Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/848CB864821011ED900D8D83C4F9AE02.roa
File:                     848CB864821011ED900D8D83C4F9AE02.roa (raw, json)
Hash identifier:          s+7mk7rfvCSekNZjcdMKmxcWiYnWJoeHJ64utra5OCo=
Subject key identifier:   6E:4F:36:1B:34:A6:3F:29:14:7C:0B:FB:48:98:2C:72:54:F4:AC:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EEDA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/848CB864821011ED900D8D83C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:37:56 +0000
ROA not before:           Mon 06 Jul 2026 16:37:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133970
IP address blocks:        103.53.108.0/22 maxlen: 24
                          2001:df1:b6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61146 (0xeeda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:37:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd9e4-55b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:1b:61:17:dc:b5:0a:c9:5a:6b:bb:06:6a:
                    a0:34:ec:63:54:fb:58:43:57:75:27:36:f8:06:c4:
                    77:72:0c:d2:9b:53:47:1d:6c:59:0d:c7:7b:49:d5:
                    9a:ee:fe:c1:4f:ef:e1:31:16:73:7e:c8:53:43:e9:
                    4a:f1:ab:9b:6e:bb:3c:19:11:70:91:5d:32:fc:c0:
                    00:2f:8e:66:80:8a:41:90:74:0e:54:d7:cb:77:08:
                    21:2d:62:03:bb:86:b4:f5:5b:0b:95:3b:cb:c3:95:
                    08:5e:72:6b:d1:87:4d:fd:19:53:3f:a8:a5:29:b9:
                    fc:44:40:c8:3b:2b:85:1f:29:39:8f:a4:0c:ca:61:
                    c3:eb:d2:6c:2a:1d:09:56:6a:03:a5:03:aa:d5:76:
                    3d:84:ac:1b:8b:12:46:ea:6d:69:de:c9:09:49:fb:
                    33:1a:f5:08:65:6c:ce:f9:6e:07:7c:cd:22:10:8a:
                    8d:25:45:ce:30:10:a6:8d:99:a7:00:77:2b:1f:96:
                    12:eb:7f:a9:37:df:6f:43:24:dc:f3:58:08:7e:3c:
                    77:5f:38:7c:ae:95:24:45:72:f1:40:6d:85:29:22:
                    43:a2:16:d4:37:e1:44:8a:78:c7:6d:b5:a3:89:e8:
                    90:1e:f5:87:29:5a:d8:f2:d3:c4:36:ea:96:69:9f:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4F:36:1B:34:A6:3F:29:14:7C:0B:FB:48:98:2C:72:54:F4:AC:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/848CB864821011ED900D8D83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.108.0/22
                IPv6:
                  2001:df1:b6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:49:14:a5:cf:41:87:bb:7c:75:b1:e9:b9:58:7e:f6:ee:ff:
         28:b1:d3:08:a8:b2:d4:d5:5b:b7:36:45:92:bc:c0:b5:b0:07:
         8f:e8:b2:0f:28:3b:54:77:25:73:df:03:5b:c8:26:b9:94:3a:
         1c:01:28:1d:95:c4:3d:91:91:86:22:35:e0:26:28:e5:c8:19:
         d8:c3:3c:95:c1:45:89:b9:85:6a:d6:de:d9:81:2f:71:db:a7:
         af:ed:26:91:85:73:fa:14:1d:0c:2e:2e:3a:b0:3f:9c:99:2c:
         0f:e1:3a:66:a8:76:4f:da:ec:f9:9d:9f:45:52:59:f9:80:31:
         0f:3d:4a:c1:48:b9:09:a8:e8:31:30:c0:0f:65:58:3a:e7:a2:
         0d:e9:65:b5:a9:6b:dd:16:e1:5f:2c:1d:f2:f2:72:c6:34:23:
         ab:c7:57:f8:19:76:9a:38:71:62:da:ff:54:93:a2:e0:0a:55:
         d5:00:4d:96:b8:1d:5d:78:b7:c2:5f:73:f7:07:58:08:c7:96:
         b0:cd:17:6a:93:13:0d:7e:41:9e:69:7f:ce:2d:4d:61:fc:94:
         16:31:99:d5:cc:1d:b4:38:e8:9b:4c:b9:bd:a2:60:02:63:8c:
         fd:8b:85:1b:b5:f9:19:c0:38:ac:6b:bc:5c:18:89:82:a1:5f:
         5a:9b:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:09 2026 by rpki-client