Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D63A5D2C45F11F0B50E6E32C4F9AE02.roa
File:                     6D63A5D2C45F11F0B50E6E32C4F9AE02.roa (raw, json)
Hash identifier:          79/N41038Lq0xgCu6AgtDnJNJZoiaI5YLeGLsIRwom4=
Subject key identifier:   25:0E:07:5B:EC:A5:A7:5E:CC:BE:7D:B2:09:45:C3:36:17:54:47:EF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE9C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D63A5D2C45F11F0B50E6E32C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:35:58 +0000
ROA not before:           Mon 06 Jul 2026 16:35:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133638
IP address blocks:        103.40.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61084 (0xee9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:35:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd96d-0ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:de:52:2d:24:89:5b:66:31:eb:3a:f5:eb:
                    52:47:e1:58:ab:fe:c3:67:f7:a4:c8:a5:f5:91:14:
                    38:50:27:04:5f:16:67:b0:19:8a:f4:7e:e5:10:5b:
                    f7:a8:ca:22:65:24:95:91:a9:61:7d:39:53:00:ff:
                    84:8a:d9:06:7f:17:db:19:38:ec:cc:fa:03:6d:20:
                    0d:67:e5:3b:8c:e3:e1:32:94:e0:d0:b8:69:07:48:
                    00:55:5e:8d:5c:28:06:29:46:3e:35:b0:52:7c:f4:
                    8a:c7:d8:d8:25:75:c6:bd:6e:17:c5:f8:6f:0e:af:
                    bb:ba:f7:d4:2b:de:13:30:89:f7:08:3c:82:13:fc:
                    56:57:80:e9:c0:d6:be:59:a9:4a:1a:f6:57:f6:b0:
                    7e:70:67:59:43:75:5d:63:cf:08:45:8c:6a:9e:93:
                    b6:4b:a6:25:ee:17:f3:4b:e5:0c:8e:5b:cb:a7:3a:
                    d4:d6:e0:43:8d:9b:73:ea:99:fb:94:38:b4:a9:bf:
                    2f:33:c9:a8:56:4e:bf:ef:51:a0:7d:2a:95:a9:cc:
                    df:27:44:20:33:61:f1:51:31:29:20:73:19:2d:b5:
                    6c:79:d5:fd:1d:bc:83:e3:42:b5:bf:15:51:ae:35:
                    f4:b4:87:db:74:4c:19:f0:8a:ac:dd:c0:35:ae:1b:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0E:07:5B:EC:A5:A7:5E:CC:BE:7D:B2:09:45:C3:36:17:54:47:EF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D63A5D2C45F11F0B50E6E32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:11:a8:cd:14:26:a3:40:fd:d5:b4:1c:f3:de:3f:06:9a:14:
         2c:53:ea:8e:02:a7:01:20:f3:ae:9b:67:03:29:b6:e8:0c:5b:
         4a:54:77:5c:bf:e7:c7:e9:f7:e3:23:71:7f:4e:83:be:ac:26:
         19:af:42:c9:d8:7f:f5:aa:d6:a5:ef:0a:62:0b:84:c4:8a:ea:
         58:71:05:01:c2:2a:e2:b6:8f:13:1f:55:a5:0d:81:31:10:d5:
         e0:f8:83:ac:81:52:8d:4b:78:f1:8b:30:ba:9c:20:cc:a9:1a:
         c3:b4:d5:d2:6d:f7:94:21:b8:e6:c6:2c:7c:72:7f:19:d2:49:
         8a:75:57:61:ce:33:50:b3:c9:be:5a:2e:7b:85:3f:0d:ca:ac:
         ae:42:92:47:ae:55:54:f3:47:a9:15:b6:2e:72:0e:b5:3e:c1:
         10:cb:bf:f3:58:7f:47:ad:cc:19:e0:a8:ba:d3:2f:ce:a5:a3:
         33:89:66:10:de:03:a0:36:90:b4:ef:50:aa:34:eb:2d:f2:b6:
         ad:d9:c2:ca:ae:37:31:ff:90:1d:cf:29:70:44:e8:16:bc:00:
         d5:a8:fb:f6:eb:89:7a:17:20:4d:e1:a5:db:b5:f7:16:d6:49:
         ba:58:29:7c:59:a9:56:8e:2a:77:59:91:59:0a:2d:ad:ae:40:
         17:c7:cc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:22 2026 by rpki-client