Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F24360E543D11EC986FD119C4F9AE02.roa
File:                     4F24360E543D11EC986FD119C4F9AE02.roa (raw, json)
Hash identifier:          0iT5obyCvpjQKuEYhWyH/k7CCjfEIPmr4z9+CiOI5tw=
Subject key identifier:   26:F6:2A:7C:C3:A0:CF:BE:69:EF:46:0B:D3:80:4A:50:7C:E1:94:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F420
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F24360E543D11EC986FD119C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:22:35 +0000
ROA not before:           Mon 06 Jul 2026 17:22:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146918
IP address blocks:        103.172.9.0/24 maxlen: 24
                          2001:df7:5a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62496 (0xf420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:22:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be45a-3b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:d2:4c:c1:66:32:f6:04:89:93:7a:01:7c:
                    20:a2:69:34:d2:d0:b9:50:c3:97:a2:c6:6e:3a:58:
                    65:e7:32:d9:17:48:ee:e1:7c:da:d6:65:0e:5f:fc:
                    65:25:20:74:7f:4c:91:ad:d2:8e:93:cd:ab:f9:a9:
                    e3:67:01:63:74:b2:1d:22:9c:0a:8a:3a:26:6e:ba:
                    6e:63:11:b3:2e:b5:bf:54:1a:3c:44:65:ce:61:25:
                    bd:47:48:80:ab:e3:12:f0:ff:c9:3e:10:ac:ca:47:
                    7d:fc:2b:83:1b:f0:d8:67:cd:76:bc:15:87:e6:16:
                    b2:70:2c:0e:3c:71:34:fb:95:6f:d4:5e:b0:b6:1b:
                    ca:51:c8:45:74:be:ce:74:82:c1:76:f2:f7:97:93:
                    f5:18:8d:e5:e9:40:92:24:9b:67:81:aa:8f:1d:ce:
                    c3:96:1d:b4:21:61:7b:57:e3:4b:82:21:b4:6b:b4:
                    f1:f7:04:82:72:cd:86:ef:ba:6d:53:e1:e4:ea:e8:
                    db:8d:c6:69:c7:36:38:e4:c4:ab:98:55:2d:f6:3f:
                    33:e9:d6:69:97:cc:b5:59:2a:37:89:fc:6b:57:20:
                    2c:36:c2:58:41:d5:b5:f5:53:3f:98:ba:87:f6:58:
                    d4:91:db:09:e2:bf:0a:df:98:bd:ad:63:dc:a6:80:
                    f6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F6:2A:7C:C3:A0:CF:BE:69:EF:46:0B:D3:80:4A:50:7C:E1:94:BD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F24360E543D11EC986FD119C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.9.0/24
                IPv6:
                  2001:df7:5a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:d4:e9:c7:f1:3c:e9:49:b1:ca:04:ec:06:12:82:2a:00:ce:
         14:d9:d6:57:82:b1:1a:a8:71:d7:e4:ba:a2:5f:ab:28:0b:54:
         1b:a3:e1:e1:d6:f5:20:d4:24:49:75:a0:e7:c1:a6:01:73:e2:
         0a:e9:da:f1:d8:92:32:e2:98:1f:05:98:ce:74:0b:2a:70:e4:
         25:0a:55:cb:7a:86:4a:b0:43:df:00:ac:80:fc:43:c1:14:c7:
         d2:9b:d5:af:42:06:40:ff:0d:c2:1b:90:8c:d6:2c:b8:c6:3b:
         2a:f8:1d:dd:5a:de:7b:cb:f6:9b:34:b3:9d:52:41:48:5f:fe:
         c8:73:39:77:be:78:83:94:53:a9:e1:ef:28:b9:c5:5b:9f:fb:
         87:57:6c:9e:57:da:bb:b5:f5:8c:6f:89:8c:a5:b1:7d:9c:0e:
         97:eb:c1:89:78:bc:3d:df:4c:b6:27:20:2b:06:61:e2:2e:0d:
         51:5c:3c:4c:4a:b8:92:76:b3:da:49:b3:7b:c6:1b:d5:e2:09:
         66:de:91:e5:e6:79:a4:d8:38:1e:60:04:67:16:8f:28:cd:97:
         5d:82:e0:bf:b3:e1:0e:ff:35:77:3c:49:91:fa:99:a8:03:31:
         67:60:db:ee:99:41:70:07:a7:73:09:8a:62:5a:1a:32:5e:af:
         c3:a7:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:09 2026 by rpki-client