Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F84AF863C011F097F8D159C4F9AE02.roa
File:                     53F84AF863C011F097F8D159C4F9AE02.roa (raw, json)
Hash identifier:          5Vyl9KP9nP7sNjNpHrUWRdXpF0JYAR3xvClc2sx5gjE=
Subject key identifier:   43:AD:96:D3:62:AF:E2:EC:C8:1C:CE:AB:1A:8F:2C:D2:55:8C:EA:DB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F265
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F84AF863C011F097F8D159C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:07:31 +0000
ROA not before:           Mon 06 Jul 2026 17:07:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139533
IP address blocks:        103.147.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62053 (0xf265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:07:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be0d3-5144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:bc:1e:2a:97:cf:70:42:23:2e:fd:87:f4:
                    89:80:24:42:98:6c:12:e9:a0:69:82:ad:a9:6a:02:
                    c5:e7:18:61:a2:eb:6b:16:d4:20:6c:b5:6d:1f:0e:
                    30:9e:bf:c0:d6:c5:49:12:f5:1d:af:6b:a6:49:36:
                    7d:f0:0b:3d:c1:b7:76:83:3b:74:c1:f9:3b:79:0d:
                    b6:e1:f9:05:da:72:63:38:14:26:06:2e:16:a5:07:
                    77:08:f2:a4:dc:e6:34:9c:42:b6:0a:5c:d4:0a:0c:
                    a8:96:8f:dc:26:16:1a:56:d8:c5:30:47:9a:d5:57:
                    e1:35:32:3d:bc:b6:40:5e:36:65:c7:50:92:9d:8d:
                    60:4b:48:ab:1b:8b:ff:ef:e2:c0:5f:e9:0f:83:26:
                    63:69:87:51:e9:f5:61:e7:8d:f5:1f:44:de:1d:30:
                    03:c0:96:40:9f:df:86:db:ac:32:f2:61:e6:64:d6:
                    0a:f2:0b:98:be:0a:0a:b9:f2:e2:cc:e4:9d:da:04:
                    1b:f3:b9:17:7d:55:09:0f:af:93:af:5a:b0:fe:58:
                    a1:25:91:c1:11:9e:a9:3b:11:b0:5f:39:0d:09:08:
                    40:9e:64:9b:f5:7d:d0:0e:66:dc:07:0f:81:38:35:
                    9c:23:52:6d:bc:50:cf:6f:60:14:2e:68:c7:2b:45:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AD:96:D3:62:AF:E2:EC:C8:1C:CE:AB:1A:8F:2C:D2:55:8C:EA:DB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F84AF863C011F097F8D159C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:89:aa:50:98:c6:9f:b6:18:be:f7:70:ff:fd:c7:c5:84:b9:
         80:74:51:19:c3:26:e8:ef:50:b0:48:d4:ae:e3:85:87:a8:16:
         a3:d3:0a:09:a0:cf:1e:34:70:6c:90:23:8d:c8:ae:87:2a:59:
         02:69:cc:bc:02:18:05:78:45:23:91:f5:77:bf:ba:64:7f:ad:
         45:51:a3:23:01:d7:c1:b5:c2:f8:57:8a:4e:3c:0d:48:f8:e7:
         ab:da:40:3c:00:c0:9c:b8:6c:76:ab:a0:a8:28:d2:9a:c8:8a:
         17:82:65:c2:2f:a1:18:1f:58:55:bb:68:ea:bb:cd:25:05:6c:
         50:04:e4:1b:a4:69:0d:d5:43:6f:0a:87:58:50:85:c7:9d:34:
         b9:fe:e8:23:61:98:bd:45:fa:3f:33:df:08:b3:80:90:b6:9e:
         5c:94:48:72:82:26:10:db:09:e5:88:63:1f:9d:ea:dc:b0:ea:
         9f:69:7b:e1:da:55:9b:bd:7a:2b:96:e2:72:e4:23:ec:a6:4e:
         0e:cb:9b:44:04:6d:d0:7c:d7:a3:c7:97:1e:e7:93:44:d6:13:
         b0:68:02:be:3f:f7:52:25:7f:b5:a3:8c:98:3f:09:fe:6a:9d:
         37:46:c1:e5:3c:a4:7b:b6:bb:a9:b4:a2:8b:85:f2:cc:e7:ea:
         dc:41:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:42 2026 by rpki-client