Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DC7029003E811F0BC711714C4F9AE02.roa
File:                     6DC7029003E811F0BC711714C4F9AE02.roa (raw, json)
Hash identifier:          392lSggOpy4Ms/CTCe/3S5JgiuWy1ZAm37HUZCr1R9M=
Subject key identifier:   F5:D1:C2:22:E4:A0:88:14:8B:8D:B6:D6:23:E6:A0:5E:A6:74:AC:97
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F436
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DC7029003E811F0BC711714C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:23:21 +0000
ROA not before:           Mon 06 Jul 2026 17:23:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147177
IP address blocks:        103.118.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62518 (0xf436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:23:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be489-d11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:1c:e8:69:bf:81:b2:5e:11:00:dc:82:d2:
                    f6:83:ac:27:ac:ab:3a:bb:45:7e:c0:11:8e:64:ea:
                    15:4c:67:42:ef:0d:4d:fc:a0:7c:1a:5a:3f:be:5c:
                    e3:ca:61:b3:01:66:b6:f7:6c:f0:a8:a2:55:be:83:
                    14:82:03:a1:ee:e6:61:48:f5:53:12:4c:86:9b:14:
                    1e:d9:39:d2:ab:0b:5f:76:f5:a8:14:08:6f:86:46:
                    83:8e:3b:32:83:c6:d7:05:1f:c4:c2:14:6a:64:ed:
                    80:90:2c:9f:42:8b:a3:55:9e:1d:c9:b6:c5:24:43:
                    0d:a8:fd:6c:0d:80:8f:23:de:8e:45:87:f6:0b:6f:
                    3c:88:5e:2c:62:2c:88:bf:70:72:98:0b:b6:4c:cd:
                    b2:53:dd:d1:c6:e1:e1:a0:b1:7a:3a:fd:df:30:53:
                    81:01:b2:13:5d:81:66:e3:46:41:cb:32:fa:29:90:
                    6c:07:80:a4:bb:21:8a:29:63:0e:a2:02:c8:fa:fd:
                    44:ef:37:21:91:68:6e:c9:22:29:c1:52:9c:52:44:
                    b0:bb:bf:f8:cf:8c:0a:88:e7:82:ce:97:b0:9a:2f:
                    0d:fd:86:b0:45:17:f2:59:e0:dd:9e:b0:f4:43:9c:
                    cc:13:85:b8:4c:66:27:25:8a:60:ba:d7:ad:9d:a0:
                    a9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D1:C2:22:E4:A0:88:14:8B:8D:B6:D6:23:E6:A0:5E:A6:74:AC:97
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DC7029003E811F0BC711714C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:c6:20:b1:12:d5:fd:ae:35:2d:e6:fd:f4:6f:4a:d2:e5:
         c7:06:0a:f3:e4:ab:bd:14:03:3e:35:ef:2d:d3:e5:62:76:9f:
         23:96:93:e0:74:54:ca:2e:fd:54:8b:a4:64:78:9a:60:20:48:
         97:f7:1f:90:4b:a1:71:84:b0:be:71:29:9b:fe:9e:95:b1:e4:
         06:9e:15:9d:11:2c:15:29:04:24:20:5a:b2:f2:55:08:12:dd:
         29:b9:fd:cf:ee:58:33:04:a7:13:3f:cd:a9:45:73:59:51:c1:
         c3:b3:ae:17:e1:a4:36:2f:2c:75:da:48:62:7a:58:22:a1:0c:
         f6:1b:33:55:ad:67:aa:b7:a6:42:f3:10:48:1d:66:3b:e4:9d:
         f3:c5:bd:2a:19:4b:9d:a8:b2:5b:5d:66:d9:bc:9c:09:9a:f7:
         ab:54:ce:a9:8b:c9:6e:04:b3:d3:c2:01:39:a4:0c:54:e8:14:
         af:de:05:1f:da:8d:88:0f:c8:8b:31:db:b9:3f:c9:52:a1:1b:
         eb:be:4e:9b:c4:73:cc:eb:23:62:01:27:1f:40:f7:04:a3:30:
         3c:77:a9:28:cd:e0:19:5c:6b:da:d6:31:7d:c9:c9:9d:c8:61:
         26:2e:07:86:6d:ee:b1:68:dd:43:a4:bf:98:41:bb:b6:3f:8a:
         5e:66:de:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:43 2026 by rpki-client