Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/842973F20C4D11EB9E4DB780C4F9AE02.roa
File:                     842973F20C4D11EB9E4DB780C4F9AE02.roa (raw, json)
Hash identifier:          tVGZa5JvNcGsLahVfQiQMYG4xU+VgreFgYgwfl24La8=
Subject key identifier:   15:80:B5:EE:C8:6D:FA:E3:92:49:FE:41:53:B9:BB:C7:D5:13:AC:23
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F1DA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/842973F20C4D11EB9E4DB780C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:03:02 +0000
ROA not before:           Mon 06 Jul 2026 17:03:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138275
IP address blocks:        103.133.57.0/24 maxlen: 24
                          103.157.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61914 (0xf1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:03:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdfc6-41f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:69:44:7a:3c:a9:9c:34:de:f1:52:af:92:
                    ed:5a:34:c4:44:fb:da:07:e0:ac:a2:47:fd:55:b0:
                    9b:5a:da:72:b7:d7:7c:fb:7f:30:f5:9d:30:3f:3a:
                    9b:40:0c:6d:44:27:cd:27:7d:bc:21:4d:46:96:ac:
                    48:82:55:78:d3:46:42:64:28:c3:f1:db:da:b0:8d:
                    26:5b:b0:6a:e0:2d:53:e1:35:42:80:c8:14:e9:83:
                    af:83:54:23:43:84:c6:3e:01:33:29:0f:af:93:d1:
                    6c:22:db:39:6a:f8:c4:7c:07:fc:5f:75:99:f0:25:
                    0f:a4:24:ea:73:3f:ae:83:85:a6:64:55:b4:35:06:
                    24:b2:86:1c:1f:1b:1f:4b:81:37:cc:61:e9:42:ba:
                    2b:29:49:e1:5b:b3:99:4d:e9:f0:3e:30:b3:f4:6e:
                    fc:d7:5e:e3:f3:3c:75:7f:4a:f3:b2:7d:6d:89:81:
                    e2:3d:c1:2a:53:da:1b:5f:60:62:12:19:62:4e:1e:
                    82:f8:6c:43:e5:28:3a:1f:0a:ea:44:c7:9b:ba:8a:
                    49:95:88:2a:17:d4:40:6b:60:73:04:38:28:1d:50:
                    e7:69:ed:00:83:5f:5d:d7:6f:9d:58:22:91:2d:bc:
                    31:31:7c:17:dd:0c:82:d5:41:f7:06:e7:b1:d1:26:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:80:B5:EE:C8:6D:FA:E3:92:49:FE:41:53:B9:BB:C7:D5:13:AC:23
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/842973F20C4D11EB9E4DB780C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.57.0/24
                  103.157.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b0:bd:31:16:24:37:50:dd:ec:39:25:0e:b4:4f:76:60:db:
         80:3b:dc:ff:86:00:1d:d8:a2:57:74:b5:dc:7b:68:84:66:86:
         b1:98:21:48:38:9e:88:bd:06:a2:58:84:a0:db:57:5e:12:16:
         08:e3:6b:0d:6a:db:5c:66:91:cc:ea:18:c6:1e:7c:27:79:12:
         7a:9a:21:9b:cb:8c:54:17:51:45:b1:19:24:66:81:8f:91:87:
         d3:6f:73:ae:11:66:73:17:d5:ae:8d:98:1b:75:23:0e:a0:34:
         67:9d:a4:26:db:49:34:f3:aa:60:44:0f:f3:94:67:d9:d9:1b:
         a4:41:3e:37:79:6c:3f:b5:44:86:77:6c:70:df:d3:c5:a4:e4:
         3a:d3:9d:3b:0c:fd:44:68:c8:43:d8:54:ff:7f:25:22:94:e4:
         6b:d3:1d:35:14:e2:29:9b:29:bb:30:95:18:2c:1b:a3:c7:da:
         85:54:f8:89:3c:e2:d2:b4:f4:2c:9d:c7:9d:33:91:08:64:05:
         7e:42:2f:7b:73:45:8c:87:d0:38:90:76:d7:1e:e4:2c:7f:49:
         06:32:d4:18:1b:75:ec:7d:56:e1:77:43:39:3d:d7:b3:44:57:
         4b:af:29:7c:26:af:07:a4:c9:c5:d5:dd:71:ec:d1:ab:55:71:
         eb:0b:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:57 2026 by rpki-client