Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa
File:                     55F5D8044DAB11ECA32B1C1EC4F9AE02.roa (raw, json)
Hash identifier:          z4Lm/+ZOAAwYwBVIcw00xeXTB6YChx6gf0BrrqJoluw=
Subject key identifier:   39:9B:5D:67:EF:22:63:D1:92:79:42:C8:2B:A9:B0:AB:60:DA:87:69
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F141
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:57:55 +0000
ROA not before:           Mon 06 Jul 2026 16:57:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137122
IP address blocks:        103.110.240.0/22 maxlen: 24
                          2400:a820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61761 (0xf141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:57:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bde93-4215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:f7:58:f5:3f:ad:12:ec:59:ba:b2:ff:dd:
                    40:f2:5d:af:3b:e2:84:94:51:2b:c4:4a:a0:c1:3e:
                    48:13:6e:19:5f:61:2b:95:f5:ec:20:95:41:0e:9d:
                    84:80:a2:21:36:a3:a2:99:68:ec:63:8f:db:5a:8a:
                    82:6f:05:5b:04:b6:76:73:10:48:26:63:72:9c:e8:
                    24:3e:db:08:ef:89:cf:1b:af:00:1f:d9:c9:30:50:
                    0b:8e:d9:8e:2b:fe:46:6c:5d:f6:e4:1a:74:1f:5e:
                    4c:d5:dc:44:57:b6:b9:bd:d9:71:62:01:dd:52:ee:
                    04:c8:51:5f:4a:44:55:d3:bb:50:56:3e:40:19:0c:
                    75:b7:ae:1a:d2:fb:d7:52:90:2a:da:ed:cc:9d:78:
                    76:f9:f2:b4:41:bf:93:4a:62:14:f0:bd:b7:41:4d:
                    c6:43:d1:9d:e9:68:2d:39:70:51:1c:a7:e9:b1:f5:
                    8e:3c:b2:0d:87:10:f1:a3:28:f8:79:80:96:69:e0:
                    b1:a2:99:d2:85:90:83:1e:11:ac:49:b2:f9:61:7a:
                    bb:9f:8a:94:8b:a6:10:36:24:53:6f:c8:04:57:45:
                    cc:77:75:27:fb:c3:0a:89:d1:e1:c8:73:96:68:49:
                    50:cd:86:df:d7:f1:36:ac:34:d0:47:ee:7d:e0:b2:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9B:5D:67:EF:22:63:D1:92:79:42:C8:2B:A9:B0:AB:60:DA:87:69
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.240.0/22
                IPv6:
                  2400:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:5c:c7:12:c3:ea:e3:e2:3c:02:41:70:77:2e:0b:8a:58:
         44:e8:ea:fc:fa:cc:a4:0a:b1:ba:1b:9b:8e:32:99:3b:1a:92:
         0e:c9:2a:fc:b5:3d:0e:8c:cf:c0:8f:f3:fa:94:d9:33:37:9b:
         13:16:4e:66:c2:a6:c6:cc:37:f3:c5:88:c4:ed:cd:a3:51:26:
         68:c1:de:f9:a0:93:2d:56:11:bf:7a:25:11:e5:62:ea:24:04:
         e7:14:5b:d8:cf:fe:6a:db:56:9c:10:a7:76:61:ff:d7:4e:0b:
         8c:e6:1a:04:01:58:8a:23:f0:9c:47:c0:17:e7:79:e7:b3:1c:
         97:49:62:58:f6:6e:a6:92:7d:5b:17:c9:ea:a3:bf:52:be:d3:
         30:f6:e1:b6:b5:8b:9d:58:e0:9c:81:bf:39:10:28:7f:5b:f7:
         01:9d:42:f9:29:cb:9a:4c:0e:52:75:70:c2:50:15:90:4b:66:
         30:31:be:e2:4f:a8:da:51:8f:cd:18:07:0c:32:6e:4d:f1:f6:
         59:61:97:66:76:ae:8b:92:0d:2e:d3:81:e0:ee:e4:1c:ef:58:
         41:0f:32:9f:86:0d:33:ed:c6:ff:ff:af:89:1d:1d:2d:3f:ef:
         7c:87:1b:25:46:7a:00:3a:a0:d2:97:1e:88:d7:bc:15:2b:38:
         c9:4d:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:52 2026 by rpki-client