Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64BC11FCFE4A11EFA95F9073C4F9AE02.roa
File:                     64BC11FCFE4A11EFA95F9073C4F9AE02.roa (raw, json)
Hash identifier:          jTauIxQM80g82C//pypnOJvMnF4874n45Ju+yvJzKcc=
Subject key identifier:   86:38:8E:46:B9:88:F7:C7:1A:57:03:12:86:62:3A:26:82:18:04:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F25D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64BC11FCFE4A11EFA95F9073C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:07:15 +0000
ROA not before:           Mon 06 Jul 2026 17:07:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139524
IP address blocks:        103.142.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62045 (0xf25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:07:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be0c3-72d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:da:b3:3e:f1:60:be:81:c7:89:79:92:e0:20:
                    e8:a0:e7:57:56:f4:08:6f:fd:93:45:e5:3c:37:fe:
                    51:f2:bc:23:fb:a6:ef:0c:81:e4:53:37:f4:f9:9a:
                    11:7c:45:59:ea:64:a9:3f:b2:90:af:b4:00:98:20:
                    22:e2:40:a1:22:cb:87:9a:c5:35:30:95:a6:19:35:
                    89:a6:82:33:6a:3f:ed:99:b8:dd:09:01:c8:71:da:
                    97:f6:17:f4:11:18:8d:73:e0:3e:9e:e6:f6:76:c8:
                    d3:8a:d2:79:1b:e1:92:18:fa:e4:ec:5d:22:d2:ac:
                    d1:26:5c:72:b1:21:d0:2c:be:d1:1f:da:92:89:bf:
                    e3:ec:e4:11:5b:46:9a:73:67:41:77:aa:c0:a0:07:
                    65:c7:44:79:99:0f:9d:45:a9:47:d0:22:07:e5:49:
                    aa:17:fe:e7:37:db:b8:a6:b2:44:b8:97:06:63:90:
                    e4:9a:08:e3:36:fa:6d:47:31:52:9d:2a:e3:6e:7f:
                    5d:9a:5d:de:fd:a7:63:49:2d:2d:cc:6a:17:46:a8:
                    7b:6e:b2:c7:1c:4e:e2:59:38:9c:ae:dd:43:74:f1:
                    0d:17:b4:22:0c:36:4a:ba:12:0b:6b:f7:27:41:b0:
                    1d:b8:ca:90:51:81:5e:2e:91:7f:6d:c9:7b:3c:fa:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:38:8E:46:B9:88:F7:C7:1A:57:03:12:86:62:3A:26:82:18:04:BD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64BC11FCFE4A11EFA95F9073C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:05:2d:c2:57:37:2e:8f:ee:37:7b:35:31:20:84:8a:83:28:
         5b:08:22:8e:65:44:87:17:60:c9:88:09:b4:f9:34:3a:80:45:
         0a:99:02:1a:34:ac:36:61:e2:21:eb:11:9e:80:e2:d9:bb:13:
         ab:7e:1c:e3:0f:54:d1:05:cd:c0:1b:ce:13:33:71:97:14:3b:
         a6:81:03:8f:19:31:be:30:ca:10:30:a9:9d:9b:9c:13:be:62:
         39:3f:46:a5:3d:6c:77:c8:50:29:a9:e9:ee:4c:fd:c9:7b:ca:
         40:b0:fa:10:71:5f:24:c6:f7:cb:ff:ba:2b:dc:96:29:e6:9d:
         57:bb:3d:4d:fe:eb:dd:3a:fe:4f:66:cf:4f:75:ab:1e:0b:18:
         4b:3e:8c:85:29:d1:46:c1:6a:b9:39:71:a9:f7:41:03:22:eb:
         38:fa:3e:c1:24:a0:53:f2:51:47:26:92:0e:df:5d:6f:1c:f4:
         54:eb:10:d4:3f:52:15:b4:e0:e0:bf:85:33:dd:31:72:8d:7b:
         c6:d7:74:26:f3:e9:10:1b:4a:6e:d5:ba:5f:4d:83:e8:f2:cd:
         0a:ad:70:7e:a6:a0:52:e3:a6:4c:09:66:30:2a:ab:9b:f6:dd:
         18:eb:f5:ae:19:fd:a8:ec:37:ec:06:83:5e:a8:81:64:3b:cd:
         6b:0e:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:43 2026 by rpki-client