Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/729A0F4C296311EBB9162A15C4F9AE02.roa
File:                     729A0F4C296311EBB9162A15C4F9AE02.roa (raw, json)
Hash identifier:          wxpRqHOlFrobZ3zqKnC46L8HoeOgCYmXC4pXBFNcrdg=
Subject key identifier:   B0:19:B5:00:5F:41:3E:93:79:01:C5:C0:5F:B5:3E:3C:76:82:7E:8C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2EB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/729A0F4C296311EBB9162A15C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:12:05 +0000
ROA not before:           Mon 06 Jul 2026 17:12:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141281
IP address blocks:        103.158.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62187 (0xf2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:12:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be1e5-2c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:d9:fe:98:86:54:3b:07:91:96:e9:70:aa:
                    87:23:4c:05:1e:57:2b:34:22:b5:81:6c:c3:16:ca:
                    34:91:d5:f3:bb:c7:e8:e7:a1:65:af:7a:c0:51:99:
                    13:2d:0e:4e:67:29:45:f1:45:ee:74:b5:f2:8a:a9:
                    10:60:15:37:98:5c:30:df:16:16:51:2a:8c:1c:31:
                    85:db:67:21:0b:22:a8:cb:f4:d8:1d:d4:6f:eb:ee:
                    16:e5:49:4e:03:a6:fa:ad:f6:69:09:f8:5c:e5:2f:
                    cc:86:f9:af:30:de:14:56:21:21:68:82:c6:f6:06:
                    a6:8f:ef:c0:fd:71:8b:ea:09:48:f7:7f:15:1c:7a:
                    08:37:39:40:70:75:e0:1c:dc:d3:0a:8b:42:2b:74:
                    62:7d:d5:28:a1:db:cc:9c:06:8b:24:2a:ce:ae:b2:
                    e3:3a:78:f8:f9:72:d6:11:ba:22:ca:7c:74:af:0b:
                    4b:f9:76:51:f3:17:e1:39:d3:b8:cc:f8:27:d2:a9:
                    89:0e:23:8c:d4:72:e0:72:dd:f0:2e:47:ab:e4:9d:
                    14:0d:86:2c:ca:b7:2f:2d:9b:8b:c5:f4:a5:d1:d2:
                    67:21:5b:05:0e:1f:bf:cc:6b:8b:38:b0:31:14:ee:
                    05:c8:38:11:52:46:63:c8:e5:4d:18:41:fd:2d:65:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:19:B5:00:5F:41:3E:93:79:01:C5:C0:5F:B5:3E:3C:76:82:7E:8C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/729A0F4C296311EBB9162A15C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:3c:4b:a7:13:e4:bc:48:8e:37:ce:28:e7:1f:4c:f9:7f:
         d2:d0:8a:97:e0:6e:3d:13:7a:c4:e1:3c:73:89:ac:7d:95:b4:
         f0:32:a2:ea:54:ee:9d:d4:ac:31:08:0a:4e:53:50:0e:c8:f2:
         4a:93:5e:7c:30:c4:48:cd:2a:45:54:e1:d4:52:78:81:ae:55:
         61:d4:6a:e1:0e:08:1c:13:65:51:a0:d4:85:01:82:91:cc:f4:
         0e:c1:81:b9:11:16:e5:49:f8:c3:3f:a2:e8:b6:19:9d:1b:99:
         45:40:3e:11:c2:b6:b5:14:54:2b:d2:93:60:76:0a:13:fa:2f:
         87:a8:1e:fc:c5:90:e7:ad:3d:0e:92:d8:08:5b:a7:37:4b:34:
         b2:d0:a9:70:ce:42:8a:85:92:ad:a7:df:e9:0e:29:fe:fb:d6:
         77:e6:8b:2b:fd:4a:93:b0:ce:ad:33:c6:7b:04:fb:65:ef:64:
         1e:5d:17:cf:1d:e8:52:da:0c:54:9e:15:ad:42:73:fc:0d:90:
         e4:06:0e:52:d5:20:57:46:82:4b:6f:05:e8:c0:c5:00:96:26:
         c1:eb:87:a3:c6:4c:85:43:f9:d3:f2:8b:aa:da:8c:0b:ff:01:
         d2:1d:2f:07:53:64:2c:87:0a:8b:60:47:3c:10:d6:31:b6:9c:
         32:d1:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:28 2026 by rpki-client