Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/716002EAFCD411EB9A1BD21CC4F9AE02.roa
File:                     716002EAFCD411EB9A1BD21CC4F9AE02.roa (raw, json)
Hash identifier:          31ODq2z5mVachh9DAowvcVBS5EewwHQleqmQuuS5oeE=
Subject key identifier:   1F:87:EC:1E:06:FA:CF:99:7F:62:EB:D3:16:88:E8:03:F9:54:C6:FE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE63
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/716002EAFCD411EB9A1BD21CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:34:04 +0000
ROA not before:           Mon 06 Jul 2026 16:34:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133243
IP address blocks:        103.210.144.0/22 maxlen: 24
                          139.5.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61027 (0xee63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:34:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd8fc-9826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:f9:c7:fa:3f:da:5b:47:d2:14:36:53:92:
                    66:15:e6:d2:9b:6d:ce:b0:21:a6:35:24:13:55:f2:
                    e6:da:56:6e:bc:61:41:ed:d6:64:2e:02:f0:11:89:
                    16:1f:80:9f:ac:2f:ec:a2:2a:6d:4c:1e:73:45:8d:
                    2e:37:ee:3f:bf:25:1f:56:11:29:c2:e2:57:45:fa:
                    38:94:b9:d2:55:ee:6c:d5:9b:47:ec:bd:b0:f2:5f:
                    ec:94:17:e2:fc:9f:4a:07:27:17:0d:08:25:98:c5:
                    81:5d:e9:a4:f4:50:31:c0:bd:af:d9:59:3e:f3:9c:
                    3c:e8:ea:67:71:a3:ae:09:83:b8:be:67:ea:15:c9:
                    ed:8e:1c:ed:55:31:cf:d9:8e:15:a6:98:12:d6:69:
                    b6:26:63:2c:19:e5:ba:7f:81:3c:df:2f:d9:c5:a2:
                    6e:f9:69:87:be:b3:42:7a:36:48:7e:30:83:dd:97:
                    0b:87:e5:dc:fe:b0:96:fd:ed:be:cd:dc:00:93:47:
                    74:01:dc:e5:34:f3:0c:64:ba:08:b5:0e:22:a7:7e:
                    31:f8:62:dc:19:73:f6:14:95:70:c4:b4:90:2e:0a:
                    ed:ce:0c:e9:1c:13:23:b9:88:ab:6d:c8:2a:7d:ef:
                    28:ab:30:34:f6:8d:7d:69:a2:31:c2:07:55:23:29:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:87:EC:1E:06:FA:CF:99:7F:62:EB:D3:16:88:E8:03:F9:54:C6:FE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/716002EAFCD411EB9A1BD21CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.144.0/22
                  139.5.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:77:9b:5f:40:ac:ed:5a:0d:91:31:a2:22:e7:1a:98:6f:fe:
         14:7c:5f:cb:00:44:03:ba:b1:4a:79:09:cc:85:db:02:7b:67:
         cc:9f:30:92:e9:39:21:98:01:1d:50:1b:3d:93:00:67:c5:c8:
         0b:4b:fd:d3:35:76:04:e4:d7:71:67:7c:11:e5:08:62:88:b5:
         90:e5:ab:f0:ba:6e:8f:01:83:2d:db:1f:57:f3:89:df:e9:3e:
         50:a1:c3:91:9a:1d:9f:4d:4c:2a:45:07:9a:1a:85:7a:31:15:
         d3:78:79:ff:42:b9:52:8f:4e:0f:da:46:ba:42:ef:05:5c:aa:
         3b:c6:5f:ef:d0:51:a3:69:cf:76:a8:d6:84:17:b7:68:1e:42:
         13:ff:6f:52:04:a9:6e:cb:7b:9e:73:ff:d5:44:70:d2:73:dd:
         c8:b3:71:9f:5f:8d:a8:dd:44:03:58:73:43:83:4f:b1:9a:b7:
         dd:33:f0:a8:79:92:59:a5:3d:16:1c:bf:04:f9:92:33:a9:3f:
         c0:e2:e8:ff:df:9e:85:29:0a:07:9b:e3:1e:25:2f:ee:0c:b7:
         f0:77:88:1c:54:49:6c:7c:8a:1c:aa:58:99:de:75:45:80:32:
         8f:85:71:3c:fd:f6:ae:b3:28:3c:4f:33:93:5a:e2:2c:91:78:
         fb:e0:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:11 2026 by rpki-client