Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa
File:                     732F297C151E11ECA422CD83C4F9AE02.roa (raw, json)
Hash identifier:          1WVLH2HnJ/GxnFfFy9lpJKzmwn0x4j9mmVTzdq/NPIQ=
Subject key identifier:   69:7A:A9:E5:6A:51:3F:44:53:C7:40:26:93:40:B0:6B:04:EE:76:BB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F40E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:21:55 +0000
ROA not before:           Mon 06 Jul 2026 17:21:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146890
IP address blocks:        103.173.20.0/23 maxlen: 24
                          2001:df1:cb40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62478 (0xf40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:21:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be432-cd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:ff:c1:d6:76:59:9a:1a:ae:13:74:55:ef:
                    90:8b:7b:bb:36:7b:28:ed:6a:90:a9:33:32:32:fa:
                    ba:10:69:3b:d6:8b:2b:fa:d8:3e:42:00:bf:ad:fc:
                    74:92:53:2b:49:5b:95:1c:16:52:7f:78:1b:90:fd:
                    26:76:a4:6a:be:0a:a5:9b:b4:94:ce:7a:0a:d0:1e:
                    6e:1c:db:00:f5:35:60:e3:dc:9d:f5:e5:aa:5e:8e:
                    0b:87:f5:e1:fe:9e:a5:d9:0c:58:47:03:1d:f0:21:
                    7f:32:ab:ee:a9:db:69:96:bc:27:07:aa:02:4b:60:
                    8e:17:c4:09:13:d1:a9:ee:64:98:dd:8c:13:ef:2e:
                    8d:b9:4c:cf:74:58:f2:2c:2c:b0:79:b2:f6:55:65:
                    05:e6:38:12:f2:3e:e8:93:f4:47:90:c3:2e:8a:a1:
                    5e:fb:b0:6d:fa:a5:46:a9:96:16:a5:2f:1a:2f:41:
                    2d:5c:4d:54:63:2d:51:f0:d8:d7:1b:dd:63:8f:f8:
                    79:9e:29:15:3f:6c:6c:fc:bc:43:6f:79:7c:4e:97:
                    bb:3a:e5:d8:db:97:cf:c6:0b:4a:ba:04:65:fb:fe:
                    32:0b:23:b5:21:2e:27:82:f5:41:5d:a0:3a:76:c2:
                    aa:2d:65:5b:91:62:c4:68:e5:97:fa:a8:32:00:9f:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:A9:E5:6A:51:3F:44:53:C7:40:26:93:40:B0:6B:04:EE:76:BB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.20.0/23
                IPv6:
                  2001:df1:cb40::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:73:8c:68:33:1b:08:03:43:04:e3:89:3d:27:98:9f:c9:99:
         20:e4:04:22:a0:df:d9:8a:cc:e5:28:9d:69:43:e0:fb:37:09:
         68:bf:4b:a7:9a:3c:bd:8a:a6:c7:4e:8d:7f:43:54:bb:8b:de:
         6f:41:a4:e5:17:a3:10:04:17:b1:25:df:8d:4c:57:98:c4:d0:
         1b:f0:e4:e2:6b:c2:a6:ea:26:3b:d0:a4:61:26:70:96:d8:c2:
         c4:7a:30:9d:ab:e5:fc:4f:f1:bd:e4:d3:f7:de:52:82:0c:c5:
         71:e0:54:48:22:d6:24:d2:4d:27:9e:88:d3:8f:9b:5d:1c:16:
         40:43:a9:be:6d:83:5c:c2:e5:36:d6:fc:f0:89:06:92:d1:6a:
         b1:45:28:23:a1:49:3c:b6:e1:50:db:eb:df:e2:54:55:d0:e7:
         2e:ff:ab:9e:a1:db:df:d6:42:b1:83:4a:fb:de:f1:ce:e6:21:
         a8:23:5f:10:cd:ce:41:0d:0f:f4:dc:f4:14:41:13:6f:80:f9:
         f0:22:af:c2:e7:a5:33:55:8a:b8:cd:72:e5:55:0c:ae:9e:f1:
         58:d5:67:64:61:bd:8c:e9:84:41:17:72:f9:66:d8:cd:9f:95:
         63:87:ed:06:86:29:12:54:5c:3d:76:9b:69:51:0a:f4:87:d2:
         a2:50:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:56 2026 by rpki-client