Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41864594DB6711ECA4982F4BC4F9AE02.roa
File:                     41864594DB6711ECA4982F4BC4F9AE02.roa (raw, json)
Hash identifier:          PSiViXUOCBSO0TMNIsP6kUoeh30Z3k0JRPXU5xWvZXQ=
Subject key identifier:   90:D0:13:F5:62:AC:BC:C6:94:ED:0D:F8:86:55:AD:A5:CA:FD:CC:66
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F492
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41864594DB6711ECA4982F4BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:26:21 +0000
ROA not before:           Mon 06 Jul 2026 17:26:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149195
IP address blocks:        103.178.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62610 (0xf492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:26:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be53d-6579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:25:10:af:6e:16:e5:4f:6f:ef:66:07:7b:
                    2d:37:53:d7:51:fd:66:be:5c:d0:95:e9:75:61:dc:
                    99:f0:b4:c1:0a:e2:5f:c0:5d:06:12:9a:f1:b5:2f:
                    c3:63:71:c0:ee:d6:63:a2:56:c2:b4:72:b1:49:81:
                    ec:e8:d4:33:80:21:bb:f9:61:36:6e:bb:2d:52:84:
                    28:8e:1a:a7:80:51:30:f5:3b:ad:3c:2a:92:f8:f1:
                    67:35:a8:b0:7d:4b:f6:6c:24:19:8e:6e:4f:1a:f7:
                    dd:5a:35:61:7d:92:78:8d:de:12:19:96:81:6f:6a:
                    6f:d1:8a:90:79:58:7b:69:d2:ee:30:4c:d8:2d:3c:
                    9e:10:8a:46:fe:56:3d:9d:d9:67:b3:f6:bb:15:4d:
                    64:c6:bb:91:2c:74:41:37:21:f4:62:b3:18:ba:f0:
                    b8:5c:b5:0b:17:be:ea:75:37:d5:37:91:32:fe:53:
                    28:49:53:df:55:78:43:0c:2d:e3:3d:6c:3c:41:83:
                    d3:9a:eb:30:cd:fb:e0:56:e6:26:02:37:25:36:79:
                    eb:63:7e:f2:c8:83:95:54:b2:f4:fd:f7:bd:24:15:
                    68:a5:1f:f3:ae:cd:a1:84:1e:91:eb:9f:fc:29:21:
                    af:89:a8:04:03:6f:d4:f1:ca:8e:a5:79:be:b8:fe:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D0:13:F5:62:AC:BC:C6:94:ED:0D:F8:86:55:AD:A5:CA:FD:CC:66
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41864594DB6711ECA4982F4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:69:c6:d4:79:93:c9:ec:a1:63:cf:a3:10:c9:52:0f:3c:
         b0:8d:20:d3:ee:32:92:55:cc:28:a3:ec:83:57:54:fc:48:90:
         ea:04:b2:68:36:91:6a:ac:c6:f9:fd:2b:b8:f8:b7:43:f0:e9:
         fc:6f:4a:fb:ac:95:11:68:24:3b:c8:9f:38:95:96:d4:f0:f3:
         72:b4:81:3b:68:bf:ab:b2:75:18:0d:22:63:3d:d7:42:61:b2:
         ea:ea:04:32:32:fe:d3:bb:66:d9:a0:6d:d3:7b:03:ee:bc:52:
         c7:e4:64:09:94:2d:5f:85:03:0c:85:be:41:0f:9e:f2:36:c4:
         1f:27:e3:b2:ca:09:f8:6c:0b:47:4c:27:9f:02:5c:8b:fd:83:
         31:6f:f5:f7:38:73:3a:bc:58:b2:24:0d:01:4b:0d:a1:2b:5f:
         9f:cf:34:61:a6:82:85:4a:b2:2c:3d:6b:7b:fe:bb:6c:19:db:
         14:4f:cf:3e:44:96:dd:8c:33:bb:2c:a8:cb:d3:41:6d:83:07:
         45:e8:59:1a:98:27:32:4a:be:2a:2c:7f:5d:8e:56:31:2d:56:
         47:ae:73:c3:f7:ab:92:da:e3:19:8f:0d:9f:1f:09:d7:cd:99:
         f7:93:0b:ad:93:cc:a0:3f:fd:a0:89:17:3f:fd:18:ef:ab:3a:
         73:9c:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:36 2026 by rpki-client