Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64D66004BDCF11EA8755D90DC4F9AE02.roa
File:                     64D66004BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          JAz6rIJGYAyE6LYdIs+dDQuz5iC8e7SjoBFdl4ZwHPM=
Subject key identifier:   05:1A:C0:D8:44:75:04:0D:85:0E:FB:F7:13:DD:32:1D:6F:1A:69:DC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F23A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64D66004BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:06:08 +0000
ROA not before:           Mon 06 Jul 2026 17:06:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138801
IP address blocks:        103.140.254.0/23 maxlen: 24
                          2001:df0:e080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62010 (0xf23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:06:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be080-27da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:bd:f2:5b:53:ee:74:a1:eb:5f:46:c6:98:
                    77:e7:b8:10:0c:67:0b:91:bd:48:70:9c:31:c6:cc:
                    65:26:3a:33:eb:f6:26:02:68:83:67:15:d2:c1:98:
                    aa:32:61:ff:5a:41:a4:ad:64:38:60:df:2c:7b:04:
                    da:71:2e:75:8c:6b:3d:16:de:e9:c2:16:13:5a:59:
                    fd:b2:bc:28:a0:1b:91:6a:8b:57:5c:ad:9e:fc:57:
                    6a:4d:d9:80:14:2e:d4:9c:5f:31:fa:d8:b8:cd:8c:
                    24:21:ec:42:bf:ff:e8:8e:13:56:a0:1d:5d:a7:43:
                    39:35:13:02:52:23:5f:95:83:a5:3a:7e:6a:e5:78:
                    84:47:b8:48:c4:6f:4d:ca:c0:f0:aa:ec:8b:96:d7:
                    f1:42:13:5b:19:62:de:ac:f4:58:bb:d5:bb:0c:45:
                    72:ad:31:6f:86:74:c2:8c:95:1f:be:45:f7:70:a1:
                    b0:7e:1e:60:3f:15:aa:2c:99:94:20:8b:5e:a0:4a:
                    e8:a1:54:dc:d2:18:55:bd:85:dc:e6:33:38:cb:8d:
                    09:9d:ef:e2:b2:5a:88:5b:98:9d:02:5b:22:ac:bc:
                    bc:d4:56:34:f2:ac:bc:47:93:89:85:4a:94:73:04:
                    7c:6e:98:ce:5a:dc:56:dc:87:59:eb:bf:0f:1c:cb:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:C0:D8:44:75:04:0D:85:0E:FB:F7:13:DD:32:1D:6F:1A:69:DC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64D66004BDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.254.0/23
                IPv6:
                  2001:df0:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:a0:f7:aa:20:73:a2:5e:fa:38:97:02:a8:69:ad:34:bb:f3:
         49:40:b7:93:51:35:4f:60:a9:9a:4d:d3:46:2d:99:25:bd:7c:
         7a:76:c3:72:01:b1:a2:39:3a:cd:54:3a:75:a7:3e:4c:49:59:
         69:90:cc:1e:6e:dc:2b:f0:c2:74:3d:59:b8:56:16:f7:43:d5:
         c8:ff:74:cb:65:03:cd:d4:80:bb:cb:46:b9:0a:e5:9b:96:c3:
         62:5e:a1:34:b2:81:9a:dd:0a:05:fd:02:33:b5:26:12:a0:fb:
         3b:ff:af:2e:b7:fb:7e:02:55:9a:26:8a:b4:c3:e4:7f:1b:7f:
         13:38:24:48:55:ee:06:4c:25:dc:ca:f9:7c:e6:b5:35:6a:8a:
         bd:86:c8:20:17:8e:27:6a:1c:47:61:84:69:f4:64:ff:f9:4c:
         61:50:ea:a2:a0:1c:af:da:8c:d5:e8:59:b5:43:0b:c6:4b:e1:
         c7:b3:f5:de:02:5c:75:fa:70:62:dd:05:54:70:0e:fb:56:05:
         40:98:a0:62:e7:2b:b8:0e:4e:9f:1d:1a:5b:8a:33:5b:32:c6:
         4f:4d:a3:1a:d0:61:14:75:60:1c:c9:4d:ad:e5:57:b8:d2:42:
         1f:c7:7e:bb:4a:bd:53:ed:fc:db:03:25:11:93:3c:ac:12:b5:
         ea:da:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:08 2026 by rpki-client