Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E4864449C5F11EB8D550436C4F9AE02.roa
File:                     4E4864449C5F11EB8D550436C4F9AE02.roa (raw, json)
Hash identifier:          2+1O8dBn4omde7dw6bLtcpxeWxqdIzjpxX0paRjwbuo=
Subject key identifier:   C8:AD:31:2C:5A:59:EB:6C:1B:B2:7D:A0:84:02:2B:56:28:56:6A:7F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F309
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E4864449C5F11EB8D550436C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:13:04 +0000
ROA not before:           Mon 06 Jul 2026 17:13:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141323
IP address blocks:        103.157.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62217 (0xf309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:13:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be220-0d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:c1:2f:77:7b:24:51:8d:2f:14:c6:2b:e2:
                    0f:28:cf:f0:26:01:e4:93:b8:f6:e9:4b:4e:dc:00:
                    13:65:79:28:38:83:53:9d:f9:84:01:0b:08:1b:cd:
                    dd:6f:97:02:d4:ae:f5:df:37:b1:92:cd:0d:bd:ee:
                    7e:94:7a:bd:a0:ee:b9:0f:cc:90:f5:36:85:f0:08:
                    9a:ac:65:9b:1c:2b:6f:0e:ab:50:34:40:3d:02:4c:
                    12:4f:bc:d4:0a:74:5d:73:93:b5:92:11:9d:58:c1:
                    8a:15:96:81:83:c9:96:b2:18:ae:71:65:1b:e6:f2:
                    ad:a3:63:8b:25:66:99:c3:bb:86:b8:a8:19:04:2f:
                    b3:41:d7:70:0c:fa:48:98:1b:4f:81:ed:32:40:7d:
                    05:47:e4:49:72:70:20:ca:5c:90:0d:ba:83:e4:15:
                    f7:6a:2c:9b:e2:ca:7d:e8:14:26:10:32:49:08:ba:
                    97:e3:0e:52:03:e9:bd:95:13:6d:ff:ae:7b:57:1b:
                    56:3d:6c:9e:59:e4:d6:ff:94:65:e4:2c:29:a9:81:
                    aa:7e:e3:46:1e:25:f3:89:c0:a8:fd:09:49:4a:fc:
                    d6:0a:d9:8f:8d:c6:90:f9:6a:dc:45:86:77:4f:58:
                    b9:a1:ba:ea:10:7f:10:2c:34:02:70:dd:c7:cb:fb:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AD:31:2C:5A:59:EB:6C:1B:B2:7D:A0:84:02:2B:56:28:56:6A:7F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E4864449C5F11EB8D550436C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:a8:bb:60:2b:64:d6:c3:40:fc:8d:ab:7d:2f:61:b7:74:
         46:e0:22:fe:5a:f0:9f:4f:fe:3d:b3:ff:cd:db:a1:4b:74:be:
         7c:54:6e:39:45:88:34:0d:63:57:3b:20:1c:8f:0a:f1:ac:cb:
         30:e3:da:92:16:42:de:db:63:dc:44:f8:98:a2:3d:80:fd:1b:
         8e:73:e2:63:af:2e:6f:d7:82:83:61:6a:68:b1:a0:de:13:5a:
         93:dc:f2:0a:09:4e:4e:2a:0e:33:3d:33:e1:61:37:6d:90:33:
         97:59:eb:57:68:5c:33:be:14:a9:a7:91:05:de:00:94:c3:8a:
         2f:4d:a7:76:70:df:96:3d:7b:af:ae:d5:9d:c7:64:7c:7c:c5:
         30:38:d2:c0:7b:b0:8c:ea:89:1e:bb:e5:09:da:06:4c:f1:48:
         f3:58:a1:da:7a:c8:f1:34:1a:f8:7c:f3:5d:f4:73:7d:90:ec:
         a6:d7:15:34:6f:b5:6b:cf:91:bb:b0:f3:c8:fd:4f:fd:d7:8a:
         b6:21:fb:10:4b:7e:80:0a:4a:57:26:f6:d2:07:b8:0b:56:34:
         8b:58:0b:d5:73:e2:53:ff:4c:df:05:9f:b2:06:c1:5c:60:aa:
         26:77:ec:ff:42:3b:9f:c7:e3:c4:21:d4:ff:75:0c:d9:da:a0:
         4e:6b:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:59 2026 by rpki-client