Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa
File:                     4807C25C4DA311EFA08DD544C4F9AE02.roa (raw, json)
Hash identifier:          BnmfKcuojdtnFj823xpjJnJeQd7MNqLl3Cag0LWlmH4=
Subject key identifier:   04:E1:38:B9:ED:BB:2D:4A:96:59:0B:FF:D1:CB:59:E6:FD:5C:BD:93
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F220
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:05:18 +0000
ROA not before:           Mon 06 Jul 2026 17:05:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138766
IP address blocks:        103.129.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61984 (0xf220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:05:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be04e-1e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:cd:56:72:0d:4d:f1:16:ff:d3:36:4d:a6:
                    ee:25:98:63:ff:0f:14:e2:6a:88:0d:94:a0:28:85:
                    ad:e0:8f:19:26:54:6a:dd:29:ae:86:5f:6d:d1:32:
                    39:68:8d:10:3c:5f:8e:2c:28:66:ba:25:fc:56:89:
                    8a:be:1c:0d:43:97:90:50:67:bd:ee:bb:9f:10:f9:
                    5d:c8:44:24:3d:6a:90:da:01:d1:23:66:13:03:bf:
                    f6:ef:07:74:c5:84:66:a0:0e:40:dc:68:c3:76:a1:
                    f4:14:33:4f:24:52:bd:0f:79:0b:e4:e8:89:fa:d5:
                    63:73:be:4f:4a:77:d0:17:36:b3:1b:85:47:6b:3e:
                    bd:70:5b:59:03:06:d9:dd:fd:2f:73:8c:e7:42:35:
                    64:92:c2:28:76:ff:9c:74:ec:27:e0:3d:6f:cb:b0:
                    3c:c9:d3:6e:f7:9e:a8:19:f0:5d:ae:85:71:77:25:
                    17:7f:fd:21:e8:a9:65:46:f6:1f:bd:6a:86:61:bf:
                    c2:31:f4:af:d2:7f:0f:db:16:3b:93:d7:5d:41:fc:
                    4c:b5:90:34:3f:9e:9a:df:f2:f2:9d:c2:a5:3c:0b:
                    e7:75:b6:d2:de:3a:04:c1:e7:58:72:a3:d8:6c:79:
                    c7:16:ea:c0:74:1d:f9:b9:32:6e:b4:32:10:40:c3:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E1:38:B9:ED:BB:2D:4A:96:59:0B:FF:D1:CB:59:E6:FD:5C:BD:93
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:6d:0b:ec:f9:25:ae:00:fa:aa:c8:34:38:95:c2:53:31:
         73:21:50:56:53:c1:50:25:55:b3:b5:c8:e2:4a:48:6a:84:71:
         11:e5:40:ae:2c:99:eb:dd:97:20:41:8f:c9:08:3c:b0:ff:1b:
         97:32:7d:14:4f:69:83:e6:dc:68:f6:e6:08:83:46:a4:08:ad:
         13:20:6c:07:f8:86:ed:bd:b0:3f:5d:7d:2d:34:cb:9c:9d:ca:
         e9:59:38:0f:6a:a0:f9:5c:d9:9a:eb:2d:22:09:6d:5e:78:01:
         fe:3b:d4:4c:b1:0e:dc:3c:1b:5a:20:76:a3:43:e0:f1:8b:30:
         af:5c:52:86:2d:57:4a:f4:87:1c:23:21:4d:88:c6:62:b6:2d:
         28:74:ed:e5:f0:3d:c7:30:79:b8:75:10:93:a0:f2:2d:ca:34:
         4a:a6:6d:a5:89:7f:6b:7f:e0:ed:a8:df:68:a6:85:79:f5:1c:
         56:65:45:0f:ef:46:b7:cb:f2:2b:f1:a2:15:40:d6:75:48:3a:
         18:3f:7d:05:8c:85:04:00:fe:24:14:2e:df:28:b0:68:19:b6:
         ef:ef:59:db:65:f9:de:1d:e1:b3:85:58:ff:80:d3:7f:5d:d3:
         38:65:5b:f5:dc:bf:a0:18:a8:e5:bb:b7:8c:8c:72:b0:14:42:
         23:93:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:48 2026 by rpki-client