Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76AAFDACF4F811EFB884CE4BC4F9AE02.roa
File:                     76AAFDACF4F811EFB884CE4BC4F9AE02.roa (raw, json)
Hash identifier:          mdZ0U3azKPRdpyV5o6ZIYGo2CUqcMTsP/UxuaV6cGW8=
Subject key identifier:   00:7A:5C:F4:BF:4D:D8:93:6E:DE:42:E8:BD:A1:79:CE:E8:95:7D:BB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE30
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76AAFDACF4F811EFB884CE4BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:32:24 +0000
ROA not before:           Mon 06 Jul 2026 16:32:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132955
IP address blocks:        103.76.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60976 (0xee30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:32:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd897-1b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1a:7d:01:22:f4:9d:a5:43:69:f4:dd:da:89:
                    8d:25:36:10:48:ce:ed:b9:a8:6c:c6:1e:44:bf:ee:
                    2a:42:46:b7:90:01:9a:cc:f5:eb:2e:0a:bf:4e:b0:
                    1d:45:67:20:1a:3f:48:0a:71:5b:a5:1b:cd:b2:fd:
                    b1:df:19:16:4f:cd:17:36:c2:ed:c8:80:84:4d:40:
                    b1:c1:cf:0a:77:3b:be:cf:b4:27:d2:ec:86:d9:53:
                    cf:b2:f6:26:43:b0:bc:f0:29:c8:aa:28:2e:e6:68:
                    fa:e3:9a:cb:6a:2a:41:43:be:49:a3:26:92:c6:83:
                    22:aa:3a:ca:5d:08:66:65:0f:ad:12:f6:b8:d2:05:
                    54:40:fe:54:f4:b3:24:66:73:24:7f:2d:ba:63:f0:
                    61:26:5f:1c:64:1b:15:ad:6d:6b:9d:02:94:47:33:
                    b6:60:0e:36:56:3a:d4:78:30:5c:75:c9:62:35:18:
                    83:c5:e0:20:06:7b:d9:0c:3f:2d:4d:ec:9f:ad:ae:
                    3d:be:73:e5:79:71:69:2e:97:4c:1d:83:39:f3:f0:
                    e7:03:5e:6e:43:46:cc:da:52:9a:67:fc:86:10:91:
                    07:50:c8:73:72:8c:ea:73:38:67:35:1a:7c:65:df:
                    21:61:c9:da:2c:b3:ff:fa:a9:92:f9:60:9d:40:0c:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7A:5C:F4:BF:4D:D8:93:6E:DE:42:E8:BD:A1:79:CE:E8:95:7D:BB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76AAFDACF4F811EFB884CE4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:e6:34:79:68:31:11:63:c7:8e:87:59:54:e2:35:b1:7c:
         ab:c0:b4:5d:84:df:6b:5b:cc:75:47:0b:75:14:27:25:db:3e:
         3e:39:89:4f:9b:f6:30:fd:6e:e5:ed:ed:6e:43:23:4a:b1:3a:
         dd:98:5e:c5:bf:17:5b:66:8a:cb:ce:c0:7e:ed:d8:59:80:71:
         ac:ee:8e:e0:0e:fb:d9:f9:86:e7:9a:0c:32:09:4a:24:b8:b6:
         fe:d5:fc:fe:2a:cf:46:f9:08:d9:5e:8f:74:f0:2f:5a:e9:45:
         00:fc:be:a9:eb:c3:b4:48:28:3a:a0:95:73:50:17:96:66:42:
         0e:13:06:3b:83:ea:2c:e2:1a:84:58:42:75:57:07:50:fd:31:
         5c:22:0e:af:3f:3b:8f:80:b4:b9:51:42:0e:2d:d5:84:64:27:
         e1:92:f4:71:4e:2b:c5:75:32:92:da:d0:2e:da:31:ce:38:1a:
         4b:0b:67:4b:69:a3:d4:87:c2:c1:5a:86:13:d8:2b:3f:c1:18:
         0c:b0:21:33:7f:f9:f9:7f:5f:b3:4d:00:f0:19:d2:34:b1:07:
         d0:37:c9:d1:d5:79:a7:33:6f:71:a7:20:30:cf:8f:61:b2:0b:
         f3:8b:09:89:d0:d4:21:d4:53:8c:ba:38:66:de:83:dd:4c:6b:
         42:bb:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:45 2026 by rpki-client