Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa
File:                     4AD21EE26FAB11ED99881F82C4F9AE02.roa (raw, json)
Hash identifier:          X5SdDcOUh4oucum5f4in6x20aQbKq1URmU85ELy6Ta0=
Subject key identifier:   12:D3:0C:28:51:6D:F1:6E:A8:4E:07:AA:3F:D3:F7:C1:5B:E6:B0:57
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F538
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:31:49 +0000
ROA not before:           Mon 06 Jul 2026 17:31:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150043
IP address blocks:        103.172.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62776 (0xf538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:31:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be685-d65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:24:55:8b:05:b0:ee:b4:c2:94:12:67:b2:8e:
                    8f:91:e2:6b:02:fe:19:8b:83:9c:37:2f:3f:c2:9d:
                    95:43:4d:da:6a:ba:ec:15:78:6c:25:81:67:0b:3d:
                    1c:47:59:b4:c2:2b:64:51:22:a3:a6:e7:fa:a1:af:
                    68:ab:2b:f8:e6:e9:f7:6c:ec:df:1a:f0:85:bb:d7:
                    14:18:cd:21:22:b3:04:d5:b1:d7:ca:ae:5d:53:0e:
                    bd:f0:ef:81:a0:07:ac:3f:01:aa:5a:a1:25:43:42:
                    53:43:cb:13:24:41:16:41:6b:d2:b0:dc:41:bc:76:
                    35:02:c5:04:3f:30:02:86:43:e0:f6:d6:b0:ff:57:
                    59:b8:0b:6c:20:83:b5:8b:08:47:c8:5b:cc:9d:f0:
                    e2:79:28:e8:3a:3c:16:2b:9f:11:fa:a9:73:b9:03:
                    34:2e:67:0a:dd:ee:58:e0:d9:31:f0:6a:03:2f:b0:
                    96:d9:81:f3:cb:06:a4:a1:1c:a0:92:f7:0b:05:da:
                    ad:6b:a4:46:0b:a8:a7:12:b0:9a:b1:5f:cb:d1:e9:
                    3b:97:47:e8:51:d7:5a:f6:f9:11:12:66:01:63:68:
                    4d:2a:54:ab:ba:5b:a7:ce:8d:96:1e:4c:db:f0:02:
                    51:bf:10:1e:26:01:ed:50:71:d0:29:0e:3c:ca:3c:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D3:0C:28:51:6D:F1:6E:A8:4E:07:AA:3F:D3:F7:C1:5B:E6:B0:57
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:fd:01:57:28:3f:74:68:2c:4c:c5:84:21:01:ad:d6:2f:87:
         71:64:9e:e8:3e:23:bd:58:8c:d6:85:3c:18:83:bb:cf:8f:a0:
         d4:58:b9:80:8d:09:93:4c:05:ca:d6:7b:c2:dc:08:a2:25:cd:
         cc:65:f1:32:7b:bc:47:30:22:59:29:08:d0:e6:af:2b:ad:25:
         84:95:61:d1:10:a4:1e:e8:d1:99:19:15:b8:be:f0:9a:91:24:
         04:57:c2:bd:8d:e2:59:04:9c:c7:85:8a:6f:b6:41:54:fe:d0:
         9a:38:ac:ec:70:65:52:6b:14:b1:28:11:08:c5:28:1e:4c:de:
         18:ef:0a:72:8c:81:6e:0d:77:87:1b:14:41:d5:f3:bf:fa:70:
         eb:8d:63:6e:1b:40:48:e9:9a:ec:9e:0d:f4:db:5d:8c:0f:04:
         b9:b5:d7:cf:c2:d1:08:df:d0:6b:40:a4:a7:48:36:58:98:44:
         a8:7c:e3:4f:3d:b6:5f:ad:ff:2a:a0:eb:80:d3:f8:47:d1:bc:
         de:48:32:5e:a9:c3:af:f4:37:39:69:a5:db:91:63:c6:15:e2:
         d1:e1:a6:6f:c2:e7:84:77:d7:eb:08:86:2a:90:e0:41:a9:4b:
         c8:a3:a8:1e:09:d0:22:03:30:24:1c:55:43:52:04:90:b6:3e:
         20:26:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:28 2026 by rpki-client