Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
File:                     693EEC340FB711ECA0E62853C4F9AE02.roa (raw, json)
Hash identifier:          YKnEGXKYEmF/4+qlKPupWt+c27o6sx2B7p626ck2dSM=
Subject key identifier:   56:D7:06:D2:A8:A9:F9:8E:86:A7:92:36:F9:A5:EB:FC:45:5E:BC:C3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3ED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:20:48 +0000
ROA not before:           Mon 06 Jul 2026 17:20:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142533
IP address blocks:        103.169.250.0/24 maxlen: 24
                          103.169.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62445 (0xf3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:20:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be3f0-653e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:a6:be:ea:3c:43:57:a2:13:20:a1:75:03:
                    26:34:eb:21:43:5f:2a:b2:b7:83:2d:8a:75:0a:c9:
                    0a:8f:7b:f9:21:9a:d1:be:7b:e1:96:b0:a4:6b:19:
                    f4:42:9a:32:aa:73:16:67:0b:c0:22:b8:bf:fb:c5:
                    65:2d:88:e8:33:27:c4:e3:88:54:c6:d2:81:68:b9:
                    85:83:bc:4a:23:a7:c7:d1:94:3d:9e:cc:11:c5:5a:
                    03:87:a3:45:ee:9d:64:ed:45:31:81:cc:e1:b7:18:
                    e3:55:7f:fb:0d:53:30:dd:d9:cd:0a:b4:05:c8:f0:
                    f1:23:ce:51:cd:9d:65:b7:73:45:da:23:17:9d:66:
                    af:cd:a9:30:c9:f2:9d:87:a2:b5:79:19:bf:e2:08:
                    9a:a1:f4:13:05:e6:45:d2:73:51:3f:87:22:05:ec:
                    a8:89:5d:90:5a:95:bd:e9:a3:61:61:06:8f:00:71:
                    92:0d:85:d2:f7:52:31:a3:af:57:03:bb:da:00:62:
                    24:71:50:7f:10:83:7a:86:e7:30:dc:fe:db:23:7e:
                    35:e5:b1:a9:cd:42:cc:ca:e6:59:54:94:cd:15:80:
                    3a:f9:42:a6:de:3c:22:a3:0f:d7:e2:63:ca:7c:89:
                    91:c7:84:a2:d2:12:d2:74:c5:1a:b4:28:ba:63:69:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D7:06:D2:A8:A9:F9:8E:86:A7:92:36:F9:A5:EB:FC:45:5E:BC:C3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:0e:d6:91:33:d0:07:46:a3:2c:cb:a4:52:07:0a:5f:0e:b2:
         5d:99:bf:3b:d2:4f:51:8b:83:e3:f9:74:db:ae:b5:2f:26:72:
         d7:d4:57:a9:f0:25:08:31:0c:1d:e7:9e:65:93:cf:05:f3:f9:
         55:4c:81:4e:20:02:2c:7a:3b:9d:e1:ea:42:c9:1b:00:ca:30:
         0e:7d:cb:60:d2:d2:41:da:0f:22:20:7d:91:7a:fe:1a:43:bb:
         4b:47:ab:91:4d:f3:c2:3d:d8:d3:2e:3f:63:a7:3b:9e:7b:f9:
         77:b4:60:ee:dc:75:51:07:0c:e6:67:a0:73:4f:35:75:90:01:
         77:cd:4b:26:fa:3d:20:d6:d0:fd:f5:02:38:13:9a:b0:39:d2:
         73:ca:e2:c2:e9:28:3f:55:de:5d:c4:6e:18:ae:fa:da:20:5a:
         65:98:ad:7e:86:fe:4f:46:e2:19:49:d0:25:6d:fa:ca:21:7f:
         62:7d:73:49:32:6e:31:b3:95:8b:ca:c1:30:9e:21:e8:8b:46:
         46:b3:b8:f6:89:6b:ac:20:71:b1:69:61:2b:c0:af:68:36:a7:
         ed:54:a1:dd:09:d2:a7:c8:9a:83:f2:14:81:05:3d:ed:04:ad:
         e5:52:bf:a5:4b:29:7c:d1:24:e4:96:da:4f:dd:64:a9:59:0b:
         e9:c5:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:41 2026 by rpki-client