Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/616C73B8BDCF11EA8755D90DC4F9AE02.roa
File:                     616C73B8BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          yfdaDAnSPa80Fhat6nNogDzqnhyWfKn9z1rnl8VT6EI=
Subject key identifier:   63:74:B8:09:2B:96:E7:66:D1:00:8C:A3:95:DA:F6:D4:24:95:71:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F21C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/616C73B8BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:05:10 +0000
ROA not before:           Mon 06 Jul 2026 17:05:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138761
IP address blocks:        103.140.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61980 (0xf21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:05:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be046-2f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:6e:19:1c:ee:5d:a7:94:42:e0:0a:73:c5:
                    6a:7c:f8:4e:66:e4:f7:b6:8f:54:35:37:d8:1d:89:
                    02:5c:d7:3d:aa:77:d4:ef:0b:6c:cc:d4:da:73:78:
                    eb:85:dd:d1:e7:b4:1f:3c:46:27:fa:56:9d:89:6b:
                    b3:e8:da:1d:9d:ab:65:21:83:98:63:c7:24:23:e0:
                    e7:0b:f4:ea:61:cb:2f:2f:45:38:44:7b:a7:4f:35:
                    cc:4c:e2:25:e1:6c:dc:38:e9:0f:96:a0:e4:2b:21:
                    06:c1:e8:fb:2a:1c:74:09:72:de:4a:76:cc:0d:58:
                    c5:08:b9:a2:5a:02:0e:86:dd:7a:4b:3e:47:63:06:
                    6f:4f:ac:d1:ca:47:bb:a7:21:f5:f5:57:72:64:93:
                    71:57:04:a5:22:b4:fc:35:e9:95:99:2e:2a:c4:50:
                    44:e4:6c:0f:4a:a8:24:f9:98:55:9c:69:b8:28:49:
                    b1:40:81:fe:1e:31:08:11:d3:7b:58:5f:0d:18:15:
                    89:b6:8f:66:06:2c:e2:19:06:de:6c:ef:66:d6:a0:
                    23:56:a5:0c:20:91:98:70:66:44:54:40:0c:2d:a5:
                    bf:26:29:8e:3a:19:6b:b4:19:98:ba:37:4c:18:4b:
                    94:e1:b9:92:87:c6:db:26:a1:59:da:b6:ca:e1:8c:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:74:B8:09:2B:96:E7:66:D1:00:8C:A3:95:DA:F6:D4:24:95:71:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/616C73B8BDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:cf:63:ec:e5:79:fd:88:fc:a3:1b:1d:b7:90:d2:c8:24:
         b5:0a:c1:a3:cc:3c:0b:34:62:d1:e6:3e:7d:09:8d:58:7a:ca:
         d4:71:22:42:99:0b:a7:40:4c:58:ff:b2:41:f4:6b:fe:b1:bb:
         8a:ef:1b:9b:f0:1b:11:10:dd:71:7e:4e:74:96:71:36:6a:74:
         af:a6:b9:7a:57:97:3d:22:d7:17:64:19:62:ad:38:ab:77:ac:
         c0:fe:67:56:0f:0d:48:85:b1:71:e2:2d:4b:26:61:b1:ee:2e:
         4d:98:6b:5f:f8:5a:27:66:67:9e:20:e8:b1:80:d1:41:64:a8:
         1d:c6:63:7a:7f:79:23:eb:0a:82:2e:b3:7d:ea:a8:b4:6f:10:
         ef:96:ec:2b:e5:a6:15:42:33:6f:64:f5:a0:85:e7:55:25:ff:
         4a:d9:f3:90:74:21:e0:c9:6c:29:e8:22:a9:6b:51:c3:09:f9:
         8d:f0:c8:d5:ad:6f:18:35:3f:e6:8a:88:34:80:2d:e1:29:05:
         de:35:e3:fa:a1:52:3d:ac:0b:c2:27:53:18:64:2e:d8:f9:e8:
         2b:b9:8f:c5:74:60:51:87:d2:7f:05:cd:36:d5:0b:f9:a8:0c:
         24:c5:11:b0:f9:17:c6:b4:6f:c9:e2:33:8a:b9:5a:cf:79:a4:
         b4:0d:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:46 2026 by rpki-client