Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa
File:                     7CBF7E8E72B011EC964C6B3CC4F9AE02.roa (raw, json)
Hash identifier:          J7wO4/pyuJ1IzRXqtCWyN1Nz1jAowrA6+Oibz2Y3wDk=
Subject key identifier:   85:59:6A:77:BA:77:FB:A1:FC:D9:D8:29:70:C6:4B:5E:51:ED:42:C3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F198
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:00:47 +0000
ROA not before:           Mon 06 Jul 2026 17:00:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137646
IP address blocks:        103.118.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61848 (0xf198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:00:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdf3e-6030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:0c:4c:92:62:8f:b1:0d:23:9f:2e:ab:b5:
                    53:1f:a2:e9:67:c9:79:9a:d1:46:6f:05:b1:3f:9e:
                    fe:87:9b:48:a3:08:e4:2f:fb:12:9e:7f:1d:15:1d:
                    9f:36:a8:70:2a:1f:8b:f5:f6:bb:9e:b9:3d:65:99:
                    f7:69:2f:5b:a3:e4:1d:a4:44:31:e8:31:65:ad:bd:
                    3c:4b:91:b3:d7:24:24:59:bd:2f:ce:0a:cd:c9:36:
                    dc:7f:c7:e6:48:97:7b:93:6a:d7:95:1e:05:6a:ee:
                    3e:24:d7:82:c6:5e:70:7d:75:c0:07:34:81:44:7a:
                    0d:6c:bb:3f:68:fb:1c:01:60:20:a4:83:a1:a8:4a:
                    b9:e0:b4:3b:d9:3e:94:30:3c:8a:21:a2:26:ce:19:
                    ed:81:44:c3:03:5c:d8:66:46:62:f7:a7:81:14:3c:
                    7f:d8:f9:d4:08:a5:b2:82:d7:57:84:2a:da:26:1d:
                    3b:fc:42:0f:2a:3b:cf:6a:7a:da:73:d4:78:17:87:
                    f8:d8:77:ca:f4:ec:53:3a:49:77:6e:c8:65:2c:b7:
                    f6:ad:d4:b7:5b:71:7c:63:42:e5:f2:b8:ac:4e:ac:
                    cc:72:1d:a1:a4:8d:84:73:ae:0e:6e:c6:e5:d2:05:
                    7d:9e:7c:6e:5a:c8:ab:3d:49:35:88:a9:27:f1:62:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:59:6A:77:BA:77:FB:A1:FC:D9:D8:29:70:C6:4B:5E:51:ED:42:C3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBF7E8E72B011EC964C6B3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:29:67:31:d6:a0:c4:ac:27:f8:8a:3a:af:07:79:e6:62:
         7a:08:ed:87:fe:41:f5:32:fc:a5:50:bf:2b:e1:a4:09:9c:1c:
         d8:11:f0:bd:fc:aa:3b:78:ac:24:f9:58:bc:c3:dd:b0:cc:1c:
         6e:9c:35:8b:24:16:e3:f4:33:1b:d7:60:af:b6:cc:41:62:98:
         86:8b:98:e5:87:74:32:5c:b4:b1:f9:8b:b4:f3:f1:2d:5d:29:
         b9:27:7d:88:c4:53:1b:cd:68:14:aa:46:88:5c:51:2b:44:c5:
         a6:dd:1c:cc:b6:28:49:31:7b:fa:17:6c:22:eb:6e:12:7b:44:
         e7:b5:db:e0:ab:0e:5a:bb:f6:a5:8c:35:1f:14:3d:5b:1d:e3:
         ac:f1:b8:2d:db:3d:c9:e3:a8:55:05:91:71:33:21:b1:06:fe:
         33:2d:f5:cf:62:bb:d6:b6:6e:b4:f0:49:86:c2:88:55:8c:6e:
         11:78:ef:60:a2:92:75:cf:f6:ad:f5:75:47:f4:af:02:be:72:
         e1:16:d4:f0:9e:47:2b:68:79:81:5d:76:64:c7:da:42:79:55:
         b2:ee:b2:86:d7:4f:a0:0e:f8:4b:6f:13:a1:91:e4:73:17:30:
         bd:f1:21:39:4a:ea:61:67:64:00:fe:0c:00:47:c0:33:6d:07:
         f2:dd:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:41 2026 by rpki-client