Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/612239DEF38D11F094154AE4716F56BC.roa
File:                     612239DEF38D11F094154AE4716F56BC.roa (raw, json)
Hash identifier:          0r1X7WxhQJaq6pHLFAygYb9iPnFO0+K+w8gfRU7Pz8k=
Subject key identifier:   43:11:AF:B5:BE:3E:BA:13:F9:C0:08:CF:3A:09:55:61:F0:F8:FB:14
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F22D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/612239DEF38D11F094154AE4716F56BC.roa
Signing time:             Mon 06 Jul 2026 17:05:42 +0000
ROA not before:           Mon 06 Jul 2026 17:05:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138785
IP address blocks:        103.138.132.0/24 maxlen: 24
                          103.138.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61997 (0xf22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:05:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be066-8bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:74:14:67:d5:07:72:02:98:7c:c4:cb:f9:
                    f5:6e:aa:fa:67:00:2e:52:5f:f0:9b:a0:a6:e0:f5:
                    c6:4d:8e:56:b8:b8:50:aa:8f:e5:a0:f6:3e:53:ec:
                    79:60:de:53:90:48:be:75:63:5a:55:2f:f3:b3:cd:
                    24:86:0a:09:9a:19:5b:9d:d0:5d:6b:ea:a4:38:9f:
                    0c:8c:0c:a8:9d:af:3c:2c:84:4f:05:09:33:b1:74:
                    69:9b:1e:3a:c7:43:d3:de:01:37:78:17:23:cd:6d:
                    e3:b5:6a:10:59:04:d8:23:de:09:b7:ed:a3:15:4f:
                    86:32:a0:32:c9:c9:af:89:e4:2a:9f:19:8e:ef:07:
                    a7:b3:17:be:14:aa:76:1a:eb:49:e9:3b:f0:be:4e:
                    8f:8a:ad:1a:a9:a8:12:ea:90:fa:f3:9a:3d:3d:13:
                    29:4c:27:62:71:17:63:b6:e4:05:85:63:6b:cc:85:
                    88:84:aa:66:98:cd:99:6a:ea:d1:64:c9:c6:a0:e0:
                    7e:4e:13:4e:48:7b:5a:96:67:65:cb:11:b1:01:bb:
                    b1:78:e7:ca:c4:98:5a:bf:75:fa:86:82:f2:d2:f7:
                    b9:16:e3:ff:43:85:e7:00:ad:e2:69:b0:ff:14:c2:
                    27:24:4c:04:40:eb:6d:f7:88:58:23:67:6b:25:8a:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:AF:B5:BE:3E:BA:13:F9:C0:08:CF:3A:09:55:61:F0:F8:FB:14
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/612239DEF38D11F094154AE4716F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:3e:ef:8a:2b:f1:5e:0e:09:cb:ec:46:74:04:f7:67:b0:
         81:3e:e4:d7:09:ea:04:06:ed:cc:cc:5b:6a:e2:71:9f:3e:d4:
         91:59:be:33:b2:74:1a:a4:1e:b1:49:53:db:bb:c6:60:35:07:
         1f:1d:16:df:a8:cd:d7:15:1b:f3:ff:26:af:a8:25:2f:92:2b:
         04:d2:ef:34:31:ae:13:28:9c:de:cd:32:95:63:30:f8:f9:2f:
         18:96:b0:1e:ab:10:d6:c2:06:c7:5c:6b:9b:43:ff:f3:d1:d2:
         51:51:9d:f2:ca:ae:b2:45:aa:f2:be:8f:75:b1:02:42:14:66:
         fe:b9:b4:d3:2b:93:83:06:ef:25:c2:42:d5:1b:3c:0c:96:0d:
         78:96:7f:8b:3d:70:a4:82:ac:1b:34:0a:80:6f:ad:e8:9d:79:
         c6:01:81:b4:b7:6e:28:0e:3e:58:cd:87:6b:1e:a2:c3:4f:3f:
         08:17:f2:dd:89:94:5c:6d:29:6e:ee:89:42:36:3c:48:c8:b3:
         4e:aa:5b:ef:ec:04:21:e9:10:b1:44:38:3d:86:0e:8d:b3:f1:
         b5:79:8d:5a:ba:e2:e8:d4:a4:f7:87:ce:f2:2e:10:2b:06:4c:
         92:1e:54:22:bd:7b:48:23:82:13:63:03:4f:a0:17:21:41:c1:
         4b:ad:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:41 2026 by rpki-client