Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E14E952268C11EC9F319460C4F9AE02.roa
File:                     6E14E952268C11EC9F319460C4F9AE02.roa (raw, json)
Hash identifier:          fWdR25nA//iYVWIEtjUBrK04TRKfmpu+aKPjVaW/5OM=
Subject key identifier:   AD:9D:B5:20:EE:6B:00:D2:1A:99:83:A1:67:97:50:CA:40:90:E3:DA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EF9C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E14E952268C11EC9F319460C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:44:17 +0000
ROA not before:           Mon 06 Jul 2026 16:44:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134934
IP address blocks:        103.129.12.0/24 maxlen: 24
                          2001:df6:6100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61340 (0xef9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:44:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdb60-bd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:1b:28:66:71:c8:93:7e:60:fb:54:0d:db:
                    e9:0d:42:3e:dd:d4:94:70:c0:6f:11:c3:de:15:e7:
                    f2:30:c4:3f:a6:7a:cc:55:f6:cf:be:be:ab:56:75:
                    58:fc:86:00:46:9d:30:ec:cd:4c:a6:88:66:b3:d1:
                    37:e4:4d:b2:6a:88:a1:ac:81:10:2a:f0:3b:86:86:
                    e3:0b:2d:40:4c:93:42:81:16:70:23:f5:e1:b5:83:
                    46:11:b1:2a:30:a4:5f:76:fa:6b:99:b6:6f:29:c4:
                    48:6a:65:d5:04:15:fd:f2:69:92:df:9a:95:3a:cf:
                    e4:73:4f:3a:86:04:eb:f1:ed:08:01:ff:7c:03:60:
                    41:07:00:72:35:82:67:69:cd:a9:36:07:f1:04:d9:
                    50:70:00:6e:15:59:48:05:9d:b8:2f:a3:05:37:3e:
                    7e:2d:c7:2c:0e:dc:6d:a9:9c:3a:26:9b:32:1b:d6:
                    2f:70:42:e4:a8:e2:5f:06:45:74:6d:f3:1f:b7:68:
                    f1:54:0d:37:f4:23:50:8d:d7:2e:5b:d8:ab:7d:62:
                    e7:10:9e:0d:2a:13:21:ff:0f:42:69:16:bb:79:27:
                    62:19:52:5a:4b:ee:eb:a8:98:7b:e9:3f:58:c9:86:
                    13:34:79:85:28:fe:2a:9e:76:0d:2f:22:c3:b8:5b:
                    d6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9D:B5:20:EE:6B:00:D2:1A:99:83:A1:67:97:50:CA:40:90:E3:DA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E14E952268C11EC9F319460C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.12.0/24
                IPv6:
                  2001:df6:6100::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:d6:f3:03:47:4a:78:a0:fe:a4:72:40:0a:61:8b:db:4e:
         35:8c:00:1d:39:42:7e:29:e7:6a:82:16:a0:79:a8:44:0e:c6:
         f1:4e:54:44:b2:fd:12:1e:c9:0a:d9:98:01:1b:a1:c0:20:78:
         85:88:99:d8:57:7f:77:27:e7:eb:1f:08:c8:5d:98:a1:3f:d6:
         15:f5:f7:c7:80:ef:00:15:54:d5:00:eb:c1:ce:82:1a:ba:44:
         2b:33:c7:ca:c9:20:45:75:ff:0d:ff:a0:b4:c6:4e:85:f7:92:
         a0:85:c0:2f:ac:6b:dd:a5:8a:37:1b:8a:9f:df:c4:81:00:1d:
         ad:64:0d:17:e4:8f:0a:2b:78:3e:54:dd:07:a5:f3:e5:85:4e:
         cc:c6:8d:74:28:39:f7:cf:be:17:6a:ea:5a:52:ad:bc:ab:61:
         d3:f5:45:d0:9b:70:a7:4c:f4:2c:64:d9:f9:b6:67:6f:34:9b:
         35:71:cb:32:dd:f2:49:6c:37:0d:2f:6b:f8:84:50:e0:be:07:
         cf:38:93:0d:de:f0:d1:7d:54:09:4d:42:c9:57:61:93:92:11:
         1e:6a:8e:b2:65:7b:42:5d:b2:16:e6:4a:91:66:7e:de:67:e3:
         42:12:34:c0:cd:8f:04:b9:a7:4d:0a:6e:11:b6:53:ed:3a:41:
         b3:84:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:32 2026 by rpki-client