Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56B03810A3AF11EDB0DF814CC4F9AE02.roa
File:                     56B03810A3AF11EDB0DF814CC4F9AE02.roa (raw, json)
Hash identifier:          c9lt5ikN+cCqzrzVmrTIaA8dmjnMLdWoqfVm05hCo0w=
Subject key identifier:   8D:00:1C:BF:E1:42:1A:EE:3E:FB:8B:F0:47:13:F4:6D:D9:39:50:7A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F163
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56B03810A3AF11EDB0DF814CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:59:01 +0000
ROA not before:           Mon 06 Jul 2026 16:59:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137168
IP address blocks:        103.187.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61795 (0xf163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:59:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bded5-c69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:35:55:50:ae:4b:cb:13:a7:2f:cf:71:30:
                    3c:11:54:34:e3:53:83:3c:be:da:9b:b4:01:8f:53:
                    ba:67:d8:1c:75:22:17:d6:d0:30:c0:7b:7f:21:6c:
                    6d:81:35:95:d1:9d:04:97:f1:ba:27:ba:0d:03:d2:
                    08:55:f7:72:11:9b:a3:40:e4:7d:bf:7a:7e:4b:52:
                    a2:d9:d2:a8:62:b4:4c:38:99:a3:8f:7b:ac:bb:22:
                    8f:c6:60:8d:46:6b:ec:6a:98:14:8c:25:2e:c2:bc:
                    b6:56:ec:fe:eb:87:65:92:08:ff:c5:48:b7:fb:33:
                    cd:40:f7:9b:37:c7:32:08:58:91:63:76:51:12:f5:
                    ef:06:42:c6:ee:bf:bd:b1:07:20:50:15:34:fc:87:
                    cc:d2:54:9a:02:67:fd:ff:69:9c:16:5a:6d:1a:df:
                    95:cc:73:61:86:70:4c:dd:9a:aa:ca:49:9d:9d:a6:
                    4b:d0:b9:9f:32:c0:7b:b6:aa:fe:06:62:ab:9c:08:
                    e9:ab:63:0c:24:3c:e8:b4:83:d5:e5:a9:2d:f1:87:
                    e5:45:6d:79:f1:18:08:7e:52:b1:7f:52:3b:b3:9a:
                    78:a4:6e:99:90:9e:fe:4c:40:e7:35:83:4c:ef:48:
                    eb:65:b9:e1:a3:2e:6e:90:be:c6:f4:d8:88:64:db:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:00:1C:BF:E1:42:1A:EE:3E:FB:8B:F0:47:13:F4:6D:D9:39:50:7A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56B03810A3AF11EDB0DF814CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:12:f6:83:b9:3c:4e:dd:0e:5e:1b:bb:98:33:e6:4f:22:
         c7:a6:17:8e:e4:4f:55:fa:04:b2:5d:13:1a:71:22:3e:fb:8b:
         ef:db:27:30:4d:73:81:70:08:6a:88:ee:02:c4:41:a2:0e:70:
         0c:1e:ea:29:89:d9:89:ae:a5:21:2d:75:5c:cd:e9:bf:84:16:
         64:0c:94:b0:a6:87:c9:db:35:d7:22:ba:16:ce:4b:ae:86:c5:
         36:d0:76:d8:e7:ad:bc:51:36:ad:1f:45:4d:dd:4c:e8:8b:43:
         c0:f7:ab:6a:5b:0b:4f:c6:57:eb:7f:f6:da:c7:1c:9e:4b:bc:
         88:df:d1:31:ba:1d:bc:6c:0d:6d:2c:c1:7d:5f:5b:a0:31:46:
         c0:ae:e3:2f:29:37:9b:65:68:d8:b8:20:f6:a7:3d:90:23:89:
         49:5e:77:42:36:c1:55:9f:69:52:71:40:1d:1d:d9:93:f4:1e:
         8f:08:c2:58:15:ec:8a:9e:5f:6b:a0:71:cc:b7:6b:41:63:d1:
         8f:13:28:cd:54:0d:72:68:55:a6:d4:56:64:47:b8:79:54:e6:
         4c:a0:1a:82:b9:3d:12:33:f6:ab:4c:03:f8:c3:04:66:7d:b9:
         22:23:6f:f8:25:c7:a5:18:68:e3:d2:b6:27:76:31:61:63:64:
         07:50:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:51 2026 by rpki-client