Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/570677B8625411ECB5151412C4F9AE02.roa
File:                     570677B8625411ECB5151412C4F9AE02.roa (raw, json)
Hash identifier:          p+N7CdmcvfxcnHDdZj85VTXAvUNluXCO/eFdv+3qoL8=
Subject key identifier:   35:97:26:89:AF:4E:72:07:E0:0C:86:F9:43:89:1C:E2:73:CB:98:BE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F0CE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/570677B8625411ECB5151412C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:54:08 +0000
ROA not before:           Mon 06 Jul 2026 16:54:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136625
IP address blocks:        103.98.156.0/22 maxlen: 24
                          103.177.31.0/24 maxlen: 24
                          2401:27a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61646 (0xf0ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:54:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bddb0-4451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:1c:82:bb:bf:7d:59:54:09:63:d7:df:6c:
                    16:4e:94:07:6a:c2:ae:bc:cd:b2:5e:ef:c7:31:a4:
                    3e:0b:01:4c:58:1d:01:60:56:cb:66:42:20:c4:54:
                    b0:4b:b3:1b:f5:71:a5:27:a4:4b:5e:d0:59:5f:ef:
                    b3:8f:19:81:5b:01:ea:08:4c:de:21:7b:78:8b:e8:
                    1f:8d:57:27:87:a1:7f:28:aa:39:fc:2d:f9:ca:76:
                    01:a7:87:67:ff:e5:4b:2c:a0:d1:dc:6a:09:ae:72:
                    c1:9b:e6:1c:10:1d:1b:85:dd:c4:2c:e1:a5:6f:7c:
                    19:b6:f4:e8:b0:15:79:b7:67:40:c3:ab:c8:8e:d5:
                    15:b4:f1:d6:8b:71:2d:12:12:07:22:6d:87:5d:26:
                    3e:ab:b0:e8:ff:4e:52:d5:cc:f7:21:d8:20:5d:4a:
                    8f:b2:ac:ac:13:b6:43:ea:0c:0c:4a:2d:eb:50:70:
                    35:93:52:11:53:bc:f9:79:9f:9d:83:45:37:8d:2f:
                    ca:4d:dd:3d:82:82:ea:ac:02:3f:48:fa:3b:e9:35:
                    20:29:69:8d:6f:e8:b1:90:2d:fc:7c:7e:54:ee:c3:
                    aa:9d:ed:9e:98:17:ae:d8:f2:05:3f:cc:bc:b8:89:
                    87:e1:db:51:b1:83:55:81:c9:8f:30:8a:fe:d2:ae:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:97:26:89:AF:4E:72:07:E0:0C:86:F9:43:89:1C:E2:73:CB:98:BE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/570677B8625411ECB5151412C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.156.0/22
                  103.177.31.0/24
                IPv6:
                  2401:27a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:85:c9:c1:2c:a5:ff:70:b1:dc:12:28:0c:d7:a7:2e:34:fe:
         c2:6d:3f:47:c3:75:26:06:73:e5:05:11:8d:77:a9:84:15:fa:
         04:e5:f4:ee:7a:ba:d1:79:11:59:b1:f1:9c:e3:3e:40:55:5c:
         19:32:df:c3:d7:67:a0:81:40:56:1e:3f:4e:62:1e:c6:3e:df:
         bf:11:24:71:51:6f:b7:a9:56:4f:8c:7b:4c:67:2b:dd:7f:4a:
         98:77:80:6b:97:84:a4:1b:8a:05:52:b6:01:6f:fc:93:27:bb:
         c2:a8:86:d5:bb:1d:19:0d:84:50:fe:f4:e2:c5:80:61:ce:55:
         94:e5:32:20:ff:ea:aa:db:6e:ee:d6:ed:d2:f1:b7:1e:c2:94:
         64:dc:b2:8a:e1:14:a6:89:de:89:be:e4:5e:1a:e4:1e:93:d7:
         ad:08:fe:bc:09:31:fd:e7:a3:61:45:cb:5d:28:37:6d:a5:5b:
         cd:1e:94:3d:a1:ee:15:32:ee:70:c9:59:fb:4e:08:38:d6:37:
         5f:db:d9:85:48:e1:47:7d:c8:25:3a:86:87:6e:e8:a4:01:e6:
         a0:44:d3:4d:34:43:77:74:63:bf:7e:fa:b0:19:25:75:65:f4:
         5b:77:48:63:19:1a:26:eb:93:51:a2:04:bc:f3:1f:15:07:9e:
         7a:c3:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:48:18 2026 by rpki-client