Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/672F451E5BC211F09CAEAB6BC4F9AE02.roa
File:                     672F451E5BC211F09CAEAB6BC4F9AE02.roa (raw, json)
Hash identifier:          t5jpWh+uK9IsiqZSI3a3TWKxR8GRgVyOI48hBs6jEB4=
Subject key identifier:   DF:0D:E4:AF:A7:AB:D6:6E:85:18:09:A8:1E:60:9F:0F:06:0D:20:77
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/672F451E5BC211F09CAEAB6BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:45:35 +0000
ROA not before:           Mon 06 Jul 2026 17:45:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154035
IP address blocks:        103.161.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63196 (0xf6dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:45:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be9bf-547a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:49:07:e1:d7:25:10:a8:9b:94:9a:6f:ac:
                    e3:75:dd:ed:f7:2c:95:55:6f:7c:c0:60:11:c2:82:
                    4c:f3:72:88:8e:6e:29:75:ce:9c:7b:c7:2b:c8:09:
                    b3:de:b7:d3:f8:50:4a:5f:65:bf:ce:19:1c:6a:a6:
                    f7:43:13:48:fc:d5:a2:26:02:6f:ff:1d:d7:6b:10:
                    af:c2:0f:3f:9f:2a:79:ec:35:7c:a3:3a:b3:bd:54:
                    05:04:c6:7e:89:6f:91:7a:09:8f:c7:d5:62:a4:ad:
                    e0:79:93:27:9d:ad:db:00:3a:c1:b6:d9:fb:04:03:
                    66:e3:a4:b9:62:f2:f6:ec:db:57:61:42:3d:f9:79:
                    99:8e:f8:5e:11:fa:64:01:c0:b3:d0:96:42:f6:1e:
                    51:89:73:38:99:56:05:76:9a:ce:e3:05:18:60:d9:
                    87:ff:c6:46:bc:74:b6:26:93:11:43:0d:54:96:03:
                    d3:ab:8f:8f:25:21:84:e4:fd:d0:74:24:61:74:b8:
                    91:6f:c4:c3:62:93:60:f0:c7:4c:f4:27:89:79:6a:
                    ed:3f:53:5f:9e:63:55:21:2f:b2:b5:5b:09:3e:42:
                    13:8d:52:4c:9f:72:fb:54:fa:03:ea:d6:37:fc:11:
                    24:7d:0e:30:d6:e0:cd:4f:5b:0d:c1:3e:d8:4e:7c:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0D:E4:AF:A7:AB:D6:6E:85:18:09:A8:1E:60:9F:0F:06:0D:20:77
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/672F451E5BC211F09CAEAB6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:dd:72:02:00:53:15:b3:dd:79:ba:2f:0c:a1:3b:6b:86:
         f5:29:e4:b4:79:07:7e:90:db:41:56:9e:da:3f:b0:8e:b4:87:
         6a:d2:b2:b2:fb:fc:56:61:13:7f:66:07:e9:31:44:8a:87:32:
         4d:05:01:f9:bd:cf:5a:29:27:e8:ad:ea:0c:c4:3c:e7:fa:29:
         0f:65:bb:02:10:88:e9:1f:a9:31:02:6e:6a:9a:66:03:91:c1:
         50:98:84:36:98:0d:b8:30:c3:e8:fd:7c:08:55:b9:e7:a7:8f:
         ee:10:1e:d6:18:4f:83:a4:3e:b5:dc:d4:7c:1a:30:01:42:5b:
         32:be:a0:25:b2:e5:cc:23:2c:f2:a3:64:28:2c:f8:a2:2d:cd:
         44:cc:d6:8b:03:ce:ac:e9:78:46:6d:0d:a1:af:40:de:76:9d:
         55:d9:90:0c:38:09:15:93:06:8f:e5:43:52:d9:d5:f0:a5:74:
         b5:6d:31:15:fd:7f:e9:de:f4:35:b5:b4:11:47:04:66:0f:64:
         4e:a5:ca:a3:ec:a2:42:d4:44:1a:a2:59:23:32:de:95:48:03:
         67:d6:73:33:7b:39:24:5b:eb:f6:da:62:67:17:43:86:49:e7:
         65:dc:d6:57:0a:8f:bf:f2:7c:ac:df:a8:de:e5:f5:cb:53:f7:
         4b:58:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:30 2026 by rpki-client