Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87539C46B96411EBB7108270C4F9AE02.roa
File:                     87539C46B96411EBB7108270C4F9AE02.roa (raw, json)
Hash identifier:          FUVA3sP/5roZ/rXnlkQ4yzPCJfnKVX6Jn0BWY+MnAho=
Subject key identifier:   67:CC:7E:38:D8:46:EE:D3:6B:7C:8A:2B:68:07:48:F1:69:BE:52:78
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F010
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87539C46B96411EBB7108270C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:47:59 +0000
ROA not before:           Mon 06 Jul 2026 16:47:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135716
IP address blocks:        103.74.88.0/22 maxlen: 24
                          2407:5540::/32 maxlen: 32
                          2407:5540::/40 maxlen: 48
                          2407:5540:100::/40 maxlen: 48
                          2407:5540:200::/40 maxlen: 48
                          2407:5540:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61456 (0xf010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:47:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdc3e-4fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:4f:05:06:26:1f:85:c7:f9:7d:70:e3:79:
                    28:a1:60:e8:ea:20:86:95:ae:57:cc:71:d8:48:d7:
                    ad:7a:eb:56:a1:27:84:61:d0:2e:b6:6d:bf:11:6b:
                    30:ab:15:6f:7c:22:30:29:09:ef:cf:4f:67:d9:f8:
                    1f:07:59:0f:94:ef:82:cd:bb:78:ea:cf:cb:c8:49:
                    f6:42:5a:3c:86:c9:5d:42:78:74:b3:4b:cb:45:de:
                    f9:25:2c:32:15:e3:98:27:35:5a:8e:be:f4:66:2f:
                    8a:42:1a:47:7a:eb:67:a2:63:47:ed:88:c2:53:de:
                    da:0a:6c:52:a2:bd:d5:47:20:75:d7:5e:83:26:be:
                    a1:3e:99:6f:78:70:90:33:63:d0:71:84:24:d0:08:
                    6e:d6:49:ec:ed:cb:7c:01:47:78:bc:9d:3c:89:bb:
                    6e:e4:b7:d3:59:a6:ee:ca:41:0e:0e:20:a8:00:65:
                    6b:9b:6f:47:4b:ac:a3:7d:2f:e4:8c:03:3d:1c:5a:
                    3d:9a:e9:d9:85:9b:18:0f:4b:e1:83:23:cc:9b:d7:
                    2b:78:93:d2:1b:5b:44:14:c4:d0:85:66:b7:3b:f2:
                    db:8b:38:19:45:ba:be:f7:f1:70:a6:f5:a7:ca:e9:
                    ee:aa:90:24:06:2e:12:eb:7d:55:ec:25:0b:f9:0f:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:7E:38:D8:46:EE:D3:6B:7C:8A:2B:68:07:48:F1:69:BE:52:78
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87539C46B96411EBB7108270C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.88.0/22
                IPv6:
                  2407:5540::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:48:bc:3a:73:a0:96:87:f8:78:74:1b:57:1a:86:ce:b8:
         37:56:66:35:db:3a:af:90:25:23:9b:30:7a:63:93:c7:a2:89:
         d9:be:3b:64:de:da:b5:0c:4f:00:3d:e3:55:6a:ea:98:ab:71:
         df:8d:df:29:79:2a:32:cd:76:27:9a:6b:a3:99:18:c1:4d:94:
         01:1f:ce:b3:fb:35:74:34:ca:27:3c:ca:4b:bf:9e:5d:c8:61:
         c3:26:74:df:88:2b:42:7d:04:9e:68:cc:a6:32:a7:5c:dc:3a:
         65:d0:81:40:de:3a:59:d5:08:f3:a3:27:c6:b9:b0:74:00:0e:
         36:66:b7:e0:8b:38:f3:f3:d0:07:46:f2:8a:81:04:98:d9:ef:
         03:98:ef:64:4f:40:e4:33:56:5f:ca:4b:2b:67:78:e1:7c:02:
         b1:08:fb:0f:23:7a:d9:4c:8e:cf:b5:55:67:d9:60:5e:39:6d:
         96:ee:a2:1a:fd:57:f0:8a:93:01:69:e9:de:bf:18:79:5e:5c:
         24:ad:1c:15:60:fd:78:7e:5f:ea:61:24:64:24:93:7d:12:d2:
         1c:90:cb:ac:75:3e:71:dd:dd:cd:27:ef:80:20:8a:e0:70:a6:
         4f:3e:0d:56:e3:61:3b:91:88:52:64:d1:a1:71:24:2d:0a:83:
         04:87:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:57:10 2026 by rpki-client