Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1C4E2542D11F1950B51CC9D833773.roa
File:                     87B1C4E2542D11F1950B51CC9D833773.roa (raw, json)
Hash identifier:          qh/9WhB71Bq4ZBy/TyRyoZs8MlmEPxPZ7r6RqhVapq4=
Subject key identifier:   DB:BE:9B:71:4D:9B:7C:33:54:BE:C2:4B:00:3C:72:D5:2A:9D:F8:E3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F780
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1C4E2542D11F1950B51CC9D833773.roa
Signing time:             Mon 06 Jul 2026 17:51:15 +0000
ROA not before:           Mon 06 Jul 2026 17:51:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     46475
IP address blocks:        103.106.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63360 (0xf780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:51:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4beb13-b08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:34:de:91:85:0b:45:3e:71:ae:26:e5:83:
                    d3:27:a8:be:92:ca:0f:65:8c:65:ca:61:d1:cf:ad:
                    81:aa:5b:66:b5:11:97:0a:0f:5c:ec:1b:63:24:7d:
                    3e:87:c6:e5:d3:2e:d8:1e:94:00:f1:57:ea:bf:77:
                    60:c6:10:0c:02:4d:9b:04:bf:83:e5:cf:3f:64:36:
                    90:a4:a0:2f:87:1b:28:92:8a:78:b7:45:ec:a1:7f:
                    5b:eb:4f:cc:17:2a:58:6f:df:f3:02:15:9f:dc:f6:
                    ef:99:34:39:ed:92:c2:ce:4d:6a:f5:e9:37:de:93:
                    43:95:fd:e3:5f:6b:58:2d:21:23:0e:9b:a5:86:ce:
                    38:65:b1:ea:0a:d7:0b:54:76:9b:c4:94:9c:ab:bc:
                    b9:8b:73:bb:3e:74:b1:2f:34:91:b9:7e:c8:68:da:
                    88:26:d8:c3:97:d2:75:6e:47:70:3f:d5:ac:80:ef:
                    0a:c8:0a:24:b7:14:dd:62:c1:02:c7:f5:19:bf:04:
                    17:14:e0:78:2d:0e:ac:4b:43:a3:38:79:4b:57:33:
                    81:6e:63:c1:f8:bd:6f:0d:d4:ce:99:6b:89:02:51:
                    7e:01:de:19:40:fe:06:2f:7c:69:7d:df:2e:e6:f7:
                    99:38:f3:76:ce:45:88:73:3d:a0:55:f3:4b:94:5b:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:9B:71:4D:9B:7C:33:54:BE:C2:4B:00:3C:72:D5:2A:9D:F8:E3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1C4E2542D11F1950B51CC9D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:d3:d3:98:b4:66:6a:4e:27:3c:c0:50:67:75:55:36:ac:
         79:ce:1d:e4:08:ae:d4:6f:3e:75:5f:7f:3a:fe:36:2d:d7:a1:
         b5:1b:95:26:83:e5:00:00:92:02:2c:c7:8d:ed:fa:84:ba:a7:
         bd:64:f5:01:8a:54:0b:94:ca:ce:80:90:30:52:7b:88:c5:ec:
         99:eb:35:06:eb:d5:b7:ca:ce:02:cb:5c:ff:55:88:f5:b1:43:
         f6:38:eb:00:67:08:dc:17:25:aa:bd:eb:9c:ca:44:b3:d1:a3:
         8c:ee:8c:15:ef:41:fb:2d:74:27:a0:cc:89:30:8c:e9:a0:b7:
         45:34:05:f8:fa:01:d4:23:2b:2e:8c:dd:bb:ff:de:dd:0a:9c:
         a8:eb:98:60:aa:95:c8:d1:31:81:d4:3f:61:5b:ae:78:8a:9e:
         fd:70:c9:27:c1:30:a4:51:c1:e8:f1:f2:e2:54:ff:47:36:92:
         cc:54:b3:35:88:f0:32:84:9f:1b:d0:09:1a:e3:ec:32:ee:27:
         45:8f:4a:8e:b5:38:24:dd:63:19:3e:76:98:f8:9c:98:01:81:
         53:d8:d5:57:c5:87:ce:60:18:20:f4:8b:d3:0d:69:71:7f:1b:
         f2:18:e9:14:54:df:b0:3e:eb:cd:3c:f6:d4:fe:8e:09:b9:19:
         3e:a6:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:44 2026 by rpki-client