4a:25:fb:c3:ff:90:
         ca:56:22:92:00:e0:1e:a0:5d:7c:5c:65:4e:4e:71:ee:35:18:
         67:52:48:9b:fc:a8:97:6d:6b:bd:44:c2:59:48:12:c3:40:be:
         17:47:0a:34:01:14:c8:31:06:ca:d4:12:42:ca:0a:f1:f3:fc:
         04:ce:b4:f0:41:2f:53:1c:50:a3:d7:85:9d:c0:bc:60:f1:30:
         81:ba:83:33:0e:b0:14:db:f3:5e:f2:c5:fa:6b:ce:dd:bd:d5:
         1b:25:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:30 2026 by rpki-client