Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC3BF3AE00911EC8260F266C4F9AE02.roa
File:                     4CC3BF3AE00911EC8260F266C4F9AE02.roa (raw, json)
Hash identifier:          lnlVKG8JOdMILOS3xOtzUX1S3gjyL4TebEJlAChmlFE=
Subject key identifier:   09:31:A3:1E:86:01:60:EE:38:D7:D9:C5:0A:D7:1C:60:5C:F9:C1:10
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F45D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC3BF3AE00911EC8260F266C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:24:39 +0000
ROA not before:           Mon 06 Jul 2026 17:24:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147246
IP address blocks:        103.176.64.0/23 maxlen: 24
                          2001:df1:6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62557 (0xf45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:24:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be4d6-bffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:78:b8:bc:54:d5:ba:26:50:9c:ac:f3:bb:
                    33:a4:00:cd:1d:60:48:0a:0a:6e:c4:8d:f2:3a:57:
                    fa:1d:ac:49:94:d0:5f:05:de:c2:6d:21:56:88:b3:
                    35:76:68:99:46:f8:e8:47:df:c6:6c:03:63:74:66:
                    9b:67:73:06:f5:48:43:7e:90:cf:dc:b3:70:fd:ef:
                    46:c8:d3:33:56:a9:fe:27:ae:a7:75:47:ac:39:92:
                    cf:6c:f5:43:2f:3d:32:b3:b7:a1:27:54:f9:55:c2:
                    d7:1a:3d:40:ee:2c:c1:9d:15:c3:90:db:a0:32:9e:
                    76:9a:ef:6a:80:14:cd:36:86:1a:39:b8:8c:c0:34:
                    cc:f3:da:d6:49:6d:00:94:ce:21:8c:29:fe:b5:58:
                    8d:68:eb:a0:c2:66:24:67:ea:5d:f8:86:43:45:88:
                    a2:75:c7:42:68:c5:59:41:d5:8c:cc:75:c2:dd:73:
                    cd:c7:de:12:fb:9f:b8:96:a4:47:91:30:9a:aa:d3:
                    7c:2e:a2:35:3a:28:16:40:c1:65:b7:e4:d8:db:06:
                    0d:3c:75:47:84:be:71:9d:0c:86:87:b8:d8:b8:36:
                    8e:ce:5a:d3:8e:89:e5:a2:f0:1c:e9:a2:78:d9:06:
                    6b:bc:2c:65:89:9b:e0:bd:bd:42:9c:d3:73:27:fe:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:31:A3:1E:86:01:60:EE:38:D7:D9:C5:0A:D7:1C:60:5C:F9:C1:10
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC3BF3AE00911EC8260F266C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.64.0/23
                IPv6:
                  2001:df1:6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:05:72:4f:dd:12:5e:7a:5c:12:9b:ff:3f:72:11:92:10:ce:
         7d:e6:95:b4:08:6f:88:c3:cb:cd:0d:5a:79:8b:0c:24:82:6f:
         6b:8f:dc:0a:3b:be:2e:46:6f:6a:20:41:86:28:31:e8:b1:aa:
         11:f7:ee:e5:bb:46:a8:37:5a:aa:26:55:2d:7d:3e:b2:4b:8f:
         d8:a1:aa:2e:a1:22:fb:98:a0:62:ee:15:eb:39:e6:c5:dc:f1:
         8b:b6:c1:f1:95:04:c3:84:d9:9a:1d:39:d8:69:7f:a2:e2:c9:
         74:8c:98:61:b3:a5:c0:e4:4f:b1:40:c7:73:8c:0d:19:dc:08:
         d5:6f:3c:8c:5c:56:4e:f0:8b:a0:0d:5d:ab:a8:ff:f3:f2:38:
         2b:a4:74:91:22:78:41:29:10:c2:75:ef:f9:2b:37:da:60:d6:
         50:f9:a0:14:58:a9:4d:42:7e:d9:59:82:0e:db:5e:7f:6a:41:
         78:86:a6:71:15:8d:c8:63:2d:ea:40:71:2b:68:93:8a:23:0f:
         ea:cf:f7:a9:fc:8b:37:94:26:63:49:8e:45:2b:ea:5a:77:78:
         b0:43:86:88:05:1f:43:ac:95:1c:ec:37:3b:e9:f9:0d:75:c3:
         9d:fe:70:1c:e9:87:9d:59:fc:50:57:8e:bc:95:d6:8c:be:d5:
         e0:aa:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:21:17 2026 by rpki-client