Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/411CA50A4B8B11ED8FB05F7FC4F9AE02.roa
File:                     411CA50A4B8B11ED8FB05F7FC4F9AE02.roa (raw, json)
Hash identifier:          Q1UTBuGz2BAzs4YNlKQ1HQS63U3g+9MgF7CcSOcgpxE=
Subject key identifier:   52:95:40:3B:51:8F:AB:A0:A2:85:9C:9A:2B:43:D0:4B:40:CC:8D:FD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F559
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/411CA50A4B8B11ED8FB05F7FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:32:55 +0000
ROA not before:           Mon 06 Jul 2026 17:32:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150094
IP address blocks:        103.68.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62809 (0xf559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:32:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be6c7-90e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:04:32:40:91:30:26:c8:bd:d9:b3:d3:be:
                    19:2a:ee:f6:5a:20:06:48:e7:ec:66:cf:ec:79:1f:
                    1f:55:41:e9:9d:19:1f:56:f3:1c:d0:0a:e6:51:f7:
                    07:9a:6b:b0:59:57:1d:01:07:8d:82:e8:ac:08:3a:
                    48:92:6e:bc:bc:4f:31:04:fb:9a:2b:ed:8f:92:21:
                    e0:b5:08:f5:4f:df:0d:31:d0:ef:dd:d8:99:2b:b4:
                    70:0a:24:f0:ed:49:16:e7:67:63:6e:22:65:9c:1e:
                    95:fa:ad:32:68:18:0f:3e:02:3f:98:7c:b5:a6:54:
                    55:3e:5f:3e:36:37:c8:b1:9d:dc:95:ce:d8:a4:34:
                    cb:04:9b:4c:08:01:4a:d6:f0:88:3c:a8:a9:39:73:
                    bd:0a:43:31:5f:3a:91:57:38:15:05:08:15:57:55:
                    c6:12:77:f8:e2:40:81:70:b4:33:8b:8d:e5:fc:a3:
                    27:45:00:ea:56:9f:99:a4:b5:7e:27:df:0c:c4:d4:
                    d7:d9:6c:bb:b5:71:ae:97:b4:42:6e:31:c4:e0:31:
                    14:37:24:f1:3a:15:c5:c2:74:fd:ec:49:a9:8a:c6:
                    27:39:70:ff:8a:19:0a:95:ea:51:c6:42:8f:10:60:
                    f6:b1:a6:6b:a2:dd:b6:76:fc:8a:5c:bc:ad:5e:96:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:95:40:3B:51:8F:AB:A0:A2:85:9C:9A:2B:43:D0:4B:40:CC:8D:FD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/411CA50A4B8B11ED8FB05F7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5f:e9:68:e2:b8:cb:4f:c2:f8:58:80:6f:9f:07:1a:82:7e:
         3a:4d:f9:12:59:fd:ed:c1:4a:8d:0c:bf:b8:e2:e8:98:3f:c0:
         ff:e5:b3:30:16:0b:52:49:dc:93:47:b3:4b:34:8c:e6:30:be:
         d9:a0:85:34:fc:2a:ca:2a:b4:f4:e0:12:8c:2a:f9:f1:08:f1:
         f6:e6:77:9b:3f:79:d3:5e:26:4e:18:2f:19:e9:7a:2e:45:64:
         2b:96:2c:e0:bb:64:0c:bb:48:18:d8:dd:0c:ef:96:fc:99:8e:
         f5:87:32:cf:72:5c:25:30:9e:e3:a8:3c:4b:22:50:e0:9c:06:
         08:73:8c:e8:1d:e4:0e:66:48:78:59:7e:be:2b:a9:4c:24:96:
         75:f5:94:40:a4:7b:46:54:a9:1d:eb:c2:59:c8:8f:ea:46:c6:
         b7:22:12:fb:93:3f:a3:ef:f0:44:37:56:8d:72:86:b6:92:4e:
         29:e0:e3:ea:fe:69:d3:cd:0e:11:e4:ec:6e:43:d1:d8:09:f1:
         f6:0e:59:d2:ac:da:af:73:ab:5b:b7:fb:37:65:57:65:19:3f:
         4e:52:8b:f5:31:4c:e9:0a:4a:df:6f:95:b2:97:b2:ca:39:b2:
         16:90:03:fb:be:6a:03:fb:52:7d:76:5f:b1:25:b2:7a:88:ce:
         04:1a:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:48 2026 by rpki-client