Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/831E5D1CA38011EC98BD3909C4F9AE02.roa
File:                     831E5D1CA38011EC98BD3909C4F9AE02.roa (raw, json)
Hash identifier:          B6UUA9dYQs8rKvhXREWebE2qCIxVKPS0XdRLRAdxbec=
Subject key identifier:   7C:BC:CF:9C:4D:48:BA:34:64:9E:46:3F:F8:30:E8:3A:E7:01:AA:ED
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EF65
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/831E5D1CA38011EC98BD3909C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:42:29 +0000
ROA not before:           Mon 06 Jul 2026 16:42:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134856
IP address blocks:        103.25.164.0/24 maxlen: 24
                          103.182.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61285 (0xef65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:42:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdaf5-73c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:2b:04:27:f0:c3:d6:23:ee:a1:39:c8:90:
                    b6:5b:af:0e:f4:4f:9e:bb:86:1a:4b:c8:a0:c4:c1:
                    24:33:a9:14:24:f2:a9:8a:5d:7c:04:02:1c:c7:42:
                    54:16:7a:47:5f:8d:57:39:82:87:ba:22:54:88:be:
                    9a:7a:fb:38:70:a2:90:60:83:e4:96:8d:ff:cd:15:
                    9b:18:35:ae:19:ed:0c:74:d9:b3:d0:bb:5c:fe:29:
                    06:ba:ce:52:45:13:da:ae:38:aa:b0:f2:84:20:eb:
                    07:8e:23:e3:5d:50:11:6b:90:00:33:2b:fa:ad:ab:
                    6c:c5:61:63:6b:15:d5:58:80:51:4f:a8:6f:f9:8d:
                    d8:bb:20:43:dd:6c:b6:2d:df:16:c0:af:7c:83:d8:
                    fa:af:23:17:34:07:03:78:5e:51:52:95:9e:1d:41:
                    1e:91:4c:05:51:7b:22:6b:e4:0e:19:7e:32:40:8c:
                    34:82:67:3c:a5:e9:dc:6b:30:73:1f:87:92:fe:1a:
                    70:20:a6:8d:65:45:28:da:76:e3:11:5b:ff:bf:dc:
                    ce:bf:7f:db:0e:37:3b:75:b0:8c:d7:83:2a:d4:9e:
                    c9:1b:70:94:88:f5:01:e1:c3:e0:30:1e:37:80:e4:
                    b1:a0:1e:f5:1f:39:2f:57:58:61:1a:9f:de:7e:68:
                    56:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BC:CF:9C:4D:48:BA:34:64:9E:46:3F:F8:30:E8:3A:E7:01:AA:ED
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/831E5D1CA38011EC98BD3909C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.164.0/24
                  103.182.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:28:3d:18:69:36:35:6e:f8:4b:ee:48:37:d0:f8:94:90:4b:
         0a:7b:e3:13:4f:cb:7b:4d:8a:43:0b:e3:39:94:9f:98:dc:ee:
         19:68:b8:70:f4:ff:05:37:55:73:bc:33:25:40:c4:6f:13:36:
         ee:b5:77:61:62:da:54:a4:a1:f5:16:9c:df:ee:fc:12:a9:17:
         ed:f4:07:c5:a3:b8:c0:f3:32:6f:b3:2a:ea:40:f5:a1:67:f9:
         70:2a:0d:af:5a:59:6f:5e:ba:12:cc:25:fc:5c:02:ee:5e:16:
         45:5c:8c:38:62:06:74:4d:b2:43:2a:f9:43:5e:ee:67:56:c5:
         de:8f:a9:eb:23:6d:4d:7f:bb:28:29:70:63:ee:f2:a0:d4:eb:
         f4:21:ce:41:19:14:dc:0f:70:51:07:f7:1f:78:14:12:85:8c:
         1b:25:77:7a:17:19:02:f5:3b:63:c2:11:70:00:75:ab:51:e0:
         4f:88:61:73:cc:81:54:3c:bf:9a:63:11:47:70:69:4c:24:15:
         40:9a:7e:87:65:c6:f7:c1:2f:41:d0:fc:44:36:ef:aa:22:8e:
         53:fe:ec:d8:d1:ba:ba:62:64:0a:36:9b:b8:03:75:ed:ff:72:
         95:e5:ae:2f:b1:db:b7:d2:ba:fc:30:5a:22:d5:8c:4b:cc:e0:
         c9:78:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:32 2026 by rpki-client