Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa
File:                     7B451DC2871811EB84EC3663C4F9AE02.roa (raw, json)
Hash identifier:          kPww1F9ehY3c4DKKyGIYkkXfpFQLxyGSJpBWk672ghk=
Subject key identifier:   9C:01:85:B8:3E:48:AC:54:9E:2D:8B:32:E0:B6:1B:2A:BA:AE:CF:F2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:11:54 +0000
ROA not before:           Mon 06 Jul 2026 17:11:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141273
IP address blocks:        103.160.30.0/23 maxlen: 24
                          2001:df5:9280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62182 (0xf2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:11:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be1da-74bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:fb:f0:70:f7:59:f7:7e:c9:7e:6d:40:40:
                    b1:61:c0:12:d0:ef:db:21:79:72:de:1b:01:2d:09:
                    91:e9:5d:98:68:07:e0:15:a3:6c:63:63:3e:d2:7d:
                    36:b0:0f:d5:73:7e:b5:86:01:a3:68:66:7f:35:49:
                    f4:03:7b:47:19:d4:1b:eb:4e:fc:b7:09:eb:8a:04:
                    e6:4e:5b:1a:9b:44:29:f3:ce:0d:52:5f:58:bd:c0:
                    d2:94:d3:1d:34:16:f0:43:bd:53:7b:ad:d2:c3:14:
                    4b:37:bf:45:10:78:8c:15:ff:ee:11:43:c0:a9:d8:
                    73:98:53:7f:32:03:00:47:c8:16:89:2c:61:90:92:
                    6a:f0:cc:3c:ec:e8:c0:08:0a:1d:4e:7f:e0:a8:7d:
                    d4:c6:2a:12:c4:61:64:18:bc:6b:e8:c3:1a:e7:0f:
                    9e:5b:26:83:0b:6e:cd:1d:b2:1a:22:be:33:b1:02:
                    5c:45:3d:07:bb:1a:3e:db:30:b3:89:e1:da:c4:40:
                    2d:df:01:cf:64:87:45:84:1a:c0:fa:f8:9f:14:99:
                    bd:d7:69:c7:e5:65:61:a3:da:fe:67:43:59:ae:60:
                    2f:d4:b9:60:d9:03:64:8f:1f:08:56:38:10:73:2b:
                    a6:97:0e:1c:26:97:79:7a:06:92:f6:00:19:05:f5:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:85:B8:3E:48:AC:54:9E:2D:8B:32:E0:B6:1B:2A:BA:AE:CF:F2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B451DC2871811EB84EC3663C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.30.0/23
                IPv6:
                  2001:df5:9280::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:2a:d8:a6:be:27:56:6d:d2:14:7a:0d:8a:60:17:ce:5a:
         13:b3:a3:06:b6:6c:93:cb:87:b9:91:1a:b6:fd:a5:6d:5f:5c:
         c0:93:02:21:04:2f:d3:e3:1d:34:84:bc:b8:f2:e3:e8:64:6a:
         a8:67:26:1a:ff:26:4b:1c:b9:4a:e2:02:60:bc:d4:99:d0:8a:
         77:e5:87:93:1f:9e:41:4c:da:d9:4e:19:96:2a:92:a4:99:d5:
         86:7f:f2:34:b4:b5:02:58:c0:95:b2:3d:9f:bc:1c:13:5f:52:
         9e:e0:46:9f:97:e3:ef:15:02:60:09:24:53:fd:13:f3:d6:6f:
         b8:88:88:fa:ee:dc:f9:d1:d5:16:18:b6:e9:bf:a8:fc:4e:fa:
         97:a2:fc:a5:d3:31:42:65:4d:d9:b3:e3:2c:dc:84:6e:46:73:
         a3:4b:f4:3d:da:80:a3:62:ed:09:14:be:f5:1b:6f:11:0b:cc:
         25:cc:b4:27:e4:22:e0:44:87:c0:00:42:39:cd:03:da:a7:1a:
         40:22:d7:ef:a4:92:0b:c0:41:61:6e:d0:46:09:5b:77:a2:60:
         7c:cf:60:5f:45:74:e0:d4:44:e0:99:78:db:0c:ef:f4:06:b4:
         19:92:ce:b9:a6:70:69:6f:08:06:9c:6d:3c:58:ad:02:ed:bc:
         30:fb:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:21:00 2026 by rpki-client