Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/665BAC6603FD11ECB110142FC4F9AE02.roa
File:                     665BAC6603FD11ECB110142FC4F9AE02.roa (raw, json)
Hash identifier:          /jLOPKE3ZkXw5REg8aK4dbrZPg++gMBXwu4ZI2GqAVk=
Subject key identifier:   7A:AE:B2:F3:75:FA:7A:39:EC:D6:C2:53:DF:82:9C:52:59:C0:96:ED
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EF81
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/665BAC6603FD11ECB110142FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:43:23 +0000
ROA not before:           Mon 06 Jul 2026 16:43:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134889
IP address blocks:        103.171.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61313 (0xef81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:43:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdb2b-b357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:c5:77:d9:67:61:67:b2:9a:17:47:13:c6:
                    95:e7:db:bc:a1:23:3b:c2:bc:9b:3e:f4:c1:3d:6e:
                    f1:00:58:57:01:3e:65:49:58:8c:28:2f:d1:c1:66:
                    51:89:04:1f:13:de:2c:f7:0d:77:2b:60:ea:c7:60:
                    e3:8f:23:46:fa:e7:3d:9c:7d:b4:1c:39:ce:26:ce:
                    df:29:3f:a7:ce:08:6b:bd:11:28:fe:1d:9a:49:90:
                    73:4c:9f:91:c0:ac:4a:b9:16:2f:30:9f:78:8e:d0:
                    cc:1c:a4:70:d2:d7:ee:a8:37:75:65:cd:b8:6a:9e:
                    05:ce:6e:cf:2d:21:70:44:54:3d:3a:d1:d1:be:35:
                    e1:1a:41:cc:ac:45:94:3e:0f:c3:34:37:0d:ef:ac:
                    f7:1e:b6:14:8c:8b:05:af:5e:ea:d0:b3:26:2c:9c:
                    b2:53:be:2b:4f:6f:8c:a5:95:8c:44:4f:5a:4c:c5:
                    6e:88:29:21:df:16:a9:b2:5c:a5:20:91:08:f2:62:
                    2c:2f:36:dc:96:fa:d4:c7:3a:6b:44:49:8e:66:e0:
                    25:cf:f7:a7:46:38:44:ad:45:3b:33:ea:46:f5:20:
                    df:f0:98:9e:d7:48:0f:cd:03:2b:e1:93:13:12:72:
                    a0:26:4e:6f:15:62:01:c9:7c:74:91:d4:33:38:36:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AE:B2:F3:75:FA:7A:39:EC:D6:C2:53:DF:82:9C:52:59:C0:96:ED
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/665BAC6603FD11ECB110142FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:e7:45:8d:4f:e4:b1:6b:7a:6f:da:5b:66:95:29:49:4b:
         e2:8a:ac:0d:b6:40:be:2e:d6:93:6c:4f:a6:c1:6e:15:01:ee:
         96:ff:8b:ea:78:37:98:ae:f9:61:a6:0a:f6:2b:c4:b3:35:76:
         ba:1f:ef:9c:e3:fd:1d:ad:d2:16:ad:80:37:0e:90:4d:cf:70:
         0f:3b:d4:6f:a7:34:21:57:60:47:ee:fc:52:cf:07:82:e0:85:
         0b:dd:32:38:ad:09:63:94:70:15:a0:81:d9:b3:25:1e:cb:ea:
         38:7b:97:bc:81:b5:7e:b2:4d:9e:cb:02:5d:b4:46:bf:b1:ae:
         f2:d5:46:9f:06:dd:2e:b0:b7:db:59:1b:ce:ee:e1:f1:dc:20:
         de:73:bf:ef:32:59:e2:78:ee:70:99:58:42:e9:f4:92:df:95:
         1d:34:d1:81:29:fe:f4:95:48:c5:6e:16:03:1e:ec:f2:f5:f3:
         be:70:94:f1:07:12:aa:92:87:61:53:88:bd:40:e4:b3:09:d8:
         66:5f:f5:95:16:0b:92:1d:14:c7:49:f6:d9:71:7f:77:b9:5a:
         75:cf:99:84:5b:ef:65:2c:9a:19:fa:a0:07:fc:56:d2:7e:0f:
         43:8b:18:09:43:81:49:eb:7a:b0:a1:7f:e0:6d:64:f7:ac:e7:
         55:54:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:50 2026 by rpki-client