Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7711D3F4BDE111EAAEFB6D58C4F9AE02.roa
File:                     7711D3F4BDE111EAAEFB6D58C4F9AE02.roa (raw, json)
Hash identifier:          ikjT26iWUBpbzD0l357nYBtkcMfqq2MfeCmrgpMvw9o=
Subject key identifier:   51:B1:26:C9:6B:3B:40:02:8E:28:E8:00:CD:BB:D5:64:A7:30:64:BB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F737
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7711D3F4BDE111EAAEFB6D58C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:48:49 +0000
ROA not before:           Mon 06 Jul 2026 17:48:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18105
IP address blocks:        202.122.16.0/21 maxlen: 21
                          202.122.16.0/24 maxlen: 24
                          202.122.17.0/24 maxlen: 24
                          202.122.18.0/24 maxlen: 24
                          202.122.19.0/24 maxlen: 24
                          202.122.20.0/24 maxlen: 24
                          202.122.21.0/24 maxlen: 24
                          202.122.22.0/24 maxlen: 24
                          202.122.23.0/24 maxlen: 24
                          202.131.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63287 (0xf737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:48:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea80-0deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:33:6f:bb:06:73:05:15:34:27:f4:af:42:
                    c6:5c:f4:75:e7:64:57:53:f4:2a:a2:94:43:8d:69:
                    b1:a6:95:da:b0:93:09:61:8d:ce:b8:69:7e:f6:cb:
                    07:02:9a:aa:a3:87:62:81:7d:f1:db:2e:05:4c:e7:
                    68:5e:84:3b:60:43:43:8d:6f:55:36:0a:3c:c6:a5:
                    e9:2f:3c:a4:91:a1:b4:07:36:b6:5d:ac:a5:c7:e0:
                    ac:3e:a7:fc:4c:3f:db:3f:d6:bc:ea:c1:0d:d0:13:
                    7a:62:3f:18:94:58:49:ca:06:46:39:f1:87:e7:09:
                    ca:4b:91:c2:06:8f:5c:57:33:f2:63:8e:70:ce:18:
                    73:2d:81:9a:bf:a1:50:8a:90:e9:8c:44:0b:71:11:
                    e8:44:91:3c:84:30:57:8b:08:c4:60:14:94:35:9c:
                    f0:fd:a2:cf:a6:e5:b8:a0:f9:47:e5:2a:2f:44:b2:
                    36:37:9f:27:b5:fe:87:34:db:d4:dd:f1:44:3d:9f:
                    d8:03:6e:3e:14:4f:c3:e5:77:5d:74:30:95:d6:5e:
                    e6:c2:d9:43:d3:a7:84:76:d2:4b:a7:6d:4a:e4:c6:
                    5b:d3:c2:a4:87:f2:13:89:a2:6b:0e:f3:46:16:03:
                    67:ef:e2:41:26:c1:93:f9:70:ec:a6:36:55:90:83:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B1:26:C9:6B:3B:40:02:8E:28:E8:00:CD:BB:D5:64:A7:30:64:BB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7711D3F4BDE111EAAEFB6D58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.122.16.0/21
                  202.131.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:ac:39:b3:33:bd:00:93:16:9f:90:55:13:4d:4c:93:30:
         85:15:2d:76:66:e1:21:52:dd:1b:af:7f:ec:88:59:90:30:ec:
         f6:15:d5:bd:68:45:9d:29:28:5e:ad:e5:dd:70:94:e9:fe:91:
         cd:9f:c3:19:bf:a3:d0:cc:09:0b:2a:70:3e:13:31:d5:14:e6:
         30:0e:74:06:df:59:b2:a1:81:9e:88:27:13:ba:2a:bf:f2:a3:
         4c:81:20:18:94:90:9b:29:37:c2:fb:45:d6:a4:d1:31:1b:b2:
         29:9e:26:88:fe:35:b6:ba:8e:23:a1:b9:e7:fc:87:15:c2:71:
         18:f5:96:6d:ca:c2:51:69:f0:c8:51:04:d7:a5:bd:b1:ba:b0:
         8e:50:1d:17:b7:94:b4:9b:b9:54:a4:e3:87:c9:b3:71:48:e5:
         47:2d:d2:38:79:81:8e:c0:e3:9c:9f:74:c2:f3:77:f4:0f:ef:
         cb:be:d8:df:2e:47:ae:47:a2:03:2b:3b:58:ec:c4:1e:ce:ac:
         7a:ed:31:b3:e2:91:3d:66:b4:f3:fe:9f:46:79:b4:28:be:32:
         3e:e1:05:fe:16:e3:df:b2:4e:67:d5:47:be:aa:f4:54:35:1b:
         3c:da:83:98:4a:ae:28:7b:ab:e3:0c:1e:f1:85:04:68:29:37:
         75:ba:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:11 2026 by rpki-client